Your message dated Wed, 16 Aug 2023 15:37:37 +0000
with message-id <[email protected]>
and subject line Bug#1037984: fixed in opensmtpd-filter-rspamd 0.1.8-1
has caused the Debian Bug report #1037984,
regarding opensmtpd-filter-rspamd: update request to 0.1.8 to fix crash when 
username contains |
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1037984: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1037984
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: opensmtpd-filter-rspamd
Version: 0.1.7-1+b7
Severity: important

Dear Maintainer,

when using OpenSMTPD and filter-rspamd, if someone tries to login with
a username that contains the | character filter-rspamd crashes and
brings OpenSMTPD down.

I reported the bug here:

https://github.com/OpenSMTPD/OpenSMTPD/issues/1213

While the protocol change is being committed in the OpenSMTPD repo,
filter-rspamd already has the correct behavior + a workaround for
current OpenSMTPD versions in 0.1.8, released yesterday:

https://github.com/poolpOrg/filter-rspamd/commit/aec872dec91c16d4cd1a064d169dbad01d2b3bb5
https://github.com/poolpOrg/filter-rspamd/releases/tag/v0.1.8

Would it be possible to upgrade in Debian 11 the opensmtpd-filter-rspamd
package to version 0.1.8 or include the commit linked above in the current
version?

Without the fix it is easy to bring down the entire SMTP server.

Thanks

-- System Information:
Debian Release: 11.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-21-amd64 (SMP w/4 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages opensmtpd-filter-rspamd depends on:
ii  libc6  2.31-13+deb11u5

Versions of packages opensmtpd-filter-rspamd recommends:
ii  rspamd  2.7-1

opensmtpd-filter-rspamd suggests no packages.

-- no debconf information

--- End Message ---
--- Begin Message ---
Source: opensmtpd-filter-rspamd
Source-Version: 0.1.8-1
Done: Ryan Kavanagh <[email protected]>

We believe that the bug you reported is fixed in the latest version of
opensmtpd-filter-rspamd, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ryan Kavanagh <[email protected]> (supplier of updated opensmtpd-filter-rspamd 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 16 Aug 2023 11:18:43 -0400
Source: opensmtpd-filter-rspamd
Architecture: source
Version: 0.1.8-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <[email protected]>
Changed-By: Ryan Kavanagh <[email protected]>
Closes: 1037984
Changes:
 opensmtpd-filter-rspamd (0.1.8-1) unstable; urgency=medium
 .
   * New upstream release (Closes: #1037984)
   * Update copyright years
   * Update standards version to 4.6.2, no changes required
Checksums-Sha1:
 f9ba8ef75c400133a0e77e230f56724d24a1d225 2198 
opensmtpd-filter-rspamd_0.1.8-1.dsc
 0a82aed9db3e2b54801739b192cc80a75436058b 7449 
opensmtpd-filter-rspamd_0.1.8.orig.tar.gz
 88743445948a22fcf229eaa328940923434318c0 2912 
opensmtpd-filter-rspamd_0.1.8-1.debian.tar.xz
 29ccce3aa1009fd7d295f02290cfa735585a7a6a 6756 
opensmtpd-filter-rspamd_0.1.8-1_amd64.buildinfo
Checksums-Sha256:
 b6e577eb2ee75d8c0f71d6e75c83cc3a9257fe5a73783f2406afd3730cac0557 2198 
opensmtpd-filter-rspamd_0.1.8-1.dsc
 42b3e8d35feac813e695245b55c552126728de1a3219fb4dc64c62935f831f29 7449 
opensmtpd-filter-rspamd_0.1.8.orig.tar.gz
 f71677c9a973923fdf8eeef36ea574d44d28d19ba0413fa924281c62f1ad73da 2912 
opensmtpd-filter-rspamd_0.1.8-1.debian.tar.xz
 af6a1bbf85a510090fe56a6035df61096b1071b4f92e466fd1e7e9be61428586 6756 
opensmtpd-filter-rspamd_0.1.8-1_amd64.buildinfo
Files:
 66aefb232a3486e4143777c7d00c6578 2198 devel optional 
opensmtpd-filter-rspamd_0.1.8-1.dsc
 4967022d29beaf81fc1c9247eb88da7b 7449 devel optional 
opensmtpd-filter-rspamd_0.1.8.orig.tar.gz
 2e16aa0b907357dd55a8e9b942181510 2912 devel optional 
opensmtpd-filter-rspamd_0.1.8-1.debian.tar.xz
 c1ac889c912b79a34b4e319baf85027d 6756 devel optional 
opensmtpd-filter-rspamd_0.1.8-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=DXdF
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to