Package: dovecot-solr
Version: 1:2.2.27-3
Severity: normal
Tags: patch
Hi,
unfortunately in dovecot 2.2.27 there is a known bug (introduced with commit
f3b0efdcbd0bd9059574c8f86d6cb43e16c8e521)
in the solr query construction code, which includes unescaped {} characters in
the query string. As this violates
the RFC 3986, solr reject the query, making the whole FTS defunct.
I think this bug should be considered as severe, as it renders the whole
package unusable.
Fortunately this bug has been fixed in dovecot 2.2.28, and the patch
(887bddc932371b33dcf41094b6a344486d3128b4)
could be easily backported to 2.2.27.
Regards,
Barna
-- Package-specific info:
-- System Information:
Debian Release: 9.0
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages dovecot-solr depends on:
ii dovecot-core 1:2.2.27-3
ii libc6 2.24-11+deb9u1
ii libexpat1 2.2.0-2+deb9u1
dovecot-solr recommends no packages.
dovecot-solr suggests no packages.
Versions of packages dovecot-solr is related to:
ii dovecot-core [dovecot-common] 1:2.2.27-3
pn dovecot-dbg <none>
pn dovecot-dev <none>
pn dovecot-gssapi <none>
ii dovecot-imapd 1:2.2.27-3
pn dovecot-ldap <none>
pn dovecot-lmtpd <none>
ii dovecot-managesieved 1:2.2.27-3
ii dovecot-mysql 1:2.2.27-3
pn dovecot-pgsql <none>
ii dovecot-pop3d 1:2.2.27-3
ii dovecot-sieve 1:2.2.27-3
pn dovecot-sqlite <none>
-- no debconf information
