On 22.09.2012 07:13, LukeKendall wrote:
> Public bug reported:
> 
> fetchmail release 6.3.9-rc2+GSS+NTLM+SDPS+SSL+NLS+KRB5.
> Running on Ubuntu 10.04 kernel 2.6.38-14-generic-pae
> Connecting to Australian ISP Optus.
> For some months, mail delivery would stop after a few days.  Recently the 
> period before delivery stops shrank down to just hours.
> Finally I investigated instead of just restarting fetchmail.
> 
> The last fetchmail message in the log file was an "awakened" message from the 
> day before - like
> it just died silently or locked up.  Behold (manual restart at 21:51 next 
> day):
> 
> Sep 19 22:32:35 posher fetchmail[24324]: awakened at Wed 19 Sep 2012 22:32:35 
> EST
> Sep 19 22:32:36 posher fetchmail[24324]: sleeping at Wed 19 Sep 2012 22:32:36 
> EST for 60 seconds
> Sep 19 22:33:36 posher fetchmail[24324]: awakened at Wed 19 Sep 2012 22:33:36 
> EST
> Sep 20 21:51:17 posher fetchmail[24324]: terminated with signal 15

It gets manually stopped and restarted here, signal 15 is SIGTERM.

> Fetchmail is still running:
> 
> 31791 ?        Ss     0:11 /usr/bin/fetchmail -f /etc/fetchmailrc
> --pidfile /var/run/fetchmail/fetchmail.pid --syslog
> 
> 0xb7808424 in __kernel_vsyscall ()
> (gdb) where
> #0  0xb7808424 in __kernel_vsyscall ()
> #1  0xb7464d43 in read () from /lib/tls/i686/cmov/libc.so.6
> #2  0xb75d2677 in ?? () from /lib/i686/cmov/libcrypto.so.0.9.8
> #3  0xb75d06ad in BIO_read () from /lib/i686/cmov/libcrypto.so.0.9.8
> #4  0xb76a1316 in ssl3_read_n () from /lib/i686/cmov/libssl.so.0.9.8
> #5  0xb76a193e in ssl3_read_bytes () from /lib/i686/cmov/libssl.so.0.9.8
> #6  0xb76a2ab6 in ssl3_get_message () from /lib/i686/cmov/libssl.so.0.9.8
> #7  0xb769bf19 in ssl3_get_server_certificate ()
>    from /lib/i686/cmov/libssl.so.0.9.8
> #8  0xb769d7e8 in ssl3_connect () from /lib/i686/cmov/libssl.so.0.9.8
> #9  0xb76b275a in SSL_connect () from /lib/i686/cmov/libssl.so.0.9.8
> #10 0x0804d4b5 in ?? ()
> #11 0x08069619 in ?? ()
> #12 0x0805648f in ?? ()
> #13 0x08068e88 in ?? ()
> #14 0x0804e8d8 in ?? ()
> #15 0x0805108c in ?? ()
> #16 0xb73bdbd6 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
> #17 0x0804b721 in ?? ()

If it stalls here for many minutes, then it is likely a case of
CVE-2011-1947, which got fixed in fetchmail 6.3.20, and Ubuntu failed to
backport the fix - or upgrade the package to 6.3.22.

I advise packagers to upgrade the supported Ubuntu packages all the way
to 6.3.22; and note that the Debian packages have not backported all bug
fixes either.

http://www.fetchmail.info/security.html

Luke, as a workaround, try adding "ssl" to your configuration - that
will switch from STARTTLS to SSL-wrapped mode, and may avoid the
problem, you may instead observe timeout errors in the logs then.

Regarding --syslog vs. --logfile, do not set both of the options, just
one of them.


** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-1947

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1054447

Title:
  fetchmail stops fetching mail

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/fetchmail/+bug/1054447/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to