Your message dated Fri, 09 Mar 2012 07:02:32 +0000
with message-id <[email protected]>
and subject line Bug#646508: fixed in dovecot 1:2.0.18-1
has caused the Debian Bug report #646508,
regarding dovecot-core: Do not modify symlinked certificates.
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
646508: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=646508
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dovecot-core
Version: 1:2.0.15-1ubuntu1~oneiric1
Severity: normal
Tags: patch

On my server, the Dovecot certificates are actually symlinks to globally
installed ones. The upgrade to version 2.0.15 changed the groups and
permissions of the global certificates, causing several other daemons to
not start, because they could not read the certificates anymore.

I am attaching a simple patch for dovecot-core.postinst that should fix
the problem.

-- Package-specific info:

-- System Information:
Debian Release: wheezy/sid
  APT prefers oneiric-updates
  APT policy: (500, 'oneiric-updates'), (500, 'oneiric-security'), (500, 
'oneiric')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-12-server (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages dovecot-core depends on:
ii  adduser          3.112+nmu1ubuntu5       add and remove users and groups
ii  libbz2-1.0       1.0.5-6ubuntu1          high-quality block-sorting file co
ii  libc6            2.13-20ubuntu5          Embedded GNU C Library: Shared lib
ii  libpam-runtime   1.1.3-2ubuntu1          Runtime support for the PAM librar
ii  libpam0g         1.1.3-2ubuntu1          Pluggable Authentication Modules l
ii  libssl1.0.0      1.0.0e-2ubuntu4         SSL shared libraries
ii  lsb-base         4.0-0ubuntu16           Linux Standard Base 4.0 init scrip
ii  openssl          1.0.0e-2ubuntu4         Secure Socket Layer (SSL) binary a
ii  ssl-cert         1.0.28                  simple debconf wrapper for OpenSSL
ii  ucf              3.0025+nmu2ubuntu1      Update Configuration File: preserv
ii  upstart [upstart 1.3-0ubuntu10           event-based init daemon
ii  zlib1g           1:1.2.3.4.dfsg-3ubuntu3 compression library - runtime

Versions of packages dovecot-core recommends:
ii  ntpdate        1:4.2.6.p2+dfsg-1ubuntu12 client for setting system time fro

Versions of packages dovecot-core suggests:
pn  dovecot-gssap <none>                     (no description available)
ii  dovecot-imapd 1:2.0.15-1ubuntu1~oneiric1 secure IMAP server that supports m
pn  dovecot-ldap  <none>                     (no description available)
pn  dovecot-lmtpd <none>                     (no description available)
ii  dovecot-manag 1:2.0.15-1ubuntu1~oneiric1 secure ManageSieve server for Dove
pn  dovecot-mysql <none>                     (no description available)
pn  dovecot-pgsql <none>                     (no description available)
ii  dovecot-pop3d 1:2.0.15-1ubuntu1~oneiric1 secure POP3 server that supports m
ii  dovecot-sieve 1:2.0.15-1ubuntu1~oneiric1 sieve filters support for Dovecot
pn  dovecot-solr  <none>                     (no description available)
pn  dovecot-sqlit <none>                     (no description available)
ii  ntp           1:4.2.6.p2+dfsg-1ubuntu12  Network Time Protocol daemon and u
ii  ufw           0.30.1-2ubuntu1            program for managing a Netfilter f

Versions of packages dovecot-core is related to:
ii  dovecot-core  1:2.0.15-1ubuntu1~oneiric1 secure mail server that supports m
pn  dovecot-dbg   <none>                     (no description available)
pn  dovecot-dev   <none>                     (no description available)
pn  dovecot-gssap <none>                     (no description available)
ii  dovecot-imapd 1:2.0.15-1ubuntu1~oneiric1 secure IMAP server that supports m
pn  dovecot-ldap  <none>                     (no description available)
pn  dovecot-lmtpd <none>                     (no description available)
ii  dovecot-manag 1:2.0.15-1ubuntu1~oneiric1 secure ManageSieve server for Dove
pn  dovecot-mysql <none>                     (no description available)
pn  dovecot-pgsql <none>                     (no description available)
ii  dovecot-pop3d 1:2.0.15-1ubuntu1~oneiric1 secure POP3 server that supports m
ii  dovecot-sieve 1:2.0.15-1ubuntu1~oneiric1 sieve filters support for Dovecot
pn  dovecot-sqlit <none>                     (no description available)

-- no debconf information
>From 4b050451ac5e42eff4931b76d70aa0529ee8f1a8 Mon Sep 17 00:00:00 2001
From: Michael Kuhn <[email protected]>
Date: Mon, 24 Oct 2011 11:24:36 +0200
Subject: [PATCH] Do not modify symlinked certificates.

