Subject: dovecot-sieve: Vacation Address compare is not case insensitive anymore Package: dovecot-sieve Version: 1:2.3.4.1-5+deb10u5 Severity: normal
Dear Maintainer, DOP-1424 internal case: ######### from the dovecot list One year ago a bug was reported regarding pigeonhole vacation plugin https://www.mail-archive.com/dovecot@dovecot.org/msg78588.html a mail sent to u...@domain.com instead of u...@domain.com will generate a " vacation action: discarding vacation response for implicitly delivered message; no known (envelope) recipient address found in message headers (recipient=<u...@domain.com>, and no additional :addresses' are specified)" and no auto-response will be sent the problem seems to be located in /src/lib-sieve/plugins/vacation/cmd-vacation.c and the _contains_my_address_() function the comparison is done using dovecot's lib-smtp (src/lib-smtp/smtp-address.h) smtp_address_equals() function, which returns smtp_address_cmp(.) == 0; smtp_address_cmp() does a case insensitive comparison of the domain parts (using null_strcasecmp()) and a case sensitive comparison of the local parts (using null_strcmp()) ######### Answer from Stephan Bosch <step...@rename-it.nl> It's DOP-1424 and according to the bug tracker it is fixed per 2.3.10.1. ######### I think maybe a backport from this Patch may help integrated in buster: https://github.com/dovecot/pigeonhole/commit/400566cc4a6f938ed1dfe513c38f1bd681717ebe?branch=400566cc4a6f938ed1dfe513c38f1bd681717ebe&diff=split I prefer not to switch to testing. Regards, Uwe. -- Package-specific info: -- System Information: Debian Release: 10.7 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-13-amd64 (SMP w/8 CPU cores) Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8), LANGUAGE=de_DE.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages dovecot-sieve depends on: ii dovecot-core 1:2.3.4.1-5+deb10u5 ii libc6 2.28-10 ii ucf 3.0038+nmu1 dovecot-sieve recommends no packages. dovecot-sieve suggests no packages. Versions of packages dovecot-sieve is related to: ii dovecot-core [dovecot-common] 1:2.3.4.1-5+deb10u5 ii dovecot-dev 1:2.3.4.1-5+deb10u5 pn dovecot-gssapi <none> ii dovecot-imapd 1:2.3.4.1-5+deb10u5 pn dovecot-ldap <none> pn dovecot-lmtpd <none> ii dovecot-managesieved 1:2.3.4.1-5+deb10u5 pn dovecot-mysql <none> pn dovecot-pgsql <none> ii dovecot-pop3d 1:2.3.4.1-5+deb10u5 ii dovecot-sieve 1:2.3.4.1-5+deb10u5 pn dovecot-sqlite <none> -- no debconf information
