Bug#992927: mutt: Mutt 2.1.2 is available, fixing a potential data-loss IMAP bug

2021-11-27 Thread Antonio Radici
On Tue, Nov 23, 2021 at 12:36:07PM -0800, Kevin J. McCarthy wrote:
> On Tue, Nov 23, 2021 at 08:45:47PM +0100, Hannes von Haugwitz wrote:
> > Is there any progress with this bug?
> 
> Mutt 2.1.3 included the corrected sort commit referenced in my last email.
> So, for unstable/testing it would be nice to get 2.1.3 uploaded.
> 
> For stable/oldstable I guess it rests in the hands of Debian process, but
> ideally the three links from my last email would be backported to those.
> 
> -Kevin

Updating to mutt 2.1.3 as we speak, I will prepare the fix for the
stable/oldstable as well, that will go through the standard process; thanks for
referencing those commits.



Bug#992927: mutt: Mutt 2.1.2 is available, fixing a potential data-loss IMAP bug

2021-11-23 Thread Kevin J. McCarthy

On Tue, Nov 23, 2021 at 08:45:47PM +0100, Hannes von Haugwitz wrote:

Is there any progress with this bug?


Mutt 2.1.3 included the corrected sort commit referenced in my last 
email.  So, for unstable/testing it would be nice to get 2.1.3 uploaded.


For stable/oldstable I guess it rests in the hands of Debian process, 
but ideally the three links from my last email would be backported to 
those.


-Kevin



Bug#992927: mutt: Mutt 2.1.2 is available, fixing a potential data-loss IMAP bug

2021-11-23 Thread Hannes von Haugwitz
Hello,

Is there any progress with this bug?

Best regards

Hannes



Bug#992927: mutt: Mutt 2.1.2 is available, fixing a potential data-loss IMAP bug

2021-09-08 Thread Kevin J. McCarthy

On Tue, Sep 07, 2021 at 08:20:49PM -0700, Kevin J. McCarthy wrote:
I think the probability of users encountering that in practice is low. 
But if you're going through the effort of back-porting the fix, please 
wait and I'll commit a corrected fix tomorrow.


This is still on a branch, waiting for some feedback/testing, but for 
now you can see the corrected sort at:

https://gitlab.com/muttmua/mutt/-/commit/fa2fef4618ed45d9f4011ea76fd8bc3844d59c88

This is applies on top of the commit from 2.1.2:
https://gitlab.com/muttmua/mutt/-/commit/647efbd151ee452eaca5f42e4f636a5ed7a32331

which depends on this commit if backported earlier than 1.13.4:
https://gitlab.com/muttmua/mutt/-/commit/6051760c2cf492ada1e06d910c0c2c05607c08bc

-Kevin



Bug#992927: mutt: Mutt 2.1.2 is available, fixing a potential data-loss IMAP bug

2021-09-07 Thread Kevin J. McCarthy

Antonio,

I was going through recent Mutt commits, and I realized my fix for this 
is not quite correct.


The IMAP UID field is a 32-bit unsigned integer.  I unfortunately 
modeled the new compare_uid() function after all the other ones use by 
Mutt for sorting, which just uses subtraction.  However, that won't work 
properly if the values differ more than a signed int can hold.


I think the probability of users encountering that in practice is low. 
But if you're going through the effort of back-porting the fix, please 
wait and I'll commit a corrected fix tomorrow.


-Kevin



Bug#992927: mutt: Mutt 2.1.2 is available, fixing a potential data-loss IMAP bug

2021-08-28 Thread Antonio Radici
On Wed, Aug 25, 2021 at 10:20:17AM +0200, Vincent Lefevre wrote:
> Package: mutt
> Version: 2.0.5-4.1
> Severity: grave
> Justification: causes non-serious data loss
> 
> Mutt 2.1.2 is available. From the announce: "This is an important
> bug-fix release, fixing a potential data-loss IMAP bug. IMAP users
> are strongly advised to upgrade."
> 
> For stable and oldstable: "Packagers, please consider backporting
> commit 647efbd1 if at all possible."
> 
> See
> http://lists.mutt.org/pipermail/mutt-announce/Week-of-Mon-20210823/40.html
> for additional information.
> 
> Note also that there is a minor "mutt -v" output issue with the
> current Mutt and, in particular, GNU Autoconf 2.71, which is now
> in unstable. I fixed this issue in Mutt's repository yesterday
> and I'm going to report a second bug for that.

I'm going to have this fixed in the next few days (by Sep 1st)



Bug#992927: mutt: Mutt 2.1.2 is available, fixing a potential data-loss IMAP bug

2021-08-25 Thread Vincent Lefevre
Package: mutt
Version: 2.0.5-4.1
Severity: grave
Justification: causes non-serious data loss

Mutt 2.1.2 is available. From the announce: "This is an important
bug-fix release, fixing a potential data-loss IMAP bug. IMAP users
are strongly advised to upgrade."

For stable and oldstable: "Packagers, please consider backporting
commit 647efbd1 if at all possible."

See
http://lists.mutt.org/pipermail/mutt-announce/Week-of-Mon-20210823/40.html
for additional information.

Note also that there is a minor "mutt -v" output issue with the
current Mutt and, in particular, GNU Autoconf 2.71, which is now
in unstable. I fixed this issue in Mutt's repository yesterday
and I'm going to report a second bug for that.