---
 debian/dovecot-core.postinst |   10 ++++++----
 1 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/debian/dovecot-core.postinst b/debian/dovecot-core.postinst
index 4b5753d..2dbaf25 100644
--- a/debian/dovecot-core.postinst
+++ b/debian/dovecot-core.postinst
@@ -148,10 +148,12 @@ root@$MAILNAME
   ucfr dovecot-core $SSL_CERT
   ucfr dovecot-core $SSL_KEY
 
-  chown root:dovecot $SSL_CERT || true
-  chmod 0644 $SSL_CERT || true
-  chown root:dovecot $SSL_KEY || true
-  chmod 0600 $SSL_KEY || true
+  if [ ! -h $SSL_CERT ] && [ ! -h $SSL_KEY ]; then
+    chown root:dovecot $SSL_CERT || true
+    chmod 0644 $SSL_CERT || true
+    chown root:dovecot $SSL_KEY || true
+    chmod 0600 $SSL_KEY || true
+  fi
 
 fi
 
-- 
1.7.7


--- End Message ---
--- Begin Message ---
Source: dovecot
Source-Version: 1:2.0.18-1

We believe that the bug you reported is fixed in the latest version of
dovecot, which is due to be installed in the Debian FTP archive:

dovecot-common_2.0.18-1_all.deb
  to main/d/dovecot/dovecot-common_2.0.18-1_all.deb
dovecot-core_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-core_2.0.18-1_i386.deb
dovecot-dbg_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-dbg_2.0.18-1_i386.deb
dovecot-dev_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-dev_2.0.18-1_i386.deb
dovecot-gssapi_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-gssapi_2.0.18-1_i386.deb
dovecot-imapd_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-imapd_2.0.18-1_i386.deb
dovecot-ldap_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-ldap_2.0.18-1_i386.deb
dovecot-lmtpd_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-lmtpd_2.0.18-1_i386.deb
dovecot-managesieved_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-managesieved_2.0.18-1_i386.deb
dovecot-mysql_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-mysql_2.0.18-1_i386.deb
dovecot-pgsql_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-pgsql_2.0.18-1_i386.deb
dovecot-pop3d_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-pop3d_2.0.18-1_i386.deb
dovecot-sieve_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-sieve_2.0.18-1_i386.deb
dovecot-solr_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-solr_2.0.18-1_i386.deb
dovecot-sqlite_2.0.18-1_i386.deb
  to main/d/dovecot/dovecot-sqlite_2.0.18-1_i386.deb
dovecot_2.0.18-1.debian.tar.gz
  to main/d/dovecot/dovecot_2.0.18-1.debian.tar.gz
dovecot_2.0.18-1.dsc
  to main/d/dovecot/dovecot_2.0.18-1.dsc
dovecot_2.0.18.orig.tar.gz
  to main/d/dovecot/dovecot_2.0.18.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jaldhar H. Vyas <[email protected]> (supplier of updated dovecot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Fri, 09 Mar 2012 00:55:13 -0500
Source: dovecot
Binary: dovecot-common dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d 
dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite 
dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-dbg
Architecture: source all i386
Version: 1:2.0.18-1
Distribution: unstable
Urgency: low
Maintainer: Dovecot Maintainers <[email protected]>
Changed-By: Jaldhar H. Vyas <[email protected]>
Description: 
 dovecot-common - Transitional package for dovecot
