Control: severity -1 normal

On Tue, Jul  4, 2017 at 19:27:09 +0200, Julien Cristau wrote:

> Source: postgrey
> Version: 1.36-3
> Severity: grave
> User: debian-ad...@lists.debian.org
> Usertags: needed-by-DSA-Team
> X-Debbugs-Cc: debian-ad...@lists.debian.org
> 
> After upgrading one of our mail relays to stretch, postgrey regularly
> crashes with the error is $subject.
> 
> This might or might not be fixed upstream with
> https://github.com/schweikert/postgrey/commit/95a2cd8f7f132aae8c62e9706dd9459afca84a5c
> which changed the relevant code and among other things added checks for
> NetAddr::IP->new returning undef.
> 
Turns out this was most likely due to the recently-added ipv6 support in
postgrey [0], and our exim config [1] using the ${mask:...} operator,
which would return addresses such as
"2a02.1600.0000.0000.0000.0000.0000.0000" [2].  NetAddr::IP would then
parse that as an ipv4 address and fail, and postgrey doesn't check for
that condition.

[0] 
https://github.com/schweikert/postgrey/commit/629f636058fd4ca05c275ca0f67d7797595933df
[1] 
https://anonscm.debian.org/git/mirror/dsa-puppet.git/tree/modules/exim/templates/eximconf.erb?id=88abaebd66a09e3ef1114422142732ef7559a5de#n785
[2] 
http://www.exim.org/exim-html-current/doc/html/spec_html/ch-string_expansions.html

Cheers,
Julien

Reply via email to