Merge ~bryce/ubuntu/+source/exim4:exim4-merge-v4.93--RC2-1-focal into ubuntu/+source/exim4:debian/sid

Proposed by Bryce Harrington
Status: Merged
Merge reported by: Christian Ehrhardt 
Merged at revision: b6d76faf99323ee3822ffce6a7e15cd86c90bacc
Proposed branch: ~bryce/ubuntu/+source/exim4:exim4-merge-v4.93--RC2-1-focal
Merge into: ubuntu/+source/exim4:debian/sid
Diff against target: 1111 lines (+768/-2)
4 files modified
debian/changelog (+710/-0)
debian/control (+4/-2)
debian/patches/fix_smtp_banner.patch (+53/-0)
debian/patches/series (+1/-0)
Reviewer Review Type Date Requested Status
Christian Ehrhardt  (community) Approve
Canonical Server Pending
Canonical Server packageset reviewers Pending
Review via email: mp+375581@code.launchpad.net

Description of the change

Merge with Debian's package. All ubuntu CVE changes are present in Debian's packaging and dropped, one Ubuntu change remains. The Ubuntu change is required for us but not appropriate for upstream so needs to remain.

PPA with test packages: https://launchpad.net/~bryce/+archive/ubuntu/exim4-merge-v4.93--rc2-1
  $ sudo add-apt-repository -yus lp:bryce/exim4-merge-v4.93--rc2-1
  $ sudo apt-get install exim4-base exim4-daemon-light
  $ sudo autopkgtest exim4 -- null

Usual tags pushed for review, to this branch:
  https://code.launchpad.net/~bryce/ubuntu/+source/exim4/+git/exim4/+ref/exim4-merge-v4.93--RC2-1-focal

Tested in LXC using the PPA package:

autopkgtest [00:41:34]: test basic: -----------------------]
autopkgtest [00:41:34]: test basic: - - - - - - - - - - results - - - - - - - - - -
basic PASS
autopkgtest [00:41:34]: @@@@@@@@@@@@@@@@@@@@ summary
basic PASS
root@exim4-merge-v4x93--RC2-1-focal:~# apt-cache policy exim4
exim4:
  Installed: 4.93~RC2-1ubuntu1~focal1
  Candidate: 4.93~RC2-1ubuntu1~focal1
  Version table:
 *** 4.93~RC2-1ubuntu1~focal1 500
        500 http://ppa.launchpad.net/bryce/exim4-merge-v4.93--rc2-1/ubuntu focal/main amd64 Packages
        100 /var/lib/dpkg/status
     4.92.1-1ubuntu4 500
        500 http://archive.ubuntu.com/ubuntu focal/main amd64 Packages

To post a comment you must log in.
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

- [√] changelog entry correct, targeted to correct codename
- [√] no major upstream changes to consider (doc/NewStuff :-)
- [√] debian changes look safe (although thre are a lot)
- [√] update-maintainer has been run
- [√] changes forwarded upstream/debian (if appropriate)
- [√] nothing else to drop
- [-] patches match what was proposed upstream
- [-] patches correctly included in debian/patches/series?
- [-] patches have correct DEP3 metadata

Exim as usually just LG on merges.
I tried but found nothing to criticize :-)

+1 on this merge

review: Approve
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

@bryce - is this waiting on something?

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

There is RC5 already, but more important i see:

