Your message dated Tue, 26 Apr 2016 15:37:37 +0000
with message-id <[email protected]>
and subject line Bug#701013: fixed in mutt 1.6.0-1
has caused the Debian Bug report #701013,
regarding Outlook S/MIME signatures do not conform to RFC1847; be liberal in 
what we accept
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
701013: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=701013
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: mutt
Version: 1.5.21-6.2
Severity: normal
Tags: patch

Outlook S/MIME signatures' MIME information[1] look like this:

Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
        micalg=SHA1; boundary="----=_NextPart_000_0048_01CE0F64.555D09B0"

[...]
------=_NextPart_000_0048_01CE0F64.555D09B0
Content-Type: application/pkcs7-signature; name="smime.p7s"

RFC1847 wants both Content-Types to be the same, which Outlook does not do. The
attached patch tolerates an x- prefix in the minor protocol type. Otherwise
mutt will detect an "Inconsistent multipart/signed structure" and stop
verification. This issue has already been reported years ago[2].

[1] I hope it's Outlook and not Exchange's MAPI interface.
[2] http://marc.info/?l=mutt-users&m=116086978520003

-- Package-specific info:
Mutt 1.5.21 (2010-09-15)
Copyright (C) 1996-2009 Michael R. Elkins and others.
Mutt comes with ABSOLUTELY NO WARRANTY; for details type `mutt -vv'.
Mutt is free software, and you are welcome to redistribute it
under certain conditions; type `mutt -vv' for details.

System: Linux 3.2.0-4-amd64 (x86_64)
ncurses: ncurses 5.9.20110404 (compiled with 5.9)
libidn: 1.25 (compiled with 1.25)
hcache backend: tokyocabinet 1.4.47
Compile options:
-DOMAIN
+DEBUG
-HOMESPOOL  +USE_SETGID  +USE_DOTLOCK  +DL_STANDALONE  +USE_FCNTL  -USE_FLOCK   
+USE_POP  +USE_IMAP  +USE_SMTP  
-USE_SSL_OPENSSL  +USE_SSL_GNUTLS  +USE_SASL  +USE_GSS  +HAVE_GETADDRINFO  
+HAVE_REGCOMP  -USE_GNU_REGEX  
+HAVE_COLOR  +HAVE_START_COLOR  +HAVE_TYPEAHEAD  +HAVE_BKGDSET  
+HAVE_CURS_SET  +HAVE_META  +HAVE_RESIZETERM  
+CRYPT_BACKEND_CLASSIC_PGP  +CRYPT_BACKEND_CLASSIC_SMIME  +CRYPT_BACKEND_GPGME  
-EXACT_ADDRESS  -SUN_ATTACHMENT  
+ENABLE_NLS  -LOCALES_HACK  +COMPRESSED  +HAVE_WC_FUNCS  +HAVE_LANGINFO_CODESET 
 +HAVE_LANGINFO_YESEXPR  
+HAVE_ICONV  -ICONV_NONTRANS  +HAVE_LIBIDN  +HAVE_GETSID  +USE_HCACHE  
ISPELL="/usr/bin/ispell"
SENDMAIL="/usr/sbin/sendmail"
MAILPATH="/var/mail"
PKGDATADIR="/usr/share/mutt"
SYSCONFDIR="/etc"
EXECSHELL="/bin/sh"
MIXMASTER="mixmaster"
To contact the developers, please mail to <[email protected]>.
To report a bug, please visit http://bugs.mutt.org/.

