[Pkg-mutt-maintainers] Bug#834818: mutt: Saving a mail into a compressed mbox deletes all existing mails in this mbox

Fri Aug 19 11:21:25 UTC 2016

Package: mutt
Version: 1.6.2-2
Severity: critical
Justification: causes serious data loss

Dear Maintainer,

when the new mutt version 1.6.2-1 arrived in testing I had trouble with 
bug #834024 (mutt: „double free or corruption” when closing a compressed 
mbox). I gave the additional information that beside the double free 
problem the compressed mbox contained only the mail I wanted to save into 
this mbox resulting in data loss because all previous mails in the mbox 
were lost and I had to restore the mbox from backup.

Bug #834024 is now fixed in 1.6.2-2 but I still have the problem with 
data loss. That’s why I gave the bug the severity grave.

It doesn’t matter if your mbox is compressed with xz or gzip. I can 
always reproduce this bug (copy 'C' a mail to /tmp/test-mbox.gz, verify 
that the mail is there, copy another mail to /tmp/test-mbox.gz and you’ll 
see that only the last mail is available).

Many greetings,

	Stephan

-- Package-specific info:
Mutt 1.6.2-neo (2016-08-08)
Copyright (C) 1996-2016 Michael R. Elkins and others.
Mutt comes with ABSOLUTELY NO WARRANTY; for details type `mutt -vv'.
Mutt is free software, and you are welcome to redistribute it
under certain conditions; type `mutt -vv' for details.

System: Linux 4.7.1 (x86_64)
libidn: 1.33 (compiled with 1.33)
hcache backend: tokyocabinet 1.4.48

Compiler:
Using built-in specs.
COLLECT_GCC=gcc
COLLECT_LTO_WRAPPER=/usr/lib/gcc/x86_64-linux-gnu/6/lto-wrapper
Target: x86_64-linux-gnu
Configured with: ../src/configure -v --with-pkgversion='Debian 6.1.1-11' --with-bugurl=file:///usr/share/doc/gcc-6/README.Bugs --enable-languages=c,ada,c++,java,go,d,fortran,objc,obj-c++ --prefix=/usr --program-suffix=-6 --enable-shared --enable-linker-build-id --libexecdir=/usr/lib --without-included-gettext --enable-threads=posix --libdir=/usr/lib --enable-nls --with-sysroot=/ --enable-clocale=gnu --enable-libstdcxx-debug --enable-libstdcxx-time=yes --with-default-libstdcxx-abi=new --enable-gnu-unique-object --disable-vtable-verify --enable-libmpx --enable-plugin --with-system-zlib --disable-browser-plugin --enable-java-awt=gtk --enable-gtk-cairo --with-java-home=/usr/lib/jvm/java-1.5.0-gcj-6-amd64/jre --enable-java-home --with-jvm-root-dir=/usr/lib/jvm/java-1.5.0-gcj-6-amd64 --with-jvm-jar-dir=/usr/lib/jvm-exports/java-1.5.0-gcj-6-amd64 --with-arch-directory=amd64 --with-ecj-jar=/usr/share/java/eclipse-ecj.jar --enable-objc-gc --enable-multiarch --with-arch-32=i686 --with-abi=m64 --with-multilib-list=m32,m64,mx32 --enable-multilib --with-tune=generic --enable-checking=release --build=x86_64-linux-gnu --host=x86_64-linux-gnu --target=x86_64-linux-gnu
Thread model: posix
gcc version 6.1.1 20160802 (Debian 6.1.1-11) 

Configure options: '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=\${prefix}/include' '--mandir=\${prefix}/share/man' '--infodir=\${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-silent-rules' '--libdir=\${prefix}/lib/x86_64-linux-gnu' '--libexecdir=\${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' '--disable-dependency-tracking' '--with-mailpath=/var/mail' '--enable-compressed' '--enable-debug' '--enable-fcntl' '--enable-hcache' '--enable-gpgme' '--enable-imap' '--enable-smtp' '--enable-pop' '--enable-sidebar' '--enable-nntp' '--enable-notmuch' '--with-curses' '--with-gnutls' '--with-gss' '--with-idn' '--with-mixmaster' '--with-sasl' '--without-gdbm' '--without-bdb' '--without-qdbm' 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -fdebug-prefix-map=/build/mutt-ix9ST6/mutt-1.6.2=. -fPIE -fstack-protector-strong -Wformat -Werror=format-security' 'LDFLAGS=-fPIE -pie -Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2'