 exim4 | 4.93~RC2-1ubuntu1 | focal | source, all

Lets call this MP done

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1diff --git a/debian/changelog b/debian/changelog
2index de7adfa..1d603bf 100644
3--- a/debian/changelog
4+++ b/debian/changelog
5@@ -1,3 +1,22 @@
6+exim4 (4.93~RC2-1ubuntu1) focal; urgency=medium
7+
8+ * Merge with Debian unstable. Remaining changes:
9+ - Show Ubuntu distribution in SMTP banner
10+ + Build-Depends on lsb-release to detect Distribution.
11+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
12+ * Dropped:
13+ - SECURITY UPDATE: remote command execution
14+ + d/p/CVE-2019-15846.patch: ensure not to interpret '\\'
15+ before '\0' in src/string.c
16+ + CVE-2019-15846
17+ [Now in upstream as of 4.92.2-1]
18+ - SECURITY UPDATE: heap-based buffer overflow in string_vformat
19+ + debian/patches/CVE-2019-16928.patch: fix overflow in src/string.c.
20+ + CVE-2019-16928
21+ [Now upstream as of 4.92.3-1]
22+
23+ -- Bryce Harrington <bryce@canonical.com> Wed, 13 Nov 2019 18:56:58 -0800
24+
25 exim4 (4.93~RC2-1) unstable; urgency=low
26
27 * New upstream beta version.
28@@ -154,6 +173,42 @@ exim4 (4.92.1-2) unstable; urgency=medium
29
30 -- Andreas Metzler <ametzler@debian.org> Wed, 14 Aug 2019 09:25:28 +0200
31
32+exim4 (4.92.1-1ubuntu4) focal; urgency=medium
33+
34+ * No-change rebuild for the perl update.
35+
36+ -- Matthias Klose <doko@ubuntu.com> Fri, 18 Oct 2019 19:27:29 +0000
37+
38+exim4 (4.92.1-1ubuntu3) eoan; urgency=medium
39+
40+ * SECURITY UPDATE: heap-based buffer overflow in string_vformat
41+ - debian/patches/CVE-2019-16928.patch: fix overflow in src/string.c.
42+ - CVE-2019-16928
43+
44+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 28 Sep 2019 11:05:50 -0400
45+
46+exim4 (4.92.1-1ubuntu2) eoan; urgency=medium
47+
48+ * SECURITY UPDATE: remote command execution
49+ - debian/patches/CVE-2019-15846.patch: ensure not to interpret '\\'
50+ before '\0' in src/string.c
51+ - CVE-2019-15846
52+
53+ -- Alex Murray <alex.murray@canonical.com> Thu, 05 Sep 2019 11:29:48 +0930
54+
55+exim4 (4.92.1-1ubuntu1) eoan; urgency=medium
56+
57+ * Merge with Debian unstable. Remaining changes:
58+ - Show Ubuntu distribution in SMTP banner
59+ + Build-Depends on lsb-release to detect Distribution.
60+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
61+ * Dropped:
62+ - d/p/CVE-2019-13917.patch: avoid re-expansion in ${sort } in
63+ src/expand.c.
64+ [Fixed in 4.92.1]
65+
66+ -- Bryce Harrington <bryce@canonical.com> Mon, 12 Aug 2019 19:18:33 -0700
67+
68 exim4 (4.92.1-1) unstable; urgency=low
69
70 * New upstream bugfix release. (4.92.1 is 4.92 + the fix for CVE-2019-13917,
71@@ -224,6 +279,24 @@ exim4 (4.92-8) unstable; urgency=low
72
73 -- Andreas Metzler <ametzler@debian.org> Sat, 08 Jun 2019 17:37:43 +0200
74
75+exim4 (4.92-7ubuntu2) eoan; urgency=medium
76+
77+ * SECURITY UPDATE: code execution via ${sort }
78+ - debian/patches/CVE-2019-13917.patch: avoid re-expansion in ${sort }
79+ in src/expand.c.
80+ - CVE-2019-13917
81+
82+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 25 Jul 2019 12:58:39 -0400
83+
84+exim4 (4.92-7ubuntu1) eoan; urgency=medium
85+
86+ * Merge with Debian unstable. Remaining changes:
87+ - Show Ubuntu distribution in SMTP banner
88+ + Build-Depends on lsb-release to detect Distribution.
89+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
90+
91+ -- Bryce Harrington <bryce@canonical.com> Mon, 13 May 2019 13:48:18 -0700
92+
93 exim4 (4.92-7) unstable; urgency=medium
94
95 * Upload to unstable.
96@@ -251,6 +324,15 @@ exim4 (4.92-5) unstable; urgency=medium
97