misc/fix-smime-outlook-recognition.patch
misc/am-maintainer-mode
features/ifdef
features/xtitles
features/trash-folder
features/purge-message
features/imap_fast_trash
features/sensible_browser_position
features-old/patch-1.5.4.vk.pgp_verbose_mime
features/compressed-folders
features/compressed-folders.debian
debian-specific/Muttrc
debian-specific/Md.etc_mailname_gethostbyname.diff
debian-specific/use_usr_bin_editor.diff
debian-specific/correct_docdir_in_man_page.diff
debian-specific/dont_document_not_present_features.diff
debian-specific/document_debian_defaults
debian-specific/assumed_charset-compat
debian-specific/467432-write_bcc.patch
debian-specific/566076-build_doc_adjustments.patch
misc/define-pgp_getkeys_command.diff
misc/gpg.rc-paths
misc/smime.rc
upstream/531430-imapuser.patch
upstream/537818-emptycharset.patch
upstream/543467-thread-segfault.patch
upstream/542817-smimekeys-tmpdir.patch
upstream/548577-gpgme-1.2.patch
upstream/553321-ansi-escape-segfault.patch
upstream/568295-references.patch
upstream/547980-smime_keys-chaining.patch
upstream/528233-readonly-open.patch
upstream/228671-pipe-mime.patch
upstream/383769-score-match.patch
upstream/578087-header-strchr.patch
upstream/603288-split-fetches.patch
upstream/537061-dont-recode-saved-attachments.patch
upstream/608706-fix-spelling-errors.patch
upstream/620854-pop3-segfault.patch
upstream/611412-bts-regexp.patch
upstream/624058-gnutls-deprecated-set-priority.patch
upstream/624085-gnutls-deprecated-verify-peers.patch
upstream/584138-mx_update_context-segfault.patch
upstream/619216-gnutls-CN-validation.patch
upstream/611410-no-implicit_autoview-for-text-html.patch
upstream/path_max
misc/579967-fixes-german-translation.patch
mutt.org

-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing'), (300, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages mutt depends on:
ii  libc6             2.13-37
ii  libcomerr2        1.42.5-1
ii  libgnutls26       2.12.20-4
ii  libgpg-error0     1.10-3.1
ii  libgpgme11        1.2.0-1.4
ii  libgssapi-krb5-2  1.10.1+dfsg-3
ii  libidn11          1.25-2
ii  libk5crypto3      1.10.1+dfsg-3
ii  libkrb5-3         1.10.1+dfsg-3
ii  libncursesw5      5.9-10
ii  libsasl2-2        2.1.25.dfsg1-6
ii  libtinfo5         5.9-10
ii  libtokyocabinet9  1.4.47-2

Versions of packages mutt recommends:
ii  exim4-daemon-light [mail-transport-agent]  4.80-7
ii  libsasl2-modules                           2.1.25.dfsg1-6
ii  locales                                    2.13-37
ii  mime-support                               3.52-1

Versions of packages mutt suggests:
ii  aspell           0.60.7~20110707-1
ii  ca-certificates  20130119
ii  gnupg            1.4.12-7
ii  ispell           3.3.02-6
pn  mixmaster        <none>
ii  openssl          1.0.1c-4
pn  urlview          <none>

Versions of packages mutt is related to:
ii  mutt          1.5.21-6.3
pn  mutt-dbg      <none>
pn  mutt-patched  <none>

-- no debconf information
Index: mutt-1.5.21/crypt.c
===================================================================
--- mutt-1.5.21.orig/crypt.c	2013-02-20 13:35:28.747076790 +0100
+++ mutt-1.5.21/crypt.c	2013-02-20 13:36:14.184235250 +0100
@@ -775,6 +775,7 @@
   char *protocol;
   int protocol_major = TYPEOTHER;
   char *protocol_minor = NULL;
+  char *xstripped_protocol_minor = NULL;
   
   BODY *b = a;
   BODY **signatures = NULL;
@@ -803,12 +804,16 @@
       *t = '\0';
     
     protocol_major = mutt_check_mime_type (major);
+
+    if (strncmp(protocol_minor, "x-", 2) == 0)
+      xstripped_protocol_minor = protocol_minor + 2;
   }
 
   /* consistency check */
 
   if (!(a && a->next && a->next->type == protocol_major && 
-      !mutt_strcasecmp (a->next->subtype, protocol_minor)))
+      (!mutt_strcasecmp (a->next->subtype, protocol_minor) ||
+      !mutt_strcasecmp (a->next->subtype, xstripped_protocol_minor))))
   {
     state_attach_puts (_("[-- Error: "
                          "Inconsistent multipart/signed structure! --]\n\n"),