-- Package-specific info:
Mutt 2.1.1+55 (898eb3ca) vl-138565 (2021-08-24)
Copyright (C) 1996-2021 Michael R. Elkins and others.
Mutt comes with ABSOLUTELY NO WARRANTY; for details type `mutt -vv'.
Mutt is free software, and you are welcome to redistribute it
under certain conditions; type `mutt -vv' for details.

System: Linux 5.10.0-8-amd64 (x86_64)
ncurses: ncurses 6.2.20201114 (compiled with 6.2)
libidn: 1.38 (compiled with 1.38)

Compiler:
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/usr/lib/gcc/x86_64-linux-gnu/10/lto-wrapper
OFFLOAD_TARGET_NAMES=nvptx-none:amdgcn-amdhsa:hsa
OFFLOAD_TARGET_DEFAULT=1
Target: x86_64-linux-gnu
Configured with: ../src/configure -v --with-pkgversion='Debian 10.2.1-6' 
--with-bugurl=file:///usr/share/doc/gcc-10/README.Bugs 
--enable-languages=c,ada,c++,go,brig,d,fortran,objc,obj-c++,m2 --prefix=/usr 
--with-gcc-major-version-only --program-suffix=-10 
--program-prefix=x86_64-linux-gnu- --enable-shared --enable-linker-build-id 
--libexecdir=/usr/lib --without-included-gettext --enable-threads=posix 
--libdir=/usr/lib --enable-nls --enable-bootstrap --enable-clocale=gnu 
--enable-libstdcxx-debug --enable-libstdcxx-time=yes 
--with-default-libstdcxx-abi=new --enable-gnu-unique-object 
--disable-vtable-verify --enable-plugin --enable-default-pie --with-system-zlib 
--enable-libphobos-checking=release --with-target-system-zlib=auto 
--enable-objc-gc=auto --enable-multiarch --disable-werror --with-arch-32=i686 
--with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib 
--with-tune=generic 
--enable-offload-targets=nvptx-none=/build/gcc-10-Km9U7s/gcc-10-10.2.1/debian/tmp-nvptx/usr,amdgcn-amdhsa=/build/gcc-10-Km9U7s/gcc-10-10.2.1/debian/tmp-gcn/usr,hsa
 --without-cuda-driver --enable-checking=release --build=x86_64-linux-gnu 
--host=x86_64-linux-gnu --target=x86_64-linux-gnu 
--with-build-config=bootstrap-lto-lean --enable-link-mutex
Thread model: posix
Supported LTO compression algorithms: zlib zstd
gcc version 10.2.1 20210110 (Debian 10.2.1-6) 

Configure options: '--prefix=/home/vinc17 --enable-debug --enable-pop 
--enable-imap --with-ssl --enable-compressed 
--with-exec-shell=/home/vinc17/bin/sh.screen --enable-gpgme 
--with-system-dotlock=/usr/bin/mutt_dotlock CC=gcc '\''CFLAGS=-g -O3 
-march=native -fsanitize=undefined -fno-sanitize-recover'\'''

Compilation CFLAGS: -Wall -pedantic -Wno-long-long -g -O3 -march=native 
-fsanitize=undefined -fno-sanitize-recover

Compile options:
-DOMAIN
+DEBUG
-HOMESPOOL  +USE_SETGID  +USE_DOTLOCK  +DL_STANDALONE  +USE_FCNTL  -USE_FLOCK   
+USE_POP  +USE_IMAP  -USE_SMTP  
+USE_SSL_OPENSSL  -USE_SSL_GNUTLS  -USE_SASL  -USE_GSS  +HAVE_GETADDRINFO  
+HAVE_REGCOMP  -USE_GNU_REGEX  
+HAVE_COLOR  +HAVE_START_COLOR  +HAVE_TYPEAHEAD  +HAVE_BKGDSET  
+HAVE_CURS_SET  +HAVE_META  +HAVE_RESIZETERM  +HAVE_FUTIMENS  
+CRYPT_BACKEND_CLASSIC_PGP  +CRYPT_BACKEND_CLASSIC_SMIME  +CRYPT_BACKEND_GPGME  
-EXACT_ADDRESS  -SUN_ATTACHMENT  
+ENABLE_NLS  -LOCALES_HACK  +HAVE_WC_FUNCS  +HAVE_LANGINFO_CODESET  
+HAVE_LANGINFO_YESEXPR  
+HAVE_ICONV  -ICONV_NONTRANS  +HAVE_LIBIDN  -HAVE_LIBIDN2  +HAVE_GETSID  
-USE_HCACHE  
-USE_SIDEBAR  +USE_COMPRESSED  +USE_INOTIFY  
ISPELL="/usr/bin/ispell"
SENDMAIL="/usr/sbin/sendmail"
MAILPATH="/var/mail"
PKGDATADIR="/home/vinc17/share/mutt"
SYSCONFDIR="/home/vinc17/etc"
EXECSHELL="/home/vinc17/bin/sh.screen"
-MIXMASTER

To contact the developers, please mail to .
To report a bug, please contact the Mutt maintainers via gitlab:
https://gitlab.com/muttmua/mutt/issues

patch-20200424.vl.pretty_size.1
patch-20200505.vl.simplesearchkw.1
patch-20200424.pdmef.progress.vl.1
patch-20201129.vl.address_all_patt.1
patch-20201130.tamovl.sysdotlock.1

-- System Information:
Debian Release: bookworm/sid
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'stable-security'), (500, 
'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-8-amd64 (SMP w/8 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, 
TAINT_UNSIGNED_MODULE
Locale: LANG=POSIX, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of