Your message dated Sat, 10 Nov 2012 09:47:51 +0000 with message-id <e1tx7fl-00068t...@franck.debian.org> and subject line Bug#631257: fixed in dovecot 1:2.1.7-3 has caused the Debian Bug report #631257, regarding dovecot-core: Overwrites SSL certificate without warning to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 631257: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631257 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: dovecot-core Version: 1:2.1.7-1 Severity: critical Justification: causes serious data loss The dovecot-core postinst makes serious assumptions about the state of SSL certificates on a users machine. If a user has both the certificate and the private key in one file called /etc/ssl/certs/dovecot.pem, the postinst will not hesitate to overwrite them because /etc/ssl/private/dovecot.pem does not exist. Surely the postinst should check if either file exists not both? -- System Information: Debian Release: wheezy/sid APT prefers precise-updates APT policy: (500, 'precise-updates'), (500, 'precise-security'), (500, 'precise') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-29-generic (SMP w/8 CPU cores) Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---Source: dovecot Source-Version: 1:2.1.7-3 We believe that the bug you reported is fixed in the latest version of dovecot, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 631...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jaldhar H. Vyas <jald...@debian.org> (supplier of updated dovecot package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sat, 10 Nov 2012 03:50:30 -0500 Source: dovecot Binary: dovecot-common dovecot-core dovecot-dev dovecot-imapd dovecot-pop3d dovecot-lmtpd dovecot-managesieved dovecot-pgsql dovecot-mysql dovecot-sqlite dovecot-ldap dovecot-gssapi dovecot-sieve dovecot-solr dovecot-dbg Architecture: source all i386 Version: 1:2.1.7-3 Distribution: unstable Urgency: high Maintainer: Dovecot Maintainers <jaldhar-dove...@debian.org> Changed-By: Jaldhar H. Vyas <jald...@debian.org> Description: dovecot-common - Transitional package for dovecot dovecot-core - secure mail server that supports mbox, maildir, dbox and mdbox ma dovecot-dbg - debug symbols for Dovecot dovecot-dev - header files for the dovecot mail server dovecot-gssapi - GSSAPI authentication support for Dovecot dovecot-imapd - secure IMAP server that supports mbox, maildir, dbox and mdbox ma dovecot-ldap - LDAP support for Dovecot dovecot-lmtpd - secure LMTP server for Dovecot dovecot-managesieved - secure ManageSieve server for Dovecot dovecot-mysql - MySQL support for Dovecot dovecot-pgsql - PostgreSQL support for Dovecot dovecot-pop3d - secure POP3 server that supports mbox, maildir, dbox and mdbox ma dovecot-sieve - sieve filters support for Dovecot dovecot-solr - Solr full text search support for Dovecot dovecot-sqlite - SQLite support for Dovecot Closes: 601744 608719 623440 631257 665487 679017 680035 680992 685850 685896 686931 688197 688407 692632 Changes: dovecot (1:2.1.7-3) unstable; urgency=high . [ Jaldhar H. Vyas ] * [03d5499] Do not generate new dovecot cert if key or cert is already present (Closes: #685896,#631257) Thanks to Alexander Ufimtsev <al...