Ubuntu
dovecot package

FTBFS with LTO

Bug #1951325 reported by Bryce Harrington on 2021-11-17

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	dovecot (Debian)	Fix Released	Unknown	debbugs #997513
	dovecot (Ubuntu)	Fix Released	High	Bryce Harrington

Bug Description

Dovecot 2.3.13 failed to build with LTO, so was configured in Ubuntu with 'optimize=-lto' to disable it.

Debian found that Dovecot 2.3.16 built ok with LTO and gcc 10, so implemented support in debian/rules for it.

Unfortunately, with gcc 11, building with LTO once again fails to build due to some test failures. See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=997513

Since we're shipping gcc 11 in jammy, when we merge Dovecot 2.3.16 we should disable this change from Debian to avoid FTBFS.

Related branches

~bryce/ubuntu/+source/dovecot:merge-v1e2.3.19.1adfsg1-2-kinetic

Merged into ubuntu/+source/dovecot:debian/sid at revision 3ac1a7a620dfea7848bb580b11959611cea5794e

git-ubuntu bot: Approve on 2022-08-10

Sergio Durigan Junior (community): Approve on 2022-08-10

Canonical Server Reporter: Pending requested 2022-08-10

~bryce/ubuntu/+source/dovecot:merge-v1e2.3.16adfsg1-3-jammy

Merged into ubuntu/+source/dovecot:debian/sid at revision 4440c1547a55d11b39c6bc2e9455d16ce3af60ee

Christian Ehrhardt  (community): Approve on 2021-11-19

Canonical Server: Pending requested 2021-11-17

git-ubuntu import: Pending requested 2021-11-17

CVE References

Bryce Harrington (bryce) on 2021-11-17

Changed in dovecot (Ubuntu):
status:	New → Triaged
importance:	Undecided → High
assignee:	nobody → Bryce Harrington (bryce)

Bug Watch Updater (bug-watch-updater) on 2021-11-18

Changed in dovecot (Debian):
status:	Unknown → New

Revision history for this message

Launchpad Janitor (janitor) wrote on 2021-12-07:

This bug was fixed in the package dovecot - 1:2.3.16+dfsg1-3ubuntu1

---------------
dovecot (1:2.3.16+dfsg1-3ubuntu1) jammy; urgency=medium

  [ Bryce Harrington ]
  * Merge with Debian unstable. (LP: #1946855)
    Remaining changes:
    - Package references hidden symbols during an LTO link. This needs further
      investigation. Until then, disable LTO.
  * Dropped:
    - SECURITY UPDATE: incorrectly escapes kid and azp fields in JWT tokens
      + debian/patches/CVE-2021-29157.patch: improve escaping in
        src/lib-dict-extra/dict-fs.c, src/lib-oauth2/oauth2-jwt.c,
        src/lib-oauth2/test-oauth2-jwt.c.
      [Included in Debian 1:2.3.13+dfsg1-2]
    - SECURITY UPDATE: plaintext command injection before STARTTLS
      + debian/patches/CVE-2021-33515.patch: properly handle command queue in
        src/lib-smtp/smtp-server-cmd-starttls.c,
        src/lib-smtp/smtp-server-connection.c.
      [Included in Debian 1:2.3.13+dfsg1-2]
  * d/rules: Disable Debian's recent enablement of LTO as well, as it
    FTBFS when building with gcc 11.
    (LP: #1951325)

  [ Simon Chopin ]
  * d/p/OpenSSL3.patch: Workaround to fix EC key handling when building
    with OpenSSL 3.0.
    (LP: #1945763)

-- Bryce Harrington <email address hidden> Wed, 17 Nov 2021 13:46:08 -0800

Changed in dovecot (Ubuntu):
status:	Triaged → Fix Released

Bug Watch Updater (bug-watch-updater) on 2022-01-05

Changed in dovecot (Debian):
status:	New → Fix Released

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

debbugs #997513
[done serious bookworm ftbfs sid] Edit

Bug watches keep track of this bug in other bug trackers.

Ubuntudovecot package