Compilation CFLAGS: -Wall -pedantic -Wno-long-long -g -O2 -fdebug-prefix-map=/build/mutt-ix9ST6/mutt-1.6.2=. -fPIE -fstack-protector-strong -Wformat -Werror=format-security

Compile options:
+CRYPT_BACKEND_CLASSIC_PGP +CRYPT_BACKEND_CLASSIC_SMIME +CRYPT_BACKEND_GPGME 
+DEBUG +DL_STANDALONE +ENABLE_NLS -EXACT_ADDRESS -HOMESPOOL -LOCALES_HACK 
-SUN_ATTACHMENT +HAVE_BKGDSET +HAVE_COLOR +HAVE_CURS_SET +HAVE_GETADDRINFO 
+HAVE_GETSID +HAVE_ICONV +HAVE_LANGINFO_CODESET +HAVE_LANGINFO_YESEXPR 
+HAVE_LIBIDN +HAVE_META +HAVE_REGCOMP +HAVE_RESIZETERM +HAVE_START_COLOR 
+HAVE_TYPEAHEAD +HAVE_WC_FUNCS +ICONV_NONTRANS +USE_COMPRESSED +USE_DOTLOCK 
+USE_FCNTL -USE_FLOCK +USE_FMEMOPEN -USE_GNU_REGEX +USE_GSS +USE_HCACHE 
+USE_IMAP +USE_NOTMUCH +USE_NNTP +USE_POP +USE_SASL +USE_SETGID +USE_SIDEBAR 
+USE_SMTP +USE_SSL_GNUTLS -USE_SSL_OPENSSL 
-DOMAIN
MIXMASTER="mixmaster"
-ISPELL
SENDMAIL="/usr/sbin/sendmail"
MAILPATH="/var/mail"
PKGDATADIR="/usr/share/mutt"
SYSCONFDIR="/etc"
EXECSHELL="/bin/sh"

patch-compress-neo-git
patch-cond-date-neo-git
patch-fmemopen-neo-git
patch-ifdef-neo-git
patch-index-color-neo-git
patch-initials-neo-git
patch-keywords-neo-git
patch-limit-current-thread-neo-git
patch-lmdb-neo-git
patch-multiple-fcc-neo-git
patch-nested-if-neo-git
patch-new-mail-neo-git
patch-nntp-neo-git
patch-progress-neo-git
patch-quasi-delete-neo-git
patch-sidebar-neo-git
patch-skip-quoted-neo-git
patch-smime-encrypt-to-self-neo-git
patch-status-color-neo-git
patch-timeout-neo-git
patch-tls-sni-neo-git
patch-trash-neo-git
patch-sensible-browser-neo-UNKNOWN

To learn more about NeoMutt, visit: http://www.neomutt.org/
If you find a bug in NeoMutt, please raise an issue at:
    https://github.com/neomutt/neomutt/issues
or contact the lead developer: Richard Russon <rich at flatcap.org>

-- System Information:
Debian Release: stretch/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.7.1 (SMP w/8 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages mutt depends on:
ii  libassuan0        2.4.3-1
ii  libc6             2.23-4
ii  libcomerr2        1.43.1-1
ii  libgnutls30       3.5.2-2
ii  libgpg-error0     1.24-1
ii  libgpgme11        1.6.0-3
ii  libgssapi-krb5-2  1.14.3+dfsg-1
ii  libidn11          1.33-1
ii  libk5crypto3      1.14.3+dfsg-1
ii  libkrb5-3         1.14.3+dfsg-1
ii  libncursesw5      6.0+20160625-1
ii  libnotmuch4       0.22.1-2
ii  libsasl2-2        2.1.26.dfsg1-15
ii  libtinfo5         6.0+20160625-1
ii  libtokyocabinet9  1.4.48-10

Versions of packages mutt recommends:
ii  libsasl2-modules  2.1.26.dfsg1-15
ii  locales           2.23-4
ii  mime-support      3.60

Versions of packages mutt suggests:
ii  aspell                          0.60.7~20110707-3+b1
ii  ca-certificates                 20160104
ii  gnupg                           1.4.20-6
ii  ispell                          3.4.00-5
pn  mixmaster                       <none>
ii  openssl                         1.0.2h-1
ii  postfix [mail-transport-agent]  3.1.0-5+b1
ii  urlview                         0.9-20

Versions of packages mutt is related to:
ii  mutt  1.6.2-2

-- no debconf information

-- 
| Stephan Seitz          E-Mail: stse at fsing.rootsland.net |
| Public Keys: http://fsing.rootsland.net/~stse/keys.html |
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3735 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-mutt-maintainers/attachments/20160819/18944ee9/attachment.bin>