Your message dated Sun, 09 Jul 2017 19:17:10 +0000
with message-id <[email protected]>
and subject line Bug#865945: fixed in dovecot 1:2.2.27-3+deb9u1
has caused the Debian Bug report #865945,
regarding dovecot-solr: Malformed solr queries because of unescaped {} 
characters
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
865945: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=865945
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dovecot-solr
Version: 1:2.2.27-3
Severity: normal
Tags: patch

Hi,

unfortunately in dovecot 2.2.27 there is a known bug (introduced with commit 
f3b0efdcbd0bd9059574c8f86d6cb43e16c8e521)
in the solr query construction code, which includes unescaped {} characters in 
the query string. As this violates
the RFC 3986, solr reject the query, making the whole FTS defunct.

I think this bug should be considered as severe, as it renders the whole 
package unusable.

Fortunately this bug has been fixed in dovecot 2.2.28, and the patch 
(887bddc932371b33dcf41094b6a344486d3128b4)
could be easily backported to 2.2.27.

Regards,
Barna

-- Package-specific info:

-- System Information:
Debian Release: 9.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages dovecot-solr depends on:
ii  dovecot-core  1:2.2.27-3
ii  libc6         2.24-11+deb9u1
ii  libexpat1     2.2.0-2+deb9u1

dovecot-solr recommends no packages.

dovecot-solr suggests no packages.

Versions of packages dovecot-solr is related to:
ii  dovecot-core [dovecot-common]  1:2.2.27-3
pn  dovecot-dbg                    <none>
pn  dovecot-dev                    <none>
pn  dovecot-gssapi                 <none>
ii  dovecot-imapd                  1:2.2.27-3
pn  dovecot-ldap                   <none>
pn  dovecot-lmtpd                  <none>
ii  dovecot-managesieved           1:2.2.27-3
ii  dovecot-mysql                  1:2.2.27-3
pn  dovecot-pgsql                  <none>
ii  dovecot-pop3d                  1:2.2.27-3
ii  dovecot-sieve                  1:2.2.27-3
pn  dovecot-sqlite                 <none>

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: dovecot
Source-Version: 1:2.2.27-3+deb9u1

