Your message dated Thu, 09 Sep 2021 17:47:07 +0000 with message-id <[email protected]> and subject line Bug#992400: fixed in fetchmail 6.4.16-4+deb11u1 has caused the Debian Bug report #992400, regarding fetchmail: segfault with specific .fetchmailrc to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact [email protected] immediately.) -- 992400: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=992400 Debian Bug Tracking System Contact [email protected] with problems
--- Begin Message ---Package: fetchmail Version: 6.4.16-4 Severity: important -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear Maintainer, fetchmail started SEGFAULTing after upgrading from buster to bullseye. This is an example config which causes this: test@canardo:~$ cat .fetchmailrc set invisible defaults proto pop3 uidl no envelope poll pop.example.com user foo with pass bar is test here Note that the example can be uses as-is. The server and user does not need to exist. fetchmail crashes on parsing before trying to lookup servername or anything: test@canardo:~$ strace -f fetchmail 2>&1|tail -10 openat(AT_FDCWD, "/home/test/.fetchmailrc", O_RDONLY) = 3 ioctl(3, TCGETS, 0x7ffdf5799df0) = -1 ENOTTY (Inappropriate ioctl for device) fstat(3, {st_mode=S_IFREG|0600, st_size=116, ...}) = 0 read(3, "set invisible\ndefaults\n proto p"..., 8192) = 116 read(3, "", 4096) = 0 read(3, "", 8192) = 0 ioctl(3, TCGETS, 0x7ffdf5799df0) = -1 ENOTTY (Inappropriate ioctl for device) close(3) = 0 - --- SIGSEGV {si_signo=SIGSEGV, si_code=SEGV_MAPERR, si_addr=0xffffffffffffffe0} --- +++ killed by SIGSEGV +++ Moving the settings from "defaults" to the server section works around the issue. But this is a regression since that exact configuration has worked for 5+ years over several earlier fetchmail versions. An incomplete list of versions where this used to work: 6.3.26-1+b1 6.3.26-3 6.4.0~beta4-3 6.4.0~beta4-3+deb10u1 Bjørn - -- System Information: Debian Release: 11.0 APT prefers stable APT policy: (700, 'stable'), (500, 'stable-security') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-8-amd64 (SMP w/8 CPU threads) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages fetchmail depends on: ii adduser 3.118 ii debianutils 4.11.2 ii libc6 2.31-13 ii libcom-err2 1.46.2-2 ii libgssapi-krb5-2 1.18.3-6 ii libkrb5-3 1.18.3-6 ii libssl1.1 1.1.1k-1 ii lsb-base 11.1.0 Versions of packages fetchmail recommends: ii ca-certificates 20210119 Versions of packages fetchmail suggests: pn fetchmailconf <none> pn resolvconf <none> ii sendmail-bin [mail-transport-agent] 8.15.2-22 - -- Configuration Files: /etc/default/fetchmail [Errno 13] Permission denied: '/etc/default/fetchmail' - -- no debconf information -----BEGIN PGP SIGNATURE----- iGwEARECACwWIQR3fjfc8EF8nPbC0aDXSuqSjBsiyQUCYRy0dw4cYmpvcm5AbW9y ay5ubwAKCRDXSuqSjBsiyVCTAJ4v7DrZ98/7DtKupSW4SBJpCAzUpACeIgMHjYv1 rWGfcVwz9Tlly+d30L4= =iC7Z -----END PGP SIGNATURE-----
--- End Message ---
--- Begin Message ---Source: fetchmail Source-Version: 6.4.16-4+deb11u1 Done: Laszlo Boszormenyi (GCS) <[email protected]> We believe that the bug you reported is fixed in the latest version of fetchmail, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to [email protected], and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Laszlo Boszormenyi (GCS) <[email protected]> (supplier of updated fetchmail package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing [email protected]) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 09 Aug 2021 20:06:48 +0200 Source: fetchmail Architecture: source Version: 6.4.16-4+deb11u1 Distribution: bullseye Urgency: medium Maintainer: Laszlo Boszormenyi (GCS) <[email protected]> Changed-By: Laszlo Boszormenyi (GCS) <[email protected]> Closes: 992400 Changes: fetchmail (6.4.16-4+deb11u1) bullseye; urgency=medium . * Backport upstream regression fix for 6.4.20's security (CVE-2021-36386) fix. * Fix envelope segmentation fault (closes: #992400). Checksums-Sha1: 3f7ff6070761b159dda0b0e302d8894d87c2905c 2207 fetchmail_6.4.16-4+deb11u1.dsc 51b4daecb9cd40c8fa68df89fc3e697dd0c290f6 55588 fetchmail_6.4.16-4+deb11u1.debian.tar.xz 693761b26da415fe096c28943214ce977b033940 6354 fetchmail_6.4.16-4+deb11u1_amd64.buildinfo Checksums-Sha256: bf999ea3f2b43e03596accd98c31e4792475a275cf79e6cd590e0f2c9ea8497b 2207 fetchmail_6.4.16-4+deb11u1.dsc 8c114d4334a36f9494a2eb08060ef22e3564494dab9e4dce5c86fe2e4d1e2a55 55588 fetchmail_6.4.16-4+deb11u1.debian.tar.xz f5b883aa72929e8d7a68fea125f2f9977c4cdc3baf585e63fb86b69c28aba006 6354 fetchmail_6.4.16-4+deb11u1_amd64.buildinfo Files: bbad58a1a91b68377b1aa45ccbc52280 2207 mail optional fetchmail_6.4.16-4+deb11u1.dsc 9b96dc1f0c63565a26cc816ee9d0fc2f 55588 mail optional fetchmail_6.4.16-4+deb11u1.debian.tar.xz 06f8a38fefd163579fe0712805606ed2 6354 mail optional fetchmail_6.4.16-4+deb11u1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfYh9yLp7u6e4NeO63OMQ54ZMyL8FAmE5kfYACgkQ3OMQ54ZM yL9c6A//dfgruH6iNzSJH60g0aPYy41cQ430YtccfFsKoy5R9Tnq0SiiX6qGb2vy 5IFfXwISqAdrF4ZdQZHNUlECms4+6t9diLqBu4sRTXRtCP+f8fa/5HlIP/mnBm96 f7E1hlJGDkQOVqwE0ZKtI0EWx4OZNo7yZLUdoXqU9o+yhZUb2JIxkDTi0P+RoPHV kWx5iwHIH4WNsBnp7Z35GlXwGzXEvEKq1U53sQ2BTMMolA1cehKAq0obJrfUTOYF XsXRPZKEXCIq09In92dmuU0iDoVR5HamfgkAqRo4PbT3OBhde5tVSJmVB8VBhEqM STzVwfARpb6UcYv/6CEIRpN0LrDJ+Nyy9sEDQ1Po9kYgVv/vdaKXVnn5g9sKie2g OR58Ehk98mUc9uTYpojfEbhuOJwUOI9sCbnLXGpfNEM8Xjq451aCHKOBw+hJqWg4 YCyJOHpZ1ZqiGm3GWpUV+clw8CAGtXwefViiqXoFrj94QXaai1a65jqRnY0NkRwo SfpqIoYTqPISmSuZv+0ckqHFDfOTwnr1jWQ4LwVw+O43zIQAQBM20BqDdnrObCjk XXJv+MNm0i0zHY5vIjqs2JYPjZx71lJztvdEHxU42HnZtYdNdJgHVsS8Y79C4jRB /WIwBUl9ECMLPlWilyKUPBiWd75tuoVYvdDWSd8miWe5oZaB/xM= =TNZg -----END PGP SIGNATURE-----
--- End Message ---
