From cc9397414a655cab4c47de6559e69ecda06530cc Mon Sep 17 00:00:00 2001 From: Matthias Andree Date: Thu, 26 May 2011 01:29:34 +0200 Subject: Revert SO_???TIMEO-based STARTTLS timeout handling. This reverts commits 47c05b10018f5ec7493e4bd9f521aaa18d96f1e2 and 72ce8bce8dd655b6aefa33d0a74e883dad5202b5, the code isn't portable, for instance, Solaris does not support SO_RCVTIMEO/SO_SNDTIMEO. These socket-level options are known, but Solaris returns EAFNOSUPPORT. Reported by Jonathan Buschmann. --- NEWS | 8 -------- 1 file changed, 8 deletions(-) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 4a4e0c39..bcf2537b 100644 --- a/NEWS +++ b/NEWS @@ -58,14 +58,6 @@ removed from a 6.4.0 or newer release.) fetchmail-6.3.20 (not yet released): -# SECURITY FIXES -* Fetchmail's socket timeout handling was incomplete. Network outages in the - wrong phase of a communication, combined with unlucky operating systems and - their defaults, could cause fetchmail to hang for extended amounts of time. - Freezes for beyond a week were reported by Thomas Jarosch. Fetchmail sets - UNIX- and Internet-domain socket send and receive timeouts now. - This fixes a hang during STARTTLS negotiation reported by Thomas Jarosch. - # CHANGES * fetchmail now always uses its own MD5 implementation. The library and header variants are too diverse, and we've been bitten before -- and configure -- cgit v1.2.3