@ucd.ie> and Jörg-Volker Peetz <jvpe...@web.de> for patches. * [5be6c2a] You should be able to upgrade and remove dovecot-managesieved without errors (Closes: #665487) * [1a9ad5c] Fixes instances where UTF-8 was misused instead of mUTF-7 (Closes: #680035) * [c0ac3ba] Backport of fix for failure to autocreate mailboxes (Closes: #623440) This also requires setting the default mail_location. * [ba1d3f5] Fix FTBS on Hurd (Closes: #686931) via upstream patch backported from mercurial. * [cfa92b5] Upgrade pigeonhole page to 0.3.1 (Closes: #688407) * [58f01c2] Generated certificates will now be created in /etc/dovecot (Closes: #608719) * [8e40ea5] Patch to build with PIE and bindnow by intrig...@debian.org (Closes: #679017) * [87d982b] Use libwrap (Closes: #685850) * [ebb5421] Start after nslcd (Closes: #692632) * [2db5c1a] Add support for dpkg triggers. This means dovecot will not be repeatedly restarted when installing or removing lots of plugins (Closes: #601744) * [bc66629] Patch to document -k in dsync.1 by Luca Capello <l...@pca.it> (Closes: #680992) * [ba67766] Add lintian overrides. . [ Marco Nenciarini ] * [ffba408] Updated watch file * [9777434] Install missing default configuration files from upstream * [9496828] Backport fix for segfault in managesieve triggered by CHECKSCRIPT command. (Closes: #688197) Checksums-Sha1: fc214389781ea1baa5d6c952a92150b91e062f41 2302 dovecot_2.1.7-3.dsc 68fc6c80b71946d88f492b3182cb73b43b921bbe 3778791 dovecot_2.1.7.orig.tar.gz e76fe2be1ed86cc0d902075c0a9b809e0c33123b 1122202 dovecot_2.1.7-3.debian.tar.gz be524789212c2d93468c6534727a9eeb26f41ca5 24334 dovecot-common_2.1.7-3_all.deb bf66eebcb3be8fd00ced5386ae21422e66bc602b 2904766 dovecot-core_2.1.7-3_i386.deb 3dde1cedbd32d9d3cadb92bad91e8f69e0ab2551 575134 dovecot-dev_2.1.7-3_i386.deb e0d6ff48376c3d8e4e294ece3c7428f28f2d58b0 425784 dovecot-imapd_2.1.7-3_i386.deb 28365bf859187cef0035054f20b9a8df00f80277 362254 dovecot-pop3d_2.1.7-3_i386.deb 77db62ff3a14ed98669f91f67d0a915abcd7e7ca 352092 dovecot-lmtpd_2.1.7-3_i386.deb a8519658c4682b7d864fd3a324429ecc21123ddf 391868 dovecot-managesieved_2.1.7-3_i386.deb 78f254335bcb4a249638fae46923dc65435e2025 344526 dovecot-pgsql_2.1.7-3_i386.deb 20e2a52347f6b8952f1f8d627aeabd6ad7cba6c5 341474 dovecot-mysql_2.1.7-3_i386.deb cdec2f0afd8444c62ca0e20d8ce3aec6564b72d4 339372 dovecot-sqlite_2.1.7-3_i386.deb f8a025212d3acb439d75fc16c8c2f455d9fc5362 354766 dovecot-ldap_2.1.7-3_i386.deb 5a489e67985a2d54798a0071b4e6eea5ca049691 339910 dovecot-gssapi_2.1.7-3_i386.deb f00799e18956a8bdfdebc517d120fd4cbeb63fd1 593878 dovecot-sieve_2.1.7-3_i386.deb 7d4c34c566cba44d87134024cf8bdb6ba7e31b63 352894 dovecot-solr_2.1.7-3_i386.deb ce4314741b29217b06c96017d4bd24f560977a92 5162908 dovecot-dbg_2.1.7-3_i386.deb Checksums-Sha256: 6edb0b85f8ab53725a56bbdddc70c7a84629a60ebdf7e7c04039d4fd33bd1640 2302 dovecot_2.1.7-3.dsc d5b7bc61fff947722aebe12ebb25e92c38ce3e27e14ebc54cfc66f0b346cf452 3778791 dovecot_2.1.7.orig.tar.gz 3b42fcac3da3363adfd73d44028934e459e5dc4978a2e46c199c8d683552945a 1122202 dovecot_2.1.7-3.debian.tar.gz bdcab7c81890fd1c1dd1dda7e7448ebf8c66d3d440dcc43637c55e322ee5d269 24334 