fetchmail: Fetchmail 6.2.5-12sarge1 hast broken APOP. Query status=4 (PROTOCOL)

[Debian Bug Importer]

Automatically imported from Debian bug report #327893 http://bugs.debian.org/327893

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Mon, 12 Sep 2005 21:46:00 +0200
From: =?utf-8?q?Claudio_Andr=C3=A9_Till_Clemens?= <email address hidden>
To: Debian Bug Tracking System <email address hidden>
Subject: fetchmail: Fetchmail 6.2.5-12sarge1 hast broken APOP. Query status=4
 (PROTOCOL)

Package: fetchmail
Version: 6.2.5-12sarge1
Severity: important

Hello,

I'm having now problems with the security version of fetchmail,
6.2.5-12sarge1. The previous version (6.2.5-12) was working perfectly.
The problem seems to come only with APOP as Protocol, and only if there
is more than one messages in the pool. When I change to POP3 it works
again, but that is not an option. fetchmail claims it is allways a
protocol error.

Here the output of fetchmail -vvvvv:

fetchmail: 6.2.5.2 querying pop.gmx.net (protocol APOP) at Mon Sep 12 21:04:42 2005: poll started
fetchmail: Issuer Organization: Thawte Consulting cc
fetchmail: Issuer CommonName: Thawte Premium Server CA
fetchmail: Server CommonName: pop.gmx.net
fetchmail: pop.gmx.net key fingerprint: 72:DB:3F:37:00:18:5E:58:91:1B:C5:41:02:2D:98:21
fetchmail: Warning: server certificate verification: unable to get local issuer certificate
fetchmail: Issuer Organization: Thawte Consulting cc
fetchmail: Issuer CommonName: Thawte Premium Server CA
fetchmail: Server CommonName: pop.gmx.net
fetchmail: Warning: server certificate verification: certificate not trusted
fetchmail: Issuer Organization: Thawte Consulting cc
fetchmail: Issuer CommonName: Thawte Premium Server CA
fetchmail: Server CommonName: pop.gmx.net
fetchmail: Warning: server certificate verification: unable to verify the first certificate
fetchmail: POP3< +OK GMX POP3 StreamProxy ready <29090.1126551882@mp022>
fetchmail: POP3> APOP ******* ********************************
fetchmail: POP3< +OK mailbox has 11 messages (1319754 octets)
fetchmail: POP3> STAT
fetchmail: POP3< +OK 11 1319754
11 messages for 3537782 at pop.gmx.net (1319754 octets).
fetchmail: cannot get a range of message sizes (1-11).
fetchmail: POP3> QUIT
fetchmail: POP3< +OK bye
fetchmail: client/server protocol error while fetching from pop.gmx.net
fetchmail: 6.2.5.2 querying pop.gmx.net (protocol APOP) at Mon Sep 12 21:04:48 2005: poll completed
fetchmail: Query status=4 (PROTOCOL)
fetchmail: normal termination, status 4

I'll try then the version for sid (6.3.5-18). Maybe there is no problem
with unstable :).

CU

Claudio Clemens

-- System Information:
Debian Release: 3.1
Architecture: i386 (i686)
Kernel: Linux 2.6.8
Locale: LANG=de_DE.UTF-8@euro, LC_CTYPE=de_DE.UTF-8@euro (charmap=UTF-8)

Versions of packages fetchmail depends on:
ii adduser 3.63 Add and remove users and groups
ii base-files 3.1.2 Debian base system miscellaneous f
ii debconf 1.4.30.13 Debian configuration management sy
ii debianutils 2.8.4 Miscellaneous utilities specific t
ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an
ii libssl0.9.7 0.9.7e-3 SSL shared libraries

-- no debconf information

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Mon, 12 Sep 2005 23:30:58 +0200
From: Nico Golde <email address hidden>
To: Claudio =?iso-8859-1?Q?Andr=E9?= Till Clemens <email address hidden>,
        <email address hidden>
Cc: <email address hidden>
Subject: Re: Bug#327893: fetchmail: Fetchmail 6.2.5-12sarge1 hast broken APOP. Query status=4
 (PROTOCOL)

--M/SuVGWktc5uNpra
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

merge 323027 327893
* Claudio Andr=E9 Till Clemens <email address hidden> [2005-09-12 23:08]:
> Package: fetchmail
> Version: 6.2.5-12sarge1
> Severity: important
>=20
> I'm having now problems with the security version of fetchmail,
> 6.2.5-12sarge1. The previous version (6.2.5-12) was working perfectly.
> The problem seems to come only with APOP as Protocol, and only if there
> is more than one messages in the pool. When I change to POP3 it works
> again, but that is not an option. fetchmail claims it is allways a
> protocol error.

