[Secure-testing-team] Bug#638823: [claws-mail] POP-SSL defunct after upgrade of libgnutls26

[Th. Klein]

Package: claws-mail
Version: 3.7.9-1
Severity: important
Tags: security
X-Debbugs-CC: secure-testing-team at lists.alioth.debian.org

--- Please enter the report below this line. ---
Using claws-mail for about half a year, I am unable to use SSL with
POP3 for fetching my emails for more than a week now. 
Disabling SSL fetches als email as always, however this is not viable
from a security point of view. 
The log file (POP+SSL) says: 
---- Begin: Claws-Mail log file ---- 
* Connecting to POP3 server: pop.gmx.net...
[21:02:24] POP3< +OK POP server ready H migmx105
[21:02:24] POP3> USER <username>
[21:02:24] POP3< +OK password required for user "<username>"
[21:02:24] POP3> PASS ********
[21:02:24] POP3< +OK mailbox "<username>" has 2280 messages
(207473193 octets) H migmx105 [21:02:24] POP3> STAT
[21:02:24] POP3< +OK 2280 207473193
[21:02:24] POP3> UIDL
[21:02:24] POP3< +OK
[21:02:24] POP3> LIST
[21:02:24] POP3< +OK
** Session timed out. You may be able to recover by increasing the
timeout value in Preferences/Other/Miscellaneous.
---- End: Claws-Mail log file ----

Timeout value is set to 20 seconds. 

I suppose the issue is an upgrade within libgnutls26; I am not too
technical, but these links might be helpful for you: 
1.) bug report: claws relying on deprecated commands of gnutls
    http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=624062
2.) bug report: behaviour of gnutls26 changed, problems with claws-mail 
    https://savannah.gnu.org/support/index.php?107660

I have claws-mail-dbg package installed, yet to run gdb I need
help, and then I am willing to post the outpot here...  :-) 

Cheers, 
Thomas
--- System information. 
--- Architecture: i386
Kernel:       Linux 3.0-1.slh.7-aptosid-686

Debian Release: wheezy/sid
  500 unstable        www.debian-multimedia.org 
  500 unstable        cdn.debian.net 
  500 unstable        aptosid.com 

--- Package information. ---
Depends                    (Version) | Installed
====================================-+-==============
libc6                       (>= 2.7) | 2.13-16
libcairo2                 (>= 1.2.4) | 1.10.2-6.1
libcompfaceg1                        | 1:1.5.2-5
libdbus-glib-1-2           (>= 0.78) | 0.94-4
libenchant1c2a              (>= 1.6) | 1.6.0-3
libetpan15                  (>= 1.0) | 1.0-4
libgcrypt11               (>= 1.4.6) | 1.4.6-9
libgdk-pixbuf2.0-0       (>= 2.22.0) | 2.23.5-3
libglib2.0-0             (>= 2.24.0) | 2.28.6-1
libgnutls26            (>= 2.9.11-0) | 2.12.7-6
libgtk2.0-0              (>= 2.20.0) | 2.24.5-4
libice6                 (>= 1:1.0.0) | 2:1.0.7-2
libldap-2.4-2             (>= 2.4.7) | 2.4.25-3
libpango1.0-0            (>= 1.14.0) | 1.28.4-3
libpisock9                           | 0.12.5-4
libsm6                               | 2:1.2.0-2
xdg-utils                            | 1.1.0~rc1-2


Recommends                    (Version) | Installed
=======================================-+-===========
claws-mail-i18n                         | 
xfonts-100dpi                           | 1:1.0.3
 OR xfonts-75dpi                        | 1:1.0.3
 OR xfonts-100dpi-transcoded            | 1:1.0.3
 OR xfonts-75dpi-transcoded             | 1:1.0.3
aspell-en                               | 7.1-0-1
 OR aspell-dictionary                   | 


Suggests               (Version) | Installed
================================-+-============
claws-mail-doc       (= 3.7.9-1) | 
www-browser                      | 
gedit                            | 
 OR kwrite                       | 4:4.6.5-1
 OR mousepad                     | 
 OR nedit                        | 
claws-mail-tools                 |