dovecot-common_2.1.7-3_all.deb 29049980e636782d223feebc77a9eec6f259ab0d6eb1c45bf1d933150413e4a6 2904766 dovecot-core_2.1.7-3_i386.deb bd8ec5ad11b543e995eddfc79b68535fe0c380b474fbb99b355e0de35928c734 575134 dovecot-dev_2.1.7-3_i386.deb ed6f975bb23f4f184bab515edb53a15811aace0338bfdb65d639aa807df49b4f 425784 dovecot-imapd_2.1.7-3_i386.deb ca9f30122c2e7c306127d75559b76f95e760e6b5c6ae198563ace41c1cf79ca0 362254 dovecot-pop3d_2.1.7-3_i386.deb c6e9c6c675c00dfbaf7912a51e196a2b1fbe8e333637d10978595680af55bf76 352092 dovecot-lmtpd_2.1.7-3_i386.deb f2bb74cdcc436e09cac2bb8cf6852e32cbb03505a06b04ef708365ceaf079c03 391868 dovecot-managesieved_2.1.7-3_i386.deb 0c15f02e8f1bf95d7331b575bfd4c1d92b4bfc2fe1d2ed379836b62b6fabafe1 344526 dovecot-pgsql_2.1.7-3_i386.deb 9f78494eed34320339db71869bc6fefa5ae500e8fa6ed0e4c454aee21b855f84 341474 dovecot-mysql_2.1.7-3_i386.deb cfcf5001cff31cf140902b5500e1458612deac0a3320d3b203c21a6edcbaf47f 339372 dovecot-sqlite_2.1.7-3_i386.deb c3da8c0570784efc54e56281a3e44fbde5159e00a3cf43d4c419e63b881f6a64 354766 dovecot-ldap_2.1.7-3_i386.deb e342c8ea392177600a8f924a1397f24b685bcbaa408731f252abec46f5c502fa 339910 dovecot-gssapi_2.1.7-3_i386.deb ebd6d5f7d953f8429a2b9a9096d29e90ecbb886c90351268cd148346c8e9caa2 593878 dovecot-sieve_2.1.7-3_i386.deb cedc7aae9e80f8a236f91d7f64ac7b916091435098c22d74df5eb0eaeac8a9e5 352894 dovecot-solr_2.1.7-3_i386.deb c2c6343c719eb56a606a69ad8146f94dde9faa5b23008caaf4d97919e2f255ba 5162908 dovecot-dbg_2.1.7-3_i386.deb Files: dd75e78bafaa120e51d53e6721872183 2302 mail optional dovecot_2.1.7-3.dsc b52d0faf1b9ec21bc5552691fe0ff1d1 3778791 mail optional dovecot_2.1.7.orig.tar.gz cd5b424acc33ec3b2869c653ada4a81f 1122202 mail optional dovecot_2.1.7-3.debian.tar.gz 6fecccf2ed6e7059976d207112e55f95 24334 oldlibs extra dovecot-common_2.1.7-3_all.deb e2d05e9aaaea58dca7ed18a59dff3f47 2904766 mail optional dovecot-core_2.1.7-3_i386.deb 24835517f773ac84656ff565ccc9b582 575134 mail optional dovecot-dev_2.1.7-3_i386.deb 345ddd1e6951ecf19062b76a252a6dc5 425784 mail optional dovecot-imapd_2.1.7-3_i386.deb 15ea869e54f97f5662dc6da3b748890d 362254 mail optional dovecot-pop3d_2.1.7-3_i386.deb a5d5f737cf478b152ad0972f407da362 352092 mail optional dovecot-lmtpd_2.1.7-3_i386.deb 743e5c70391e0891330223aebc211930 391868 mail optional dovecot-managesieved_2.1.7-3_i386.deb ee4affa6f6cefc7dfab303e0a77bacb4 344526 mail optional dovecot-pgsql_2.1.7-3_i386.deb 05f16f90cbbafe88ffa94a26a84b5c1a 341474 mail optional dovecot-mysql_2.1.7-3_i386.deb d5fdf9c3d6a4be3ffa8db682ce8bbd7f 339372 mail optional dovecot-sqlite_2.1.7-3_i386.deb a52d998a9c883918135f22e73184f939 354766 mail optional dovecot-ldap_2.1.7-3_i386.deb a830e705db928a42b168f38da6a07129 339910 mail optional dovecot-gssapi_2.1.7-3_i386.deb a181ac405f72b51dfa120567d82cf079 593878 mail optional dovecot-sieve_2.1.7-3_i386.deb 58ec02816e35e9809abcdfb5709487c9 352894 mail optional dovecot-solr_2.1.7-3_i386.deb b59cead5a4591ac736c80f18dbb6b96b 5162908 debug extra dovecot-dbg_2.1.7-3_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iEYEARECAAYFAlCdoeQACgkQ2kYOR+5txmryYACfcU/4H34xaovRKIVfNXoWxAws Pm4An1QP9vpv7a6NSvGIzVX3zXtM/4UZ =iaiO -----END PGP SIGNATURE-----
--- End Message ---