Yes it seems like the new version made by the security team=20
lost its support for apop :(

> Here the output of fetchmail -vvvvv:
[...]=20
> I'll try then the version for sid (6.3.5-18). Maybe there is no problem
> with unstable :).

Yes that would be nice, since I am not using apop. Please=20
report if it works so if it does we can provide a fixed=20
package.
Regards Nico

--=20
Nico Golde - JAB: <email address hidden> | GPG: 0x73647CFF
http://www.ngolde.de | http://www.muttng.org | http://grml.org=20
VIM has two modes - the one in which it beeps=20
and the one in which it doesn't -- encrypted mail preferred

--M/SuVGWktc5uNpra
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDJfOSHYflSXNkfP8RAhzaAJwKWJrEPxCqzb8juqos49drMwjxTgCfXhZ0
v0g3GSIU3RD7f7nn3YC+jro=
=fSIx
-----END PGP SIGNATURE-----

--M/SuVGWktc5uNpra--

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Tue, 13 Sep 2005 06:44:34 +0200
From: Claudio Clemens <email address hidden>
To: Nico Golde <email address hidden>
Cc: <email address hidden>
Subject: Re: Bug#327893: fetchmail: Fetchmail 6.2.5-12sarge1 hast broken APOP. Query status=4
 (PROTOCOL)

--dDRMvlgZJXvWKvBx
Content-Type: text/plain; charset=iso-8859-15
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

2005-09-12, 23:30 +0200, Nico Golde:
> * Claudio Andr=E9 Till Clemens <email address hidden> [2005-09-12 23:08]:
> > Package: fetchmail
> > Version: 6.2.5-12sarge1
> > Severity: important
=2E..
>=20
> Yes it seems like the new version made by the security team=20
> lost its support for apop :(
>=20
> > I'll try then the version for sid (6.3.5-18). Maybe there is no problem
> > with unstable :).
>=20
> Yes that would be nice, since I am not using apop. Please=20
> report if it works so if it does we can provide a fixed=20
> package.

APOP Works again using 6.3.5-18.

Regards

Claudio

--=20
+- .''`. ---| Dipl.-Inf. Univ. Claudio Clemens |------| Sarge |-------+
| : :' : asturio at gmx (.) net GNU/Linux User #79942 |
| `. `' http://asturio.gmxhome.de/begin.html |
| `- "YE GODS, I HAVE FEET??!" <- Userfriendly |
*** TURN OFF YOUR SYSTEM NOW !!! ***

--dDRMvlgZJXvWKvBx
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDJlkyd4jGrCHoMHoRAhy5AKDJIxMDuGVlbvwHVb9nqbJXgKTanwCdG5uP
IBLsgFwlrBhjngkFmTTrJHU=
=uOJy
-----END PGP SIGNATURE-----

--dDRMvlgZJXvWKvBx--

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Tue, 13 Sep 2005 22:58:16 +0200
From: Nico Golde <email address hidden>
To: Claudio Clemens <email address hidden>
Cc: Nico Golde <email address hidden>, <email address hidden>
Subject: Re: Bug#327893: fetchmail: Fetchmail 6.2.5-12sarge1 hast broken APOP. Query status=4
 (PROTOCOL)

--UPT3ojh+0CqEDtpF
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,
* Claudio Clemens <email address hidden> [2005-09-13 22:21]:
> 2005-09-12, 23:30 +0200, Nico Golde:
> > * Claudio Andr=E9 Till Clemens <email address hidden> [2005-09-12 23:08]:
> > Yes it seems like the new version made by the security team=20
> > lost its support for apop :(
> >=20
> > > I'll try then the version for sid (6.3.5-18). Maybe there is no probl=
em
> > > with unstable :).
> >=20
> > Yes that would be nice, since I am not using apop. Please=20
> > report if it works so if it does we can provide a fixed=20
> > package.
>=20
> APOP Works again using 6.3.5-18.