--- End Message ---
--- Begin Message ---
Source: mutt
Source-Version: 1.6.0-1

We believe that the bug you reported is fixed in the latest version of
mutt, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Matteo F. Vescovi <[email protected]> (supplier of updated mutt package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 26 Apr 2016 16:46:49 +0200
Source: mutt
Binary: mutt mutt-patched mutt-dbg
Architecture: source
Version: 1.6.0-1
Distribution: unstable
Urgency: medium
Maintainer: Antonio Radici <[email protected]>
Changed-By: Matteo F. Vescovi <[email protected]>
Description:
 mutt       - text-based mailreader supporting MIME, GPG, PGP and threading
 mutt-dbg   - debugging symbols for mutt
 mutt-patched - Mutt Mail User Agent with extra patches
Closes: 434235 670769 677687 678596 695220 701013 741147 809802 816706 818419
Changes:
 mutt (1.6.0-1) unstable; urgency=medium
 .
   * New upstream release.
     + adds the -E option to modify the draft file (Closes: #695220, #434235)
     + does not crash while managing attachments (Closes: #677687)
     + allows setting the signing digest for S/MIME (Closes: #741147)
     + properly parses Outlook's S/MIME signatures (Closes: #701013)
 .
   [ Antonio Radici ]
   * debian/control: moved the MTA from Recommends to Suggests (Closes: #670769)
   * debian/extra/mutt.desktop: set NoDisplay to false (Closes: #678596)
 .
   [ Matteo F. Vescovi ]
   * debian/patches/: patchset updated
     - upstream/809802_timeout_hook.patch added (Closes: #809802)
     As stated by the upstream maintainer,
     the following patches can be safely dropped: (Closes: #816706)
     - misc/fix-configure-test-operator.patch
     - upstream/531430-imapuser.patch
     - upstream/543467-thread-segfault.patch
     - upstream/548577-gpgme-1.2.patch
     - upstream/553321-ansi-escape-segfault.patch
     - upstream/603288-split-fetches.patch
     - upstream/611410-no-implicit_autoview-for-text-html.patch
   * debian/rules: Glob expansions added to make mutt reproducible.
     Thanks to Daniel Shahaf for the patch (Closes: #818419)
   * debian/control: S-V bump 3.9.6 -> 3.9.8 (no changes needed)
   * debian/control: Vcs-* fields updated for https:// usage
   * debian/control: add myself to Uploaders
   * debian/mutt.menu: file dropped
 .
   [ Evgeni Golov ]
   * update sidebar patch to the 20151111 version
   * update nntp patch to the 1.6.0 version
   * drop patches applied upstream
   * refresh patches against 1.6.0
Checksums-Sha1:
 65349c69abfc87010b03277714ec8fbcc8deacd3 2375 mutt_1.6.0-1.dsc
 bab62759af0873a94dc8b85a62a7a9e09e33c6bb 3954591 mutt_1.6.0.orig.tar.gz
 8bfa6298f2bc4c39889439ff39d4b702d871fad7 132792 mutt_1.6.0-1.debian.tar.xz
Checksums-Sha256:
 f50259a9539a3b41528a2d4624140aa205fe6d383e2a1ff74c0a968dc66146aa 2375 
mutt_1.6.0-1.dsc
 29afb6238ab7a540c0e3a78ce25c970f975ab6c0f0bc9f919993aab772136c19 3954591 
mutt_1.6.0.orig.tar.gz
 a6d3f0f1441f7f9ed50e4df47603ba8a4c0af70ea2130be4f7e9275bdeb2e0bd 132792 
mutt_1.6.0-1.debian.tar.xz
Files:
 7e4a767023698857e772221139cddb47 2375 mail standard mutt_1.6.0-1.dsc
 d05bb821d7040c61ba89b22d7c2bd388 3954591 mail standard mutt_1.6.0.orig.tar.gz
 8fc5739b7d6e75a8053b4353f7f1656e 132792 mail standard 
mutt_1.6.0-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Comment: Debian powered!
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=2d2Z
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to