Your message dated Sun, 09 Jul 2017 19:17:10 +0000 with message-id <[email protected]> and subject line Bug#865945: fixed in dovecot 1:2.2.27-3+deb9u1 has caused the Debian Bug report #865945, regarding dovecot-solr: Malformed solr queries because of unescaped {} characters to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 865945: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865945 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: dovecot-solr Version: 1:2.2.27-3 Severity: normal Tags: patch Hi, unfortunately in dovecot 2.2.27 there is a known bug (introduced with commit f3b0efdcbd0bd9059574c8f86d6cb43e16c8e521) in the solr query construction code, which includes unescaped {} characters in the query string. As this violates the RFC 3986, solr reject the query, making the whole FTS defunct. I think this bug should be considered as severe, as it renders the whole package unusable. Fortunately this bug has been fixed in dovecot 2.2.28, and the patch (887bddc932371b33dcf41094b6a344486d3128b4) could be easily backported to 2.2.27. Regards, Barna -- Package-specific info: -- System Information: Debian Release: 9.0 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.0-2-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages dovecot-solr depends on: ii dovecot-core 1:2.2.27-3 ii libc6 2.24-11+deb9u1 ii libexpat1 2.2.0-2+deb9u1 dovecot-solr recommends no packages. dovecot-solr suggests no packages. Versions of packages dovecot-solr is related to: ii dovecot-core [dovecot-common] 1:2.2.27-3 pn dovecot-dbg <none> pn dovecot-dev <none> pn dovecot-gssapi <none> ii dovecot-imapd 1:2.2.27-3 pn dovecot-ldap <none> pn dovecot-lmtpd <none> ii dovecot-managesieved 1:2.2.27-3 ii dovecot-mysql 1:2.2.27-3 pn dovecot-pgsql <none> ii dovecot-pop3d 1:2.2.27-3 ii dovecot-sieve 1:2.2.27-3 pn dovecot-sqlite <none> -- no debconf information
--- End Message ---
--- Begin Message ---Source: dovecot Source-Version: 1:2.2.27-3+deb9u1 We believe that the bug you reported is fixed in the latest version of dovecot, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Apollon Oikonomopoulos <[email protected]> (supplier of updated dovecot package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 30 Jun 2017 22:01:28 +0300 Source: dovecot Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-lucene dovecot-dbg Architecture: source amd64 Version: 1:2.2.27-3+deb9u1 Distribution: stretch Urgency: medium Maintainer: Dovecot Maintainers <[email protected]> Changed-By: Apollon Oikonomopoulos <[email protected]> Description: dovecot-core - secure POP3/IMAP server - core files dovecot-dbg - secure POP3/IMAP server - debug symbols dovecot-dev - secure POP3/IMAP server - header files dovecot-gssapi - secure POP3/IMAP server - GSSAPI support dovecot-imapd - secure POP3/IMAP server - IMAP daemon dovecot-ldap - secure POP3/IMAP server - LDAP support dovecot-lmtpd - secure POP3/IMAP server - LMTP server dovecot-lucene - secure POP3/IMAP server - Lucene support dovecot-managesieved - secure POP3/IMAP server - ManageSieve server dovecot-mysql - secure POP3/IMAP server - MySQL support dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support dovecot-pop3d - secure POP3/IMAP server - POP3 daemon dovecot-sieve - secure POP3/IMAP server - Sieve filters support dovecot-solr - secure POP3/IMAP server - Solr support dovecot-sqlite - secure POP3/IMAP server - SQLite support Closes: 865945 Changes: dovecot (1:2.2.27-3+deb9u1) stretch; urgency=medium . * [8b8226f] Fix fts-solr: escape {} chars when sending queries (Closes: #865945) * [a97cdab] Add basic usage DEP-8 tests, performing end-to-end testing using LDA, IMAP and POP3. Checksums-Sha1: 61fb769d1174285dccc0361d6f305cf26c8abbae 3401 dovecot_2.2.27-3+deb9u1.dsc 98c063e732b45edc55335fec1f9c4f42284d887e 853888 dovecot_2.2.27-3+deb9u1.debian.tar.xz ae0ab7abd728998a382cf70aced7b6be8513bb90 3322170 dovecot-core_2.2.27-3+deb9u1_amd64.deb c9a46a0d5c2bda83606ae173f77b92dd2847e809 14119508 dovecot-dbg_2.2.27-3+deb9u1_amd64.deb 557ed0eb0178e3347366611a77ee63d125356461 960314 dovecot-dev_2.2.27-3+deb9u1_amd64.deb 82d10b778521d995db45b50f66eb158baeaa766a 677812 dovecot-gssapi_2.2.27-3+deb9u1_amd64.deb 319de3bced26f551d7e501bdeaf959c2c43cb219 813590 dovecot-imapd_2.2.27-3+deb9u1_amd64.deb f5c18e937682a8dfb1ef74bb242bcde0b96bcdfb 876404 dovecot-ldap_2.2.27-3+deb9u1_amd64.deb 0470b8165a7278fe7438ce185817a6547e7a5041 691772 dovecot-lmtpd_2.2.27-3+deb9u1_amd64.deb f4b454a09c1f6f5bf7f41da0583668eb78be2ba0 696348 dovecot-lucene_2.2.27-3+deb9u1_amd64.deb 137a1edb9506dced4aa0802a20048ab6f4de95db 707782 dovecot-managesieved_2.2.27-3+deb9u1_amd64.deb 8e5247644ae8cb48773e2b1de5873b75777a25cc 678772 dovecot-mysql_2.2.27-3+deb9u1_amd64.deb 98116d25c2a7d372234c1a533d3841bd60a20018 681582 dovecot-pgsql_2.2.27-3+deb9u1_amd64.deb 41f4cad1d9081e6df9d46c00c10bfd347dd190dd 697940 dovecot-pop3d_2.2.27-3+deb9u1_amd64.deb 40abbf0659a0992db3c7df4f63852a2cd0bf59cb 970160 dovecot-sieve_2.2.27-3+deb9u1_amd64.deb 459fadcec8fac2e5ba756e81a8eb54b00634ed5e 689370 dovecot-solr_2.2.27-3+deb9u1_amd64.deb 2d940e86792539b4036a86f93cf0618884fefc0c 676804 dovecot-sqlite_2.2.27-3+deb9u1_amd64.deb 96b952655013614d05ba090a66b70c474693658b 11960 dovecot_2.2.27-3+deb9u1_amd64.buildinfo Checksums-Sha256: e179930c0c131b33b5078d2008fb73fdc66c8f98f210aeae3f98a6f9b3886745 3401 dovecot_2.2.27-3+deb9u1.dsc e41933c105ffd338034a5d6e712fb4f6a9e1b4aed4ba7d2cff44291632eb0b14 853888 dovecot_2.2.27-3+deb9u1.debian.tar.xz 547db331286f6f6972ba4798cd674cb08740a89fcf958d944c645d72f32489c1 3322170 dovecot-core_2.2.27-3+deb9u1_amd64.deb e104b2ed59b1f1dd00f33394d66db4adea72be999c2f2a16e49ddaee0c70954b 14119508 dovecot-dbg_2.2.27-3+deb9u1_amd64.deb 323c1856e87d67db77cf0b2535510886ef1d73f54d0832cadc31ee3ceed4f75a 960314 dovecot-dev_2.2.27-3+deb9u1_amd64.deb 0c165e9f79894b4283a8226b729d563f50ecd18753c19d4ace3108e4f133d116 677812 dovecot-gssapi_2.2.27-3+deb9u1_amd64.deb 2e23288b5e41a55626c17cc73e7777086702edf0cc32c173fac41cf78c43e8d7 813590 dovecot-imapd_2.2.27-3+deb9u1_amd64.deb 71d958727c929ed85325b18312a9b779f411111c1c16f96eac541b78301c1490 876404 dovecot-ldap_2.2.27-3+deb9u1_amd64.deb fd84fa126c357d1d79a6180d9bd9423b7c24c659027992c6a6bcfc838191e718 691772 dovecot-lmtpd_2.2.27-3+deb9u1_amd64.deb 32ac7b13dd94b5d1016d767f667b58a1ec1d04d472ecdd5d355895b3e551d7c1 696348 dovecot-lucene_2.2.27-3+deb9u1_amd64.deb 6294a56ac515a0c19146a94dcb80348a9e1f21f432070c212579e0fe29ed1cbb 707782 dovecot-managesieved_2.2.27-3+deb9u1_amd64.deb d8e82a45d647cf4b9f143ceafa74e3c0d2e6fb2e63ca0004407b9bccf111059a 