We believe that the bug you reported is fixed in the latest version of
dovecot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Apollon Oikonomopoulos <[email protected]> (supplier of updated dovecot 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 30 Jun 2017 22:01:28 +0300
Source: dovecot
Binary: dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd 
dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap 
dovecot-gssapi dovecot-sieve dovecot-solr dovecot-lucene dovecot-dbg
Architecture: source amd64
Version: 1:2.2.27-3+deb9u1
Distribution: stretch
Urgency: medium
Maintainer: Dovecot Maintainers <[email protected]>
Changed-By: Apollon Oikonomopoulos <[email protected]>
Description:
 dovecot-core - secure POP3/IMAP server - core files
 dovecot-dbg - secure POP3/IMAP server - debug symbols
 dovecot-dev - secure POP3/IMAP server - header files
 dovecot-gssapi - secure POP3/IMAP server - GSSAPI support
 dovecot-imapd - secure POP3/IMAP server - IMAP daemon
 dovecot-ldap - secure POP3/IMAP server - LDAP support
 dovecot-lmtpd - secure POP3/IMAP server - LMTP server
 dovecot-lucene - secure POP3/IMAP server - Lucene support
 dovecot-managesieved - secure POP3/IMAP server - ManageSieve server
 dovecot-mysql - secure POP3/IMAP server - MySQL support
 dovecot-pgsql - secure POP3/IMAP server - PostgreSQL support
 dovecot-pop3d - secure POP3/IMAP server - POP3 daemon
 dovecot-sieve - secure POP3/IMAP server - Sieve filters support
 dovecot-solr - secure POP3/IMAP server - Solr support
 dovecot-sqlite - secure POP3/IMAP server - SQLite support
Closes: 865945
Changes:
 dovecot (1:2.2.27-3+deb9u1) stretch; urgency=medium
 .
   * [8b8226f] Fix fts-solr: escape {} chars when sending queries (Closes:
     #865945)
   * [a97cdab] Add basic usage DEP-8 tests, performing end-to-end testing using
     LDA, IMAP and POP3.
Checksums-Sha1:
 61fb769d1174285dccc0361d6f305cf26c8abbae 3401 dovecot_2.2.27-3+deb9u1.dsc
 98c063e732b45edc55335fec1f9c4f42284d887e 853888 
dovecot_2.2.27-3+deb9u1.debian.tar.xz
 ae0ab7abd728998a382cf70aced7b6be8513bb90 3322170 
dovecot-core_2.2.27-3+deb9u1_amd64.deb
 c9a46a0d5c2bda83606ae173f77b92dd2847e809 14119508 
dovecot-dbg_2.2.27-3+deb9u1_amd64.deb
 557ed0eb0178e3347366611a77ee63d125356461 960314 
dovecot-dev_2.2.27-3+deb9u1_amd64.deb
 82d10b778521d995db45b50f66eb158baeaa766a 677812 
dovecot-gssapi_2.2.27-3+deb9u1_amd64.deb
 319de3bced26f551d7e501bdeaf959c2c43cb219 813590 
dovecot-imapd_2.2.27-3+deb9u1_amd64.deb
 f5c18e937682a8dfb1ef74bb242bcde0b96bcdfb 876404 
dovecot-ldap_2.2.27-3+deb9u1_amd64.deb
 0470b8165a7278fe7438ce185817a6547e7a5041 691772 
dovecot-lmtpd_2.2.27-3+deb9u1_amd64.deb
 f4b454a09c1f6f5bf7f41da0583668eb78be2ba0 696348 
dovecot-lucene_2.2.27-3+deb9u1_amd64.deb
 137a1edb9506dced4aa0802a20048ab6f4de95db 707782 
dovecot-managesieved_2.2.27-3+deb9u1_amd64.deb
 8e5247644ae8cb48773e2b1de5873b75777a25cc 678772 
dovecot-mysql_2.2.27-3+deb9u1_amd64.deb
 98116d25c2a7d372234c1a533d3841bd60a20018 681582 
dovecot-pgsql_2.2.27-3+deb9u1_amd64.deb
 41f4cad1d9081e6df9d46c00c10bfd347dd190dd 697940 
dovecot-pop3d_2.2.27-3+deb9u1_amd64.deb
 40abbf0659a0992db3c7df4f63852a2cd0bf59cb 970160 
dovecot-sieve_2.2.27-3+deb9u1_amd64.deb
 459fadcec8fac2e5ba756e81a8eb54b00634ed5e 689370 
dovecot-solr_2.2.27-3+deb9u1_amd64.deb
 2d940e86792539b4036a86f93cf0618884fefc0c 676804 
dovecot-sqlite_2.2.27-3+deb9u1_amd64.deb
 96b952655013614d05ba090a66b70c474693658b 11960 
dovecot_2.2.27-3+deb9u1_amd64.buildinfo
Checksums-Sha256:
 e179930c0c131b33b5078d2008fb73fdc66c8f98f210aeae3f98a6f9b3886745 3401 
dovecot_2.2.27-3+deb9u1.dsc
 e41933c105ffd338034a5d6e712fb4f6a9e1b4aed4ba7d2cff44291632eb0b14 853888 