Mhm ok, then I hope we can provide a fixed package for=20
stable asap. Can I mail you for testing?
Regards Nico
--=20
Nico Golde - JAB: <email address hidden> | GPG: 0x73647CFF
http://www.ngolde.de | http://www.muttng.org | http://grml.org=20
VIM has two modes - the one in which it beeps=20
and the one in which it doesn't -- encrypted mail preferred

--UPT3ojh+0CqEDtpF
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFDJz1oHYflSXNkfP8RAiN+AKCgascDRGLtvfWGUp6AcYmGUb2QewCglYIf
6zz/A1AiLDbcFXIoBpSAnvs=
=/xjn
-----END PGP SIGNATURE-----

--UPT3ojh+0CqEDtpF--

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Sat, 29 Oct 2005 15:31:20 +0200
From: <email address hidden> (Matthias Andree)
To: <email address hidden>

tags 323027 + grave

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Sat, 29 Oct 2005 15:54:40 +0200
From: <email address hidden> (Matthias Andree)
To: <email address hidden>

severity 323027 grave

[Debian Bug Importer (debzilla)]

Marking as duplicate based on debbugs merge (323027,327893)

This bug has been marked as a duplicate of bug 24758.

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Sat, 5 Nov 2005 13:10:13 +0100
From: Nico Golde <email address hidden>
To: <email address hidden>
Subject: merging #327893 #323027

--dDRMvlgZJXvWKvBx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

merge 327893 323027
# Hi,
# the APOP problem is pretty much the same so I merge the=20
# bugs.

--=20
Nico Golde - JAB: <email address hidden> | GPG: 0x73647CFF
http://www.ngolde.de | http://www.muttng.org | http://grml.org
Forget about that mouse with 3/4/5 buttons -
gimme a keyboard with 103/104/105 keys!

--dDRMvlgZJXvWKvBx
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDbKEkHYflSXNkfP8RAiOKAJ9vUK88W8nCLDrU1x/2I8O5ONFVhgCdG0k/
F94CevuGykWb/e3PH1C37WU=
=m4wl
-----END PGP SIGNATURE-----

--dDRMvlgZJXvWKvBx--

[Debian Bug Importer (debzilla)]

Message-ID: <email address hidden>
Date: Mon, 21 Nov 2005 08:56:58 +0100
From: Nico Golde <email address hidden>
To: <email address hidden>
Cc: <email address hidden>
Subject: APOP support

--bp/iNruPH9dso1Pn
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,
can you check if it the APOP support is working with the=20
latest version in sarge(sarge3)?
Regards Nico

--=20
Nico Golde - JAB: <email address hidden> | GPG: 0x73647CFF
http://www.ngolde.de | http://www.muttng.org | http://grml.org
Forget about that mouse with 3/4/5 buttons -
gimme a keyboard with 103/104/105 keys!

--bp/iNruPH9dso1Pn
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDgX3KHYflSXNkfP8RAkocAKCfVt+77TpBa58cEteoYqVnYgb0SACgoKBf
B7NDapOWlwFj7Vek/Tz9kS8=
=JfVZ
-----END PGP SIGNATURE-----

--bp/iNruPH9dso1Pn--

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Mon, 09 Jan 2006 11:11:49 +0100
From: =?ISO-8859-1?Q?H=E9ctor_Garc=EDa?= <email address hidden>
To: <email address hidden>
Subject:

--=-98I7cJjDy2fdsNn/jP62
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

merge 323027 327893
thanks

--=-98I7cJjDy2fdsNn/jP62
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQBDwjblMwsDi2xjdG0RAkhmAKC5dx71PMbyuzEfU4GnnqyjocJQcwCfaHHq
3Dh+mlfWAKAI+wCyU/f8oMA=
=++8S
-----END PGP SIGNATURE-----

--=-98I7cJjDy2fdsNn/jP62--

[Debian Bug Importer (debzilla)]

Message-Id: <email address hidden>
Date: Mon, 09 Jan 2006 11:43:49 +0100
From: =?ISO-8859-1?Q?H=E9ctor_Garc=EDa?= <email address hidden>
To: <email address hidden>
Subject: Closing fixed bug

--=-8tQ07ymOgHtoVIm0H2jn
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi,

This bug was fixed on version 6.2.5-12sarge3 uploaded by the security
team.

Thanks for reporting bugs,

H=C3=A9ctor

--=-8tQ07ymOgHtoVIm0H2jn
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQBDwj5lMwsDi2xjdG0RAtIzAKCuyPj1Q2gBrAQ/lleyu8IbdMwi1gCfWPLl
TjTGBmQhy1JZ9kCCBlD0qmo=
=O47k
-----END PGP SIGNATURE-----

--=-8tQ07ymOgHtoVIm0H2jn--