678772 dovecot-mysql_2.2.27-3+deb9u1_amd64.deb c57d83d98a0d8bd010a3b2ffb3b9cba501dcfcc7f700cad106599b360fb44648 681582 dovecot-pgsql_2.2.27-3+deb9u1_amd64.deb 5bc3b891f0823f2e9993a4042ee244b3ea66ee8f68251836c8933cd4be12dbd6 697940 dovecot-pop3d_2.2.27-3+deb9u1_amd64.deb c7e39856dfb364e3fe03388238b3ef05ed7c54740c907014e397a8f707e45e67 970160 dovecot-sieve_2.2.27-3+deb9u1_amd64.deb bc5951c18136c4ced8046e2809b8985c6f47046a6dabe86e4232ff34c68bfbdf 689370 dovecot-solr_2.2.27-3+deb9u1_amd64.deb e37fa4a365f9734d1d8bc10c112b42360f1dad343c0a534cbdfc931ec1f13bac 676804 dovecot-sqlite_2.2.27-3+deb9u1_amd64.deb 19fe340e36f885da785a1b1f5569cb099d0fba142213c2efb31277ca8a912112 11960 dovecot_2.2.27-3+deb9u1_amd64.buildinfo Files: ed7b23343aa5b462ef67e817198caad8 3401 mail optional dovecot_2.2.27-3+deb9u1.dsc 954c63ff8d3ec9d7f485fa734237f5f4 853888 mail optional dovecot_2.2.27-3+deb9u1.debian.tar.xz 0fb318f8ee529db7d839964c300a1e66 3322170 mail optional dovecot-core_2.2.27-3+deb9u1_amd64.deb 7a121fc815a60b80c73f7857ad93acab 14119508 debug extra dovecot-dbg_2.2.27-3+deb9u1_amd64.deb 49090773695bc1989e43dd51af40b1ca 960314 mail optional dovecot-dev_2.2.27-3+deb9u1_amd64.deb 51a1148a3b73fd36350674a8e9df5e58 677812 mail optional dovecot-gssapi_2.2.27-3+deb9u1_amd64.deb 85cbb72c30a5ccbb24028341cdf58aa2 813590 mail optional dovecot-imapd_2.2.27-3+deb9u1_amd64.deb 2d02266d4f18b5f30a57eb2a6d3146bd 876404 mail optional dovecot-ldap_2.2.27-3+deb9u1_amd64.deb 38f8309ab3fc104329a5a94480d7a67a 691772 mail optional dovecot-lmtpd_2.2.27-3+deb9u1_amd64.deb e7a861d99587a6d213ebda27dfc0575c 696348 mail optional dovecot-lucene_2.2.27-3+deb9u1_amd64.deb 2027dd231fbe9457af8c5575b55715b0 707782 mail optional dovecot-managesieved_2.2.27-3+deb9u1_amd64.deb 79492ac9d32a34aeb09d44649315d24d 678772 mail optional dovecot-mysql_2.2.27-3+deb9u1_amd64.deb 31b2cb1cefade40180ecc1463153811f 681582 mail optional dovecot-pgsql_2.2.27-3+deb9u1_amd64.deb 9858eac5dd6562b496b8f5c4aa7176e6 697940 mail optional dovecot-pop3d_2.2.27-3+deb9u1_amd64.deb 1431abf0f5dc056674837478c0813ce2 970160 mail optional dovecot-sieve_2.2.27-3+deb9u1_amd64.deb 2b8e1b154fb725b1846d1a69705040e6 689370 mail optional dovecot-solr_2.2.27-3+deb9u1_amd64.deb 063cac02f55919bbe9370e9812adfdea 676804 mail optional dovecot-sqlite_2.2.27-3+deb9u1_amd64.deb 9fb0aafc0adbf42f4cc64ed7ff334fdd 11960 mail optional dovecot_2.2.27-3+deb9u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEPgL9ZlYpWVIRC6uZ9RsYxyAkgiQFAllWo9kACgkQ9RsYxyAk giRPCA/6A4mZsNawfejpzMedqHIRrl1a/R5TchYx1Q3nUzkuqbC42ynWsDPUJKUD PFGGlnAs2c60rKvkpgky/DKMMeIyUFbevkjKGHwM/7aspmigC/yhdcGifEgR+e7I Qlm7z2FwbOGm+5Zymp+Qyo842l1R1GyfEY9pj5xJqj/BNBp/Q9AXpDB5ZYUem/Zn nRPKyL6TA/3Eu8v3PSakfjtOt2LrDJSQowLzqljgsmT3k5RJMwZ1A+ZXPYWMnfI3 iia/BK97TNSzUZuX6gRoU2ywKhj2OfiaNhx0KDDDVmcHpLiQFW1C9Ukx8t15HwKb U0oOvXI0nyKaL9FZsi8JpK0Q2mjcjzNfRI+B068oz+blh66pu/LivAQif2FKBZw4 7BSDbbmvVvmsMrpyl4I3dNQ3CPeRSxLnU/uBrJqiOaIqH4FGt5d4dVFzkLa7drY2 dOlz3Jvo3fJbch5lXAdoQsx/pm0yp9OU+5QmEZSfX90TDt6XKwcGeR9pIAfaHggx tJI4f5HBeo5uIsxu3l/ViQ4oWtaCRHvE26gK2gnSMTxzG4GgMF0FSfrSzvHQBZsJ 6B8Bjv8KHUW7sOArLB9BDPY/FAlX6CYBY4VJmSch93506fKTN+DB/orDE10lI1LJ KWWvsE5zTK78ObUvFMPPVFwGk9/S3YDNFGzlfjwWYs56RgI1u5U= =nAkF -----END PGP SIGNATURE-----
--- End Message ---

