Control: tags -1 + pending On Fri, Mar 06, 2026 at 02:48:44PM +0100, René Richter wrote: > the current version of dovecot in trixie segfaults when group ACLs are > present but a user is not member of any groups. The segfault happens when > dovecot receives new mail via LMTP and also for doveadm commands that access > the mailbox (like doveadm mailbox list -u <user>). > > This issue has been fixed upstream in commit 003bf9a [0]. Could you consider > backporting this fix to trixie?
Thanks for the report. I had already proposed an update to dovecot in the next trixie point release. I've refreshed the proposed update to contain the fix for this issue as well. You can track the proposal in the release team's bug, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1129862 In the meantime, I have published amd64 builds to my repository at https://people.debian.org/~noahm/repo/. If you're able to validate that they resolve the issue, that would be helpful. noah

