Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1270782 > unrolled thread

Bug#1121000: dovecot-ldap: Crash if iterate_filter is set, but iterate_fields is not set (fixed upstream)

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#1121000: dovecot-ldap: Crash if iterate_filter is set, but iterate_fields is not set (fixed upstream) Jonas Schäfer <jonas@zombofant.net> - 2025-11-19 12:50 +0100
    Bug#1121000: dovecot-ldap: Crash if iterate_filter is set, but iterate_fields is not set (fixed upstream) Noah Meyerhans <noahm@debian.org> - 2025-11-20 16:40 +0100

#1270782 — Bug#1121000: dovecot-ldap: Crash if iterate_filter is set, but iterate_fields is not set (fixed upstream)

Package: dovecot-ldap
Version: 1:2.4.1+dfsg1-6+deb13u2
Severity: normal
Tags: upstream

Dear Maintainer,

When configuring an LDAP database with iterate_filter, but without
iterate_fields, the auth-worker will crash.

This is fixed upstream:
https://github.com/dovecot/core/commit/
576a2f52bff4c13971d9e6d1172857a4f18ddd14

Please include this patch when convenient.

kind regards,
Jonas

-- Package-specific info:

dovecot configuration
---------------------
# 2.4.1-4 (7d8c0e5759): /etc/dovecot/dovecot.conf
# Pigeonhole version 2.4.1-4 (0a86619f)
# OS: Linux 6.12.57+deb13-amd64 x86_64 Debian 13.2
# Hostname: up1.h.sotecware.net
# 4 default setting changes since version 2.4.0
dovecot_config_version = 2.4.0
dovecot_storage_version = 2.4.0
fts_autoindex = yes
fts_autoindex_max_recent_msgs = 999
fts_search_add_missing = yes
language_filters = normalizer-icu snowball stopwords
language_tokenizers = generic email-address
mail_driver = maildir
mail_path = ~/Maildir
mail_plugins {
  fts = yes
  fts_flatcurve = yes
}
protocols {
  imap = yes
  sieve = yes
}
userdb ldap {
  ldap_base = ou=Account,dc=zombofant,dc=net
  ldap_uris = ldap://localhost
  driver = ldap
  fields {
     = home=/var/mail/%{ldap:uid}
    gid = mail
    home = /var/mail/%Ln
    uid = vmail
    user = %{ldap:disposableMailAddressOwner}
  }
  filter = (&(|(uid=%Ln)(mailLocalAddress=%u))
(objectClass=inetLocalMailRecipient))
  iterate_filter = (objectClass=inetLocalMailRecipient)
}
passdb ldap {
  ldap_base = ou=Account,dc=zombofant,dc=net
  ldap_uris = ldap://localhost
  driver = ldap
  fields {
    user = %Ld
  }
  bind = yes
  bind_userdn = passdb.auth_bind.userdn
  filter = (&(|(uid=%Ln)(mailLocalAddress=%u))
(objectClass=inetLocalMailRecipient))
}
namespace inbox {
  inbox = yes
  mailbox Drafts {
    auto = subscribe
    special_use = "\\Drafts"
  }
  mailbox Junk {
    auto = subscribe
    special_use = "\\Junk"
  }
  mailbox Trash {
    auto = subscribe
    special_use = "\\Trash"
  }
  mailbox Sent {
    auto = subscribe
    special_use = "\\Sent"
  }
  mailbox "Sent Messages" {
    special_use = "\\Sent"
  }
}
service imap-login {
  inet_listener imap {
  }
  inet_listener imaps {
  }
}
service pop3-login {
  inet_listener pop3 {
  }
  inet_listener pop3s {
  }
}
service submission-login {
  inet_listener submission {
  }
  inet_listener submissions {
  }
}
service lmtp {
  unix_listener lmtp {
  }
}
service imap {
}
service pop3 {
}
service submission {
}
service auth {
  unix_listener auth-userdb {
  }
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0660
    user = postfix
  }
}
service auth-worker {
}
service dict {
  unix_listener dict {
  }
}
protocol lda {
  mail_plugins {
    sieve = yes
  }
}
service managesieve-login {
  inet_listener sieve {
    port = 4190
  }
  inet_listener sieve_deprecated {
    port = 2000
  }
}
service managesieve {
}
language en {
  default = yes
  filters = lowercase snowball english-possessive stopwords
}
fts flatcurve {
  substring_search = yes
}

-- System Information:
Debian Release: 13.2
  APT prefers stable-updates
  APT policy: (990, 'stable-updates'), (990, 'stable-security'), (990, 
'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.57+deb13-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dovecot-ldap depends on:
ii  dovecot-core  1:2.4.1+dfsg1-6+deb13u2
ii  libc6         2.41-12
ii  libldap2      2.6.10+dfsg-1
ii  ucf           3.0052

dovecot-ldap recommends no packages.

dovecot-ldap suggests no packages.

Versions of packages dovecot-ldap is related to:
ii  dovecot-core [dovecot-common]  1:2.4.1+dfsg1-6+deb13u2
pn  dovecot-dev                    <none>
pn  dovecot-gssapi                 <none>
ii  dovecot-imapd                  1:2.4.1+dfsg1-6+deb13u2
ii  dovecot-ldap                   1:2.4.1+dfsg1-6+deb13u2
pn  dovecot-lmtpd                  <none>
ii  dovecot-managesieved           1:2.4.1+dfsg1-6+deb13u2
pn  dovecot-mysql                  <none>
pn  dovecot-pgsql                  <none>
pn  dovecot-pop3d                  <none>
ii  dovecot-sieve                  1:2.4.1+dfsg1-6+deb13u2
pn  dovecot-sqlite                 <none>

-- no debconf information

[toc] | [next] | [standalone]

#1270950

Control: tags -1 + pending

On Wed, Nov 19, 2025 at 12:38:46PM +0100, Jonas Schäfer wrote:
> When configuring an LDAP database with iterate_filter, but without
> iterate_fields, the auth-worker will crash.
> 
> This is fixed upstream:
> https://github.com/dovecot/core/commit/
> 576a2f52bff4c13971d9e6d1172857a4f18ddd14
> 
> Please include this patch when convenient.

Thanks. I've applied this to the sid and trixie branches and will
include it in the next uploads.

https://salsa.debian.org/debian/dovecot/-/commit/1186296ccbee9ed6bb0740c23a3a1510a5cc8b8e
and
https://salsa.debian.org/debian/dovecot/-/commit/e34626c5c27b59fcdd41fcdef54853911eceafc9

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web