Control: tags -1 + pending

On Fri, Mar 06, 2026 at 02:48:44PM +0100, René Richter wrote:
> the current version of dovecot in trixie segfaults when group ACLs are
> present but a user is not member of any groups. The segfault happens when
> dovecot receives new mail via LMTP and also for doveadm commands that access
> the mailbox (like doveadm mailbox list -u <user>).
> 
> This issue has been fixed upstream in commit 003bf9a [0]. Could you consider
> backporting this fix to trixie?

Thanks for the report.

I had already proposed an update to dovecot in the next trixie point
release.  I've refreshed the proposed update to contain the fix for this
issue as well.  You can track the proposal in the release team's bug,
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1129862

In the meantime, I have published amd64 builds to my repository at
https://people.debian.org/~noahm/repo/.  If you're able to validate that
they resolve the issue, that would be helpful.

noah

Reply via email to