| Summary: | Dovecot auth process segfault on start | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Raphael Gertz <mageia> |
| Component: | RPM Packages | Assignee: | Raphael Gertz <mageia> |
| Status: | RESOLVED FIXED | QA Contact: | |
| Severity: | critical | ||
| Priority: | Normal | ||
| Version: | Cauldron | ||
| Target Milestone: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| URL: | https://www.mail-archive.com/dovecot@dovecot.org/msg74130.html | ||
| Whiteboard: | |||
| Source RPM: | dovecot-2.3.2.1-2.mga7.src.rpm | CVE: | |
| Status comment: | |||
|
Description
Raphael Gertz
2018-09-01 19:55:38 CEST
Seems a known bug related to glibc change. URL:
(none) =>
https://www.mail-archive.com/dovecot@dovecot.org/msg74130.html Seems realted a regression in glibc crypt function which invalidate the pointer, see the mail-archive link of mailing list. Assignee:
bugsquad =>
tmb They say that we may force the link against crypt lib and not glibc. Should the patch be applied or glibc patched to fix it for other services ? See (from same thread): https://www.mail-archive.com/dovecot@dovecot.org/msg74134.html Not tried yet, what do you think ? Seems related to last point of section "Deprecated and removed features, and other changes affecting compatibility" in release not of glibc 2.28 : https://www.sourceware.org/ml/libc-alpha/2018-08/msg00003.html Add patch dovecot-2.3.2.1-include-crypt-h.patch from dovecot ml which fix the problem : Index: SOURCES/dovecot-2.3.2.1-include-crypt-h.patch =================================================================== --- SOURCES/dovecot-2.3.2.1-include-crypt-h.patch (nonexistent) +++ SOURCES/dovecot-2.3.2.1-include-crypt-h.patch (copie de travail) @@ -0,0 +1,12 @@ +From: https://www.mail-archive.com/dovecot@dovecot.org/msg74132.html +diff -urNp dovecot-2.3.2.1/src/auth/mycrypt.c.orig dovecot-2.3.2.1/src/auth/mycrypt.c +--- dovecot-2.3.2.1/src/auth/mycrypt.c.orig 2018-09-01 20:17:20.451155812 +0200 ++++ dovecot-2.3.2.1/src/auth/mycrypt.c 2018-09-01 20:17:38.661155622 +0200 +@@ -14,6 +14,7 @@ + # define _XPG6 /* Some Solaris versions require this, some break with this */ + #endif + #include <unistd.h> ++#include <crypt.h> + + #include "mycrypt.h" + Index: SPECS/dovecot.spec =================================================================== --- SPECS/dovecot.spec (révision 1256095) +++ SPECS/dovecot.spec (copie de travail) @@ -36,7 +36,7 @@ Summary: Secure IMAP and POP3 server Name: dovecot Version: 2.3.2.1 -Release: %mkrel 2 +Release: %mkrel 3 License: MIT and LGPLv2 and BSD-like and Public Domain Group: System/Servers URL: https://dovecot.org @@ -50,6 +50,7 @@ Source8: https://www.earth.ox.ac.uk/~steve/sieve/procmail2sieve.pl Source9: %{name}-tmpfiles.conf Patch0: dovecot-2.2.6-compress-ldl.patch +Patch1: dovecot-2.3.2.1-include-crypt-h.patch Provides: imap-server pop3-server Provides: imaps-server pop3s-server Requires(post): systemd >= %{systemd_required_version} Waiting for build system version to close as resolved. Assignee:
tmb =>
mageia Should be fixed in dovecot-2.3.2.1-3.mga7, reopen if you still have the bug. Status:
NEW =>
RESOLVED |