 dovecot-core - secure mail server that supports mbox, maildir, dbox and mdbox 
ma
 dovecot-dbg - debug symbols for Dovecot
 dovecot-dev - header files for the dovecot mail server
 dovecot-gssapi - GSSAPI authentication support for Dovecot
 dovecot-imapd - secure IMAP server that supports mbox, maildir, dbox and mdbox 
ma
 dovecot-ldap - LDAP support for Dovecot
 dovecot-lmtpd - secure LMTP server for Dovecot
 dovecot-managesieved - secure ManageSieve server for Dovecot
 dovecot-mysql - MySQL support for Dovecot
 dovecot-pgsql - PostgreSQL support for Dovecot
 dovecot-pop3d - secure POP3 server that supports mbox, maildir, dbox and mdbox 
ma
 dovecot-sieve - sieve filters support for Dovecot
 dovecot-solr - Solr full text search support for Dovecot
 dovecot-sqlite - SQLite support for Dovecot
Closes: 646508 653530
Changes: 
 dovecot (1:2.0.18-1) unstable; urgency=low
 .
   * [85ae320] Imported Upstream version 2.0.18
   * [9cfd1da] Upped standards version to 3.9.3
   * [afb4164] Patch to dovecot-core/postinst so that permissions of symlinked
     certificates aren't modified. (Closes: #646508)
     Thanks Michael Kuhn.
   * [bf642ee] Patch to enable hardened build flags.  (Closes: #653530)
     Thanks Moritz Muehlenhoff.
   * [00b0d0c] Updated pigeonhole to 0.2.6
Checksums-Sha1: 
 73e03027a2432ff03349e9eff9f5ddb669e8f0a7 2273 dovecot_2.0.18-1.dsc
 117e90053be3d51ab3cf2674f2c04536729474d7 3353149 dovecot_2.0.18.orig.tar.gz
 8de769c0f696ebbc943bf299fd5724a68e335187 1264056 dovecot_2.0.18-1.debian.tar.gz
 7ce9f470abf330354b0756ae2dcf3b07c20df434 23062 dovecot-common_2.0.18-1_all.deb
 7b2ad03019866034cec2a3bf20c1e00226e4ee6c 2286210 dovecot-core_2.0.18-1_i386.deb
 8ce780fa5ea062dc2f140b1ee7118ee1392a3074 472384 dovecot-dev_2.0.18-1_i386.deb
 7ceebe40734cbace9481e90a72bd87482de61c0c 330402 dovecot-imapd_2.0.18-1_i386.deb
 37d0f62b06722681c10a3b569c7d86fe581f604f 270612 dovecot-pop3d_2.0.18-1_i386.deb
 a78e1c4f57cfb1d6c50c042fe853218351b47e21 263844 dovecot-lmtpd_2.0.18-1_i386.deb
 639fbe349c0ece72524095bb24bceef8eeb5d894 295834 
dovecot-managesieved_2.0.18-1_i386.deb
 5314b81b8e55b9eba75233c4a008b44cae5d2fa0 255642 dovecot-pgsql_2.0.18-1_i386.deb
 f3910eafda49ebf984da4a520dcf170db04ff580 252394 dovecot-mysql_2.0.18-1_i386.deb
 30442604a519b8f9d78ba425c0fe62e401be1ef3 250784 
dovecot-sqlite_2.0.18-1_i386.deb
 3d1b21ae9ae757f508a5ab1bd94c9a42a1e07fdc 265290 dovecot-ldap_2.0.18-1_i386.deb
 4f4f4b589c1b5373d1617a043c7c445f02c7999f 251126 
dovecot-gssapi_2.0.18-1_i386.deb
 cc07a3c4999fcd313fb5d523fa070839084e1792 473360 dovecot-sieve_2.0.18-1_i386.deb
 8df90d5c172536a69c12164460af1ab720a5d2ad 259746 dovecot-solr_2.0.18-1_i386.deb
 326253988838919d2d5926b6cf490b3b7f7e6be7 3281020 dovecot-dbg_2.0.18-1_i386.deb
Checksums-Sha256: 
 a060ac9638a1691ea110add25f080b5b0b8e997cb3dc1f2ae92c9c2aa955372c 2273 
dovecot_2.0.18-1.dsc
 92fc68af6ef0309990c749fcab39eeebce56ea8888c3d73ba812b65a74d1fa1b 3353149 
dovecot_2.0.18.orig.tar.gz
 0b561e0a3a0257eb126af323247c95cdb3caa00dce5ca2761fa329a468dd1134 1264056 
dovecot_2.0.18-1.debian.tar.gz
 a63eba69b8baa1382791b2384c0217148a29318bb452f8b89439f520102be96a 23062 
dovecot-common_2.0.18-1_all.deb
 400cc51514a9c76c9e33c40b7ad2a2f41636ab9d1dad6867183eedcf01778d70 2286210 