dovecot_2.2.27-3+deb9u1.debian.tar.xz
 547db331286f6f6972ba4798cd674cb08740a89fcf958d944c645d72f32489c1 3322170 
dovecot-core_2.2.27-3+deb9u1_amd64.deb
 e104b2ed59b1f1dd00f33394d66db4adea72be999c2f2a16e49ddaee0c70954b 14119508 
dovecot-dbg_2.2.27-3+deb9u1_amd64.deb
 323c1856e87d67db77cf0b2535510886ef1d73f54d0832cadc31ee3ceed4f75a 960314 
dovecot-dev_2.2.27-3+deb9u1_amd64.deb
 0c165e9f79894b4283a8226b729d563f50ecd18753c19d4ace3108e4f133d116 677812 
dovecot-gssapi_2.2.27-3+deb9u1_amd64.deb
 2e23288b5e41a55626c17cc73e7777086702edf0cc32c173fac41cf78c43e8d7 813590 
dovecot-imapd_2.2.27-3+deb9u1_amd64.deb
 71d958727c929ed85325b18312a9b779f411111c1c16f96eac541b78301c1490 876404 
dovecot-ldap_2.2.27-3+deb9u1_amd64.deb
 fd84fa126c357d1d79a6180d9bd9423b7c24c659027992c6a6bcfc838191e718 691772 
dovecot-lmtpd_2.2.27-3+deb9u1_amd64.deb
 32ac7b13dd94b5d1016d767f667b58a1ec1d04d472ecdd5d355895b3e551d7c1 696348 
dovecot-lucene_2.2.27-3+deb9u1_amd64.deb
 6294a56ac515a0c19146a94dcb80348a9e1f21f432070c212579e0fe29ed1cbb 707782 
dovecot-managesieved_2.2.27-3+deb9u1_amd64.deb
 d8e82a45d647cf4b9f143ceafa74e3c0d2e6fb2e63ca0004407b9bccf111059a 678772 
dovecot-mysql_2.2.27-3+deb9u1_amd64.deb
 c57d83d98a0d8bd010a3b2ffb3b9cba501dcfcc7f700cad106599b360fb44648 681582 
dovecot-pgsql_2.2.27-3+deb9u1_amd64.deb
 5bc3b891f0823f2e9993a4042ee244b3ea66ee8f68251836c8933cd4be12dbd6 697940 
dovecot-pop3d_2.2.27-3+deb9u1_amd64.deb
 c7e39856dfb364e3fe03388238b3ef05ed7c54740c907014e397a8f707e45e67 970160 
dovecot-sieve_2.2.27-3+deb9u1_amd64.deb
 bc5951c18136c4ced8046e2809b8985c6f47046a6dabe86e4232ff34c68bfbdf 689370 
dovecot-solr_2.2.27-3+deb9u1_amd64.deb
 e37fa4a365f9734d1d8bc10c112b42360f1dad343c0a534cbdfc931ec1f13bac 676804 
dovecot-sqlite_2.2.27-3+deb9u1_amd64.deb
 19fe340e36f885da785a1b1f5569cb099d0fba142213c2efb31277ca8a912112 11960 
dovecot_2.2.27-3+deb9u1_amd64.buildinfo
Files:
 ed7b23343aa5b462ef67e817198caad8 3401 mail optional dovecot_2.2.27-3+deb9u1.dsc
 954c63ff8d3ec9d7f485fa734237f5f4 853888 mail optional 
dovecot_2.2.27-3+deb9u1.debian.tar.xz
 0fb318f8ee529db7d839964c300a1e66 3322170 mail optional 
dovecot-core_2.2.27-3+deb9u1_amd64.deb
 7a121fc815a60b80c73f7857ad93acab 14119508 debug extra 
dovecot-dbg_2.2.27-3+deb9u1_amd64.deb
 49090773695bc1989e43dd51af40b1ca 960314 mail optional 
dovecot-dev_2.2.27-3+deb9u1_amd64.deb
 51a1148a3b73fd36350674a8e9df5e58 677812 mail optional 
dovecot-gssapi_2.2.27-3+deb9u1_amd64.deb
 85cbb72c30a5ccbb24028341cdf58aa2 813590 mail optional 
dovecot-imapd_2.2.27-3+deb9u1_amd64.deb
 2d02266d4f18b5f30a57eb2a6d3146bd 876404 mail optional 
dovecot-ldap_2.2.27-3+deb9u1_amd64.deb
 38f8309ab3fc104329a5a94480d7a67a 691772 mail optional 
dovecot-lmtpd_2.2.27-3+deb9u1_amd64.deb
 e7a861d99587a6d213ebda27dfc0575c 696348 mail optional 
dovecot-lucene_2.2.27-3+deb9u1_amd64.deb
 2027dd231fbe9457af8c5575b55715b0 707782 mail optional 
dovecot-managesieved_2.2.27-3+deb9u1_amd64.deb
 79492ac9d32a34aeb09d44649315d24d 678772 mail optional 
dovecot-mysql_2.2.27-3+deb9u1_amd64.deb
 31b2cb1cefade40180ecc1463153811f 681582 mail optional 
dovecot-pgsql_2.2.27-3+deb9u1_amd64.deb
 9858eac5dd6562b496b8f5c4aa7176e6 697940 mail optional 
dovecot-pop3d_2.2.27-3+deb9u1_amd64.deb
 1431abf0f5dc056674837478c0813ce2 970160 mail optional 
dovecot-sieve_2.2.27-3+deb9u1_amd64.deb
 2b8e1b154fb725b1846d1a69705040e6 689370 mail optional 
dovecot-solr_2.2.27-3+deb9u1_amd64.deb
 063cac02f55919bbe9370e9812adfdea 676804 mail optional 
dovecot-sqlite_2.2.27-3+deb9u1_amd64.deb
 9fb0aafc0adbf42f4cc64ed7ff334fdd 11960 mail optional 
dovecot_2.2.27-3+deb9u1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=nAkF
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to