98 -- Andreas Metzler <ametzler@debian.org> Sun, 07 Apr 2019 13:39:31 +0200
99
100+exim4 (4.92-4ubuntu1) disco; urgency=medium
101+
102+ * Merge with Debian unstable (LP: #1821339). Remaining changes:
103+ * Show Ubuntu distribution in SMTP banner
104+ - Build-Depends on lsb-release to detect Distribution.
105+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
106+
107+ -- Karl Stenerud <karl.stenerud@canonical.com> Mon, 25 Mar 2019 12:02:33 +0100
108+
109 exim4 (4.92-4) unstable; urgency=medium
110
111 * Another patch from exim-4.92+fixes branch:
112@@ -269,6 +351,15 @@ exim4 (4.92-3) unstable; urgency=medium
113
114 -- Andreas Metzler <ametzler@debian.org> Wed, 20 Mar 2019 17:01:29 +0100
115
116+exim4 (4.92-2ubuntu1) disco; urgency=medium
117+
118+ * Merge with Debian unstable (LP: #1818444). Remaining changes:
119+ - Show Ubuntu distribution in SMTP banner
120+ + Build-Depends on lsb-release to detect Distribution.
121+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
122+
123+ -- Karl Stenerud <kstenerud@gmail.com> Tue, 05 Mar 2019 10:55:48 +0100
124+
125 exim4 (4.92-2) unstable; urgency=medium
126
127 * Upload to unstable.
128@@ -325,6 +416,21 @@ exim4 (4.92~RC4-3) unstable; urgency=medium
129
130 -- Andreas Metzler <ametzler@debian.org> Sun, 20 Jan 2019 17:52:39 +0100
131
132+exim4 (4.92~RC4-2ubuntu2) disco; urgency=medium
133+
134+ * No-change rebuild against libmysqlclient21
135+
136+ -- Steve Langasek <steve.langasek@ubuntu.com> Fri, 01 Feb 2019 16:57:54 +0000
137+
138+exim4 (4.92~RC4-2ubuntu1) disco; urgency=medium
139+
140+ * Merge with Debian unstable (LP: #1811095). Remaining changes:
141+ - Show Ubuntu distribution in SMTP banner
142+ + Build-Depends on lsb-release to detect Distribution.
143+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
144+
145+ -- Karl Stenerud <kstenerud@gmail.com> Thu, 10 Jan 2019 16:41:45 +0100
146+
147 exim4 (4.92~RC4-2) unstable; urgency=medium
148
149 * Upload to unstable.
150@@ -418,6 +524,22 @@ exim4 (4.91-7) unstable; urgency=low
151
152 -- Andreas Metzler <ametzler@debian.org> Sun, 26 Aug 2018 11:33:15 +0200
153
154+exim4 (4.91-6ubuntu2) disco; urgency=medium
155+
156+ * No-change rebuild for the perl 5.28 transition.
157+
158+ -- Adam Conrad <adconrad@ubuntu.com> Fri, 02 Nov 2018 18:08:13 -0600
159+
160+exim4 (4.91-6ubuntu1) cosmic; urgency=medium
161+
162+ * Merge with Debian unstable. Remaining changes:
163+ - Show Ubuntu distribution in SMTP banner
164+ + Build-Depends on lsb-release to detect Distribution.
165+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
166+ [DEP3 header updated to indicate it has been forwarded to Debian]
167+
168+ -- Andreas Hasenack <andreas@canonical.com> Mon, 30 Jul 2018 15:35:06 -0300
169+
170 exim4 (4.91-6) unstable; urgency=low
171
172 * Update from exim-4_91+fixes branch:
173@@ -429,6 +551,16 @@ exim4 (4.91-6) unstable; urgency=low
174
175 -- Andreas Metzler <ametzler@debian.org> Fri, 20 Jul 2018 11:21:24 +0200
176
177+exim4 (4.91-5ubuntu1) cosmic; urgency=medium
178+
179+ * Merge with Debian unstable. Remaining changes:
180+ - Show Ubuntu distribution in SMTP banner
181+ - Build-Depends on lsb-release to detect Distribution.
182+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
183+ [DEP3 header updated to indicate it has been forwarded to Debian]
184+
185+ -- Andreas Hasenack <andreas@canonical.com> Tue, 03 Jul 2018 11:13:08 -0300
186+
187 exim4 (4.91-5) unstable; urgency=medium
188
189 * Update from exim-4_91+fixes branch:
190@@ -438,6 +570,15 @@ exim4 (4.91-5) unstable; urgency=medium
191
192 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Jun 2018 18:10:39 +0200
