Your message dated Sat, 07 Mar 2026 09:47:06 +0000
with message-id <[email protected]>
and subject line Bug#1129952: fixed in dovecot 1:2.4.1+dfsg1-6+deb13u3
has caused the Debian Bug report #1129952,
regarding dovecot-core: segfault when group ACLs are present but the user has
no groups
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1129952: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1129952
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dovecot-core
Version: 1:2.4.1+dfsg1-6+deb13u2
Severity: normal
Dear Maintainer,
the current version of dovecot in trixie segfaults when group ACLs are
present but a user is not member of any groups. The segfault happens
when dovecot receives new mail via LMTP and also for doveadm commands
that access the mailbox (like doveadm mailbox list -u <user>).
This issue has been fixed upstream in commit 003bf9a [0]. Could you
consider backporting this fix to trixie?
Regards
René Richter
[0]:
https://github.com/dovecot/core/commit/003bf9a6959714e0f696f0015c8c712e89962b9b
-- Package-specific info:
dovecot conf.d/90-acl.conf
--------------------------
acl_driver = vfile
acl_cache_ttl = 5min
acl_defaults_from_inbox = yes
namespace inbox {
mailbox * {
acl group-override=readonly {
rights = -wstipekxa
}
}
}
-- System Information:
Debian Release: 13.3
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500,
'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 6.12.73+deb13-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages dovecot-core depends on:
ii adduser 3.152
ii dovecot-sieve 1:2.4.1+dfsg1-6+deb13u2
ii init-system-helpers 1.69~deb13u1
ii libapparmor1 4.1.0-1
ii libbz2-1.0 1.0.8-6
ii libc6 2.41-12+deb13u1
ii libcap2 1:2.75-10+b3
ii libcrypt1 1:4.4.38-1
ii libexttextcat-2.0-0 3.4.7-1+b1
ii libicu76 76.1-4
ii liblua5.4-0 5.4.7-1+b2
ii liblz4-1 1.10.0-4
ii libpam-runtime 1.7.0-5
ii libpam0g 1.7.0-5
ii libsodium23 1.0.18-1+deb13u1
ii libssl3t64 3.5.4-1~deb13u2
ii libstemmer0d 2.2.0-4+b2
ii libsystemd0 257.9-1~deb13u1
ii libtirpc3t64 1.3.6+ds-1
ii libunwind8 1.8.1-0.1
ii libzstd1 1.5.7+dfsg-1
ii openssl 3.5.4-1~deb13u2
ii ssl-cert 1.1.3
ii ucf 3.0052
ii zlib1g 1:1.3.dfsg+really1.3.1-1+b1
dovecot-core recommends no packages.
Versions of packages dovecot-core suggests:
pn dovecot-flatcurve <none>
pn dovecot-gssapi <none>
ii dovecot-imapd 1:2.4.1+dfsg1-6+deb13u2
pn dovecot-ldap <none>
ii dovecot-lmtpd 1:2.4.1+dfsg1-6+deb13u2
ii dovecot-managesieved 1:2.4.1+dfsg1-6+deb13u2
pn dovecot-mysql <none>
pn dovecot-pgsql <none>
pn dovecot-pop3d <none>
pn dovecot-solr <none>
pn dovecot-sqlite <none>
pn dovecot-submissiond <none>
pn ntp <none>
Versions of packages dovecot-core is related to:
ii dovecot-core [dovecot-common] 1:2.4.1+dfsg1-6+deb13u2
pn dovecot-dev <none>
pn dovecot-gssapi <none>
ii dovecot-imapd 1:2.4.1+dfsg1-6+deb13u2
pn dovecot-ldap <none>
ii dovecot-lmtpd 1:2.4.1+dfsg1-6+deb13u2
ii dovecot-managesieved 1:2.4.1+dfsg1-6+deb13u2
pn dovecot-mysql <none>
pn dovecot-pgsql <none>
pn dovecot-pop3d <none>
ii dovecot-sieve 1:2.4.1+dfsg1-6+deb13u2
pn dovecot-sqlite <none>
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: dovecot
Source-Version: 1:2.4.1+dfsg1-6+deb13u3
Done: Noah Meyerhans <[email protected]>
We believe that the bug you reported is fixed in the latest version of
dovecot, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Noah Meyerhans <[email protected]> (supplier of updated dovecot package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 06 Mar 2026 09:36:28 -0500
Source: dovecot
Architecture: source
Version: 1:2.4.1+dfsg1-6+deb13u3
Distribution: trixie
Urgency: medium
Maintainer: Dovecot Maintainers <[email protected]>
Changed-By: Noah Meyerhans <[email protected]>
Closes: 1121000 1127029 1129952
Changes:
dovecot (1:2.4.1+dfsg1-6+deb13u3) trixie; urgency=medium
.
* [1186296] import upstream fix for possible crash in ldap userdb
(Closes: #1121000)
* [14c13a5] backport upstream fix for crash in trash plugin (Closes:
#1127029)
* [95bf3b3] Backport fix for segfault when group ACLs are present but the
user has no groups (Closes: #1129952)
Checksums-Sha1:
2d41c9051b6093224a4f362b68c34e24ffd009f2 3974 dovecot_2.4.1+dfsg1-6+deb13u3.dsc
1b703a44ede9c19eaa107545a9a298052911a7ce 86636
dovecot_2.4.1+dfsg1-6+deb13u3.debian.tar.xz
df374380814a8a059ac2ec2e233fd211309149e1 7802
dovecot_2.4.1+dfsg1-6+deb13u3_source.buildinfo
Checksums-Sha256:
d835facb1e38712f47b1d6dbf5cd56db7c0d19cd19fe322a9ab9dbf8a251d083 3974
dovecot_2.4.1+dfsg1-6+deb13u3.dsc
660c9f1afe773d6680695d0768f8d093e96f6f33928aa0b868ed0b0c4eef6dfd 86636
dovecot_2.4.1+dfsg1-6+deb13u3.debian.tar.xz
78be72d808a2aa68ee4efb2b2d8c3fed362f65c56936c9db96929d48c380c71b 7802
dovecot_2.4.1+dfsg1-6+deb13u3_source.buildinfo
Files:
a635518078b38a30e31bd092534b951f 3974 mail optional
dovecot_2.4.1+dfsg1-6+deb13u3.dsc
9a536022b76275ea2db43355bffea675 86636 mail optional
dovecot_2.4.1+dfsg1-6+deb13u3.debian.tar.xz
8c8a9c456b92759541f971b57be56e9a 7802 mail optional
dovecot_2.4.1+dfsg1-6+deb13u3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=hZMC
-----END PGP SIGNATURE-----
pgp6rdk2m35NG.pgp
Description: PGP signature
--- End Message ---
