Bug#671830: cyrus-imapd-2.2: IMAP SSL fails after update to openssl 0.9.8o-4squeeze12

[Tom Laermans]

Package: cyrus-imapd-2.2
Version: 2.2.13-19+squeeze3
Severity: important


On friday I upgraded my system, where openssl was upgraded from openssl_0.9.8o-4squeeze7_i386 to openssl_0.9.8o-4squeeze12_i386.deb.
This resulted in IMAP SSL not working anymore; the socket was listening, but there was no communication done over it. (Regular IMAP kept working as it should)

Mail clients could not login, Nagios didn't receive a response, and even typing gibberish into the connection does nothing at all.
I reverted to openssl_0.9.8o-4squeeze7_i386.deb and everything started working again instantly.
Typing gibberish into the connection now yields a BYE message stating TLS error, as it should and obviously mail clients could read their mail again.

I'm not sure if this should be assigned to openssl or cyrus...

-- System Information:
Debian Release: 6.0.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-2-vserver-686-bigmem (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages cyrus-imapd-2.2 depends on:
ii  cyru 2.2.13-19+squeeze3                  Cyrus mail system - common files
ii  liba 1.4.0~git20100726.dfsg.1-2+squeeze1 Heimdal Kerberos - ASN.1 library
ii  libc 2.7-18lenny7                        GNU C Library: Shared libraries
ii  libc 1.41.12-4stable1                    common error description library
ii  libd 4.7.25-9                            Berkeley v4.7 Database Libraries [
ii  libg 1.4.0~git20100726.dfsg.1-2+squeeze1 Heimdal Kerberos - GSSAPI support 
ii  libk 1.4.0~git20100726.dfsg.1-2+squeeze1 Heimdal Kerberos - libraries
ii  libr 1.4.0~git20100726.dfsg.1-2+squeeze1 Heimdal Kerberos - roken support l
ii  libs 2.1.22.dfsg1-23+lenny1              Cyrus SASL - authentication abstra
ii  libs 0.9.8o-4squeeze12                   SSL shared libraries
ii  libw 7.6.q-19                            Wietse Venema's TCP wrappers libra

cyrus-imapd-2.2 recommends no packages.

cyrus-imapd-2.2 suggests no packages.

-- no debconf information