recent upgrade to gnutls to 2.6.1 makes claws-mail crash under slackware 12.1

kite · 11-13-2008, 07:33 AM

I read the changelog and did the recompilation of claws-mail for sure but claws-mail still crashed. I sent email to claws-mail mailing list and learned that it is because of bug of gnutls 2.6.1. Now gnutls 2.6.2 is out to fix this. Hope Pat will have package of it to fix it as well. For now I stick with gnutls 2.2.2

rworkman · 11-13-2008, 02:52 PM

How do you reproduce the crash? I've not noticed it here (yet?).

trickykid · 11-13-2008, 03:15 PM

Quote:

Originally Posted by kite

I read the changelog and did the recompilation of claws-mail for sure but claws-mail still crashed. I sent email to claws-mail mailing list and learned that it is because of bug of gnutls 2.6.1. Now gnutls 2.6.2 is out to fix this. Hope Pat will have package of it to fix it as well. For now I stick with gnutls 2.2.2

Why wait for Patrick when you can build your very own? Give me a few minutes and I'll have the latest 2.6.2 built for Slackware 12.1.

trickykid · 11-13-2008, 03:21 PM

Here you go: http://www.trickykid.org/file_downlo....2-i486-1.tgz&

I keep my small repository of my Slackware builds at http://trickykid.org/slackware/

kite · 11-13-2008, 07:33 PM

Well, the crash was related to self-signed certificates, claws-mail might not crash in your situation, please see a part of the changelog of gnutls as following:

* Version 2.6.2 (released 2008-11-12)

** libgnutls: Fix crash in X.509 validation code for self-signed certificates.
The patch to fix the security problem GNUTLS-SA-2008-3 introduced a
problem for certificate chains that contained just one self-signed
certificate. Reported by Michael Meskes <meskes@debian.org> in
<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=505279>.