193
194+exim4 (4.91-4ubuntu1) cosmic; urgency=medium
195+
196+ * Merge from Debian testing, Remaining changes:
197+ - Show Ubuntu distribution in SMTP banner
198+ - Build-Depends on lsb-release to detect Distribution.
199+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
200+
201+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Wed, 30 May 2018 12:46:14 +0200
202+
203 exim4 (4.91-4) unstable; urgency=medium
204
205 * Update from exim-4_91+fixes branch:
206@@ -556,6 +697,15 @@ exim4 (4.90.1-2) unstable; urgency=medium
207
208 -- Andreas Metzler <ametzler@debian.org> Sat, 10 Mar 2018 14:25:51 +0100
209
210+exim4 (4.90.1-1ubuntu1) bionic; urgency=medium
211+
212+ * Merge from Debian testing, Remaining changes:
213+ - Show Ubuntu distribution in SMTP banner
214+ - Build-Depends on lsb-release to detect Distribution.
215+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
216+
217+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Wed, 14 Feb 2018 17:01:14 +0100
218+
219 exim4 (4.90.1-1) unstable; urgency=high
220
221 * New upstream version, fixing CVE-2018-6789. Closes: #890000
222@@ -750,6 +900,15 @@ exim4 (4.89-10) unstable; urgency=critical
223
224 -- Andreas Metzler <ametzler@debian.org> Sat, 25 Nov 2017 11:43:24 +0100
225
226+exim4 (4.89-9ubuntu1) bionic; urgency=medium
227+
228+ * Merge from Debian unstable, Remaining changes:
229+ - Show Ubuntu distribution in SMTP banner
230+ - Build-Depends on lsb-release to detect Distribution.
231+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
232+
233+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Thu, 16 Nov 2017 10:02:23 +0100
234+
235 exim4 (4.89-9) unstable; urgency=medium
236
237 * Upload to unstable.
238@@ -792,6 +951,42 @@ exim4 (4.89-6) unstable; urgency=medium
239
240 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Sep 2017 15:29:39 +0200
241
242+exim4 (4.89-5ubuntu1.3) artful-security; urgency=medium
243+
244+ * SECURITY UPDATE: Buffer overflow in base64d()
245+ - debian/patches/CVE-2018-6789.patch: fix overflow in src/base64.c.
246+ - CVE-2018-6789
247+
248+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 10 Feb 2018 14:12:27 -0500
249+
250+exim4 (4.89-5ubuntu1.2) artful-security; urgency=medium
251+
252+ * SECURITY UPDATE: stack-exhaustion remote DoS
253+ - debian/patches/CVE-2017-16944.patch: do not treat the first lonely
254+ dot special in src/receive.c, src/smtp_in.c.
255+ - CVE-2017-16944
256+
257+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 29 Nov 2017 08:59:31 -0500
258+
259+exim4 (4.89-5ubuntu1.1) artful-security; urgency=medium
260+
261+ * SECURITY UPDATE: remote code execution via use-after-free
262+ - debian/patches/CVE-2017-16943.patch: avoid release of store if there
263+ have been later allocations in src/receive.c.
264+ - CVE-2017-16943
265+
266+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Mon, 27 Nov 2017 07:37:47 -0500
267+
268+exim4 (4.89-5ubuntu1) artful; urgency=medium
269+
270+ * Merge from Debian testing.
271+ Remaining changes:
272+ - Show Ubuntu distribution in SMTP banner
273+ - Build-Depends on lsb-release to detect Distribution.
274+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
275+
276+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Wed, 16 Aug 2017 15:42:47 +0200
277+
278 exim4 (4.89-5) unstable; urgency=medium
279
280 * Update to exim-4_89+fixes branch:
281@@ -836,6 +1031,20 @@ exim4 (4.89-4) unstable; urgency=low
282
283 -- Andreas Metzler <ametzler@debian.org> Sat, 15 Jul 2017 12:46:16 +0200
284
285+exim4 (4.89-3ubuntu2) artful; urgency=medium
286+
287+ * No-change rebuild for perl 5.26.0.
