Your message dated Fri, 02 May 2025 15:49:45 +0000
with message-id <e1uase1-006ymr...@fasolo.debian.org>
and subject line Bug#1104549: fixed in dovecot 1:2.4.1+dfsg1-3
has caused the Debian Bug report #1104549,
regarding dovecot-gssapi: GSSAPI authentication regression breaks some clients
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1104549: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104549
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: dovecot-gssapi
Version: 1:2.4.1+dfsg1-2
Severity: grave
Tags: upstream
Justification: Breaks other package's autopkgtests
Issue was first observed in gsasl's autopkgtest failures. Protocol traces are
available in #1104411.
Some (but not all) IMAP clients are unable to negotiate GSSAPI authentication
with Dovecot 2.4.1. Earlier versions worked as expected.
The issue has been traced to a particular upstream change [1], and has been
reported on upstream's mailing list [2].
While investigating a proper fix, we can potentially revert the implicated
change, which will additionally require reverting support for SCRAM-SHA-1-PLUS
and SCRAM-SHA-256-PLUS. These mechanisms have never been supported in a Debian
release, so this would not be a regression, and we should be able to re-enable
them once the correct fix is identified.
1.
https://github.com/dovecot/core/commit/1486c30e191ff079bfa78e7950173bb33d8073d9
2.
https://dovecot.org/mailman3/archives/list/dove...@dovecot.org/message/LMUX23ZRYPOJ6RRZWBPBUBSBYK4FLI6O/
--- End Message ---
--- Begin Message ---
Source: dovecot
Source-Version: 1:2.4.1+dfsg1-3
Done: Noah Meyerhans <no...@debian.org>
We believe that the bug you reported is fixed in the latest version of
dovecot, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1104...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Noah Meyerhans <no...@debian.org> (supplier of updated dovecot package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 02 May 2025 11:20:05 -0400
Source: dovecot
Architecture: source
Version: 1:2.4.1+dfsg1-3
Distribution: unstable
Urgency: medium
Maintainer: Dovecot Maintainers <dove...@packages.debian.org>
Changed-By: Noah Meyerhans <no...@debian.org>
Closes: 1104549
Changes:
dovecot (1:2.4.1+dfsg1-3) unstable; urgency=medium
.
* [bdf895a] upstream fix for GSSAPI authentication regression
(Closes: #1104549)
* [8f15017] d/copyright: Correct canonical reference to GNU licenses
* [ad8f661] dovecot-flatcurve: correct missing dependency on ucf
* [131567a] Fix miscellaneous groff errors in upstream manpages
* [a4a1404] Correct lintian warning debian-news-entry-has-unknown-version
Checksums-Sha1:
26710963c30c0f2aab812785de6e0d8e3a71cb38 4062 dovecot_2.4.1+dfsg1-3.dsc
9b57139d514e6d0f5b39b7f8f455764978a5e28a 81432
dovecot_2.4.1+dfsg1-3.debian.tar.xz
ed37f4b92711780e20f8117b9716fd7ece24c5ec 6727
dovecot_2.4.1+dfsg1-3_source.buildinfo
Checksums-Sha256:
9c27fcb1fc41b2129d9d739891e4b77f5537661c5aa254ea96c663aab9ff96f8 4062
dovecot_2.4.1+dfsg1-3.dsc
ccf7438396c1603612f456a75236b68ed001853c2aa76eb17ff684d8f2ba575a 81432
dovecot_2.4.1+dfsg1-3.debian.tar.xz
e07ec8b7487802c27ee1c792075ddffcf31c6defd53dc69e6362c1a1ef47df24 6727
dovecot_2.4.1+dfsg1-3_source.buildinfo
Files:
835e62cc098a5c75370493f83f7a6b0d 4062 mail optional dovecot_2.4.1+dfsg1-3.dsc
b976f249f27187790077865aaa69399f 81432 mail optional
dovecot_2.4.1+dfsg1-3.debian.tar.xz
74a55fa52de2cc90fa61ce952957be4a 6727 mail optional
dovecot_2.4.1+dfsg1-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=kPYQ
-----END PGP SIGNATURE-----
pgp3BcgMsrjDN.pgp
Description: PGP signature
--- End Message ---