dovecot-core_2.0.18-1_i386.deb
 98c756b5d0f133de1d4b5d87c9390fd29389474bed6a7f14f115525c91313615 472384 
dovecot-dev_2.0.18-1_i386.deb
 365c95f8d238fa39d960c85a3f053edb98dcfdffa970d372d507e3179484e3f1 330402 
dovecot-imapd_2.0.18-1_i386.deb
 29034b64d62eb39c352d89c083d0d21c2587f5701d0743c706562af1e1044cf9 270612 
dovecot-pop3d_2.0.18-1_i386.deb
 7719fa5a410c53e4362b65f44007f6360d5502cdefb3e144a164638e008826f7 263844 
dovecot-lmtpd_2.0.18-1_i386.deb
 fa8b56286b9b5eb86955a7b71154cf02d113e03db5c8e0dcbf9538935966d04a 295834 
dovecot-managesieved_2.0.18-1_i386.deb
 28772dead34c78be1f6f7926ca21cac6b986e2eded5812c85ea855f7bd692a31 255642 
dovecot-pgsql_2.0.18-1_i386.deb
 fc0a5b054941080d83fff318fea67b008af55febfa35fbb2cdb8357a099c358c 252394 
dovecot-mysql_2.0.18-1_i386.deb
 de98deff4865b775e3fdec1a5e93ce254b483a924d8661a7e51a630e4cdb2ef5 250784 
dovecot-sqlite_2.0.18-1_i386.deb
 e9264af0d1233d99dd053946b812db67f8211241212347d32cd428989067d8ce 265290 
dovecot-ldap_2.0.18-1_i386.deb
 ca25bd57c096115152907f91bb7e5dde54cbe8acc848b99ac15517606342d968 251126 
dovecot-gssapi_2.0.18-1_i386.deb
 d1ddf47a15f4b51d7662f3f2fa6bb4fc966c81f0312cc535a37cf5fa271c3850 473360 
dovecot-sieve_2.0.18-1_i386.deb
 1faebbe7c56222c9584e719ce955ed66c0fc1af627caa3cf0137350dbaaef45a 259746 
dovecot-solr_2.0.18-1_i386.deb
 adb93c062d6e50713192b419786dbbc7d7581395fd5778fc2dc6dc983d9ab979 3281020 
dovecot-dbg_2.0.18-1_i386.deb
Files: 
 1f333b7372ed1d0c9efc4923fa89d6df 2273 mail optional dovecot_2.0.18-1.dsc
 4fdee96b390a287d75b51ffcf6abe30f 3353149 mail optional 
dovecot_2.0.18.orig.tar.gz
 c89137e5d127c09c6ee6f3ff5cda2504 1264056 mail optional 
dovecot_2.0.18-1.debian.tar.gz
 b5348e9e5f865a85a3fb72e122cc9024 23062 oldlibs extra 
dovecot-common_2.0.18-1_all.deb
 1b2366d132c1a942995403243f413d5a 2286210 mail optional 
dovecot-core_2.0.18-1_i386.deb
 993e8039d34a69389195d70e30fe1856 472384 mail optional 
dovecot-dev_2.0.18-1_i386.deb
 7854853682f3ad0810c3ff14283f18bc 330402 mail optional 
dovecot-imapd_2.0.18-1_i386.deb
 8c6542f74516fbfa98b2da5293cdf4bc 270612 mail optional 
dovecot-pop3d_2.0.18-1_i386.deb
 81d3ad53dc45eb35eedd3e452725c152 263844 mail optional 
dovecot-lmtpd_2.0.18-1_i386.deb
 b059da46e576ffca8e5e3cea428b9c48 295834 mail optional 
dovecot-managesieved_2.0.18-1_i386.deb
 7d48024219cc612abaaba03a17a94559 255642 mail optional 
dovecot-pgsql_2.0.18-1_i386.deb
 7d976ef5518c063a52f04c08b4608ed6 252394 mail optional 
dovecot-mysql_2.0.18-1_i386.deb
 2897dbf0d4fdad56764e3861f147ffbf 250784 mail optional 
dovecot-sqlite_2.0.18-1_i386.deb
 9f2402e98357c0d065012b03091acc4e 265290 mail optional 
dovecot-ldap_2.0.18-1_i386.deb
 3f6d6e5c63307bb7deffd186cd2760f1 251126 mail optional 
dovecot-gssapi_2.0.18-1_i386.deb
 d47e97321fe50f09cb46729b1e2df070 473360 mail optional 
dovecot-sieve_2.0.18-1_i386.deb
 3ddc254acfb58b39315feea5b7e2b877 259746 mail optional 
dovecot-solr_2.0.18-1_i386.deb
 63b59854a446a9f6c91ac0a3339e3ba8 3281020 debug extra 
dovecot-dbg_2.0.18-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk9ZqAwACgkQ2kYOR+5txmpmhQCfZNUfCnUnBPgLXqp5/gMrqWoL
PtEAoISJcakR8wh3Ac9ci5QoKPVEYEmZ
=YDh6
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to