288+
289+ -- Matthias Klose <doko@ubuntu.com> Wed, 26 Jul 2017 20:02:24 +0000
290+
291+exim4 (4.89-3ubuntu1) artful; urgency=medium
292+
293+ * Merge from Debian. Remaining changes:
294+ - Show Ubuntu distribution in SMTP banner.
295+ - Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
296+
297+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 27 Jun 2017 10:20:42 -0400
298+
299 exim4 (4.89-3) unstable; urgency=high
300
301 * Re-upload to unstable.
302@@ -848,6 +1057,15 @@ exim4 (4.89-2+deb9u1) stretch-security; urgency=medium
303
304 -- <jmm@debian.org> Wed, 14 Jun 2017 07:03:07 +0200
305
306+exim4 (4.89-2ubuntu1) artful; urgency=medium
307+
308+ * Merge from Debian testing.
309+ Remaining changes:
310+ + Show Ubuntu distribution in SMTP banner.
311+ + Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
312+
313+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Thu, 01 Jun 2017 11:58:00 +0200
314+
315 exim4 (4.89-2) unstable; urgency=medium
316
317 * Revert addition of header "# pidfile: /var/run/exim4/exim.pid" to
318@@ -939,6 +1157,17 @@ exim4 (4.89~RC1-1) unstable; urgency=low
319
320 -- Andreas Metzler <ametzler@debian.org> Tue, 31 Jan 2017 19:52:50 +0100
321
322+exim4 (4.88-5ubuntu1) zesty; urgency=medium
323+
324+ * Merge from Debian unstable.
325+ Version 4.88 fixes CVE-2016-9963 (LP: #1654750) and symlink
326+ local root escalation (LP: #1580454)
327+ Remaining changes:
328+ + Show Ubuntu distribution in SMTP banner.
329+ + Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
330+
331+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Tue, 24 Jan 2017 10:15:09 +0100
332+
333 exim4 (4.88-5) unstable; urgency=medium
334
335 * 78_Disable-chunking-BDAT-by-default.patch: Change default value of main
336@@ -1091,6 +1320,20 @@ exim4 (4.88~RC1-1) experimental; urgency=low
337
338 -- Andreas Metzler <ametzler@debian.org> Sun, 25 Sep 2016 15:44:00 +0200
339
340+exim4 (4.87-3ubuntu2) zesty; urgency=medium
341+
342+ * No-change rebuild for perl 5.24 transition
343+
344+ -- Iain Lane <iain@orangesquash.org.uk> Mon, 24 Oct 2016 10:08:10 +0100
345+
346+exim4 (4.87-3ubuntu1) yakkety; urgency=medium
347+
348+ * Merge from Debian unstable. Remaining changes:
349+ + Show Ubuntu distribution in SMTP banner.
350+ + Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
351+
352+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Tue, 26 Jul 2016 13:30:09 +0200
353+
354 exim4 (4.87-3) unstable; urgency=medium
355
356 * Pull multiple patches from upstream GIT:
357@@ -1264,6 +1507,48 @@ exim4 (4.87~RC1-1) experimental; urgency=medium
358
359 -- Andreas Metzler <ametzler@debian.org> Fri, 11 Dec 2015 20:15:30 +0100
360
361+exim4 (4.86.2-2ubuntu2.3) xenial-security; urgency=medium
362+
363+ * SECURITY UPDATE: Buffer overflow in base64d()
364+ - debian/patches/CVE-2018-6789.patch: fix overflow in
365+ src/auths/b64decode.c.
366+ - CVE-2018-6789
367+
368+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 10 Feb 2018 14:18:40 -0500
369+
370+exim4 (4.86.2-2ubuntu2.2) xenial-security; urgency=medium
371+
372+ * SECURITY UPDATE: memory leak
373+ - debian/patches/93_CVE-2017-1000368.patch: free -p argument if
374+ allocation was required.
375+ - CVE-2017-1000368
376+
377+ -- Steve Beattie <sbeattie@ubuntu.com> Fri, 02 Jun 2017 22:07:28 -0700
378+
379+exim4 (4.86.2-2ubuntu2.1) xenial-security; urgency=medium
380+
381+ * SECURITY UPDATE: DKIM information leakage
382+ - debian/patches/CVE-2016-9963.patch: fix information leakage in
383+ src/dkim.c, src/transports/smtp.c.
384+ - CVE-2016-9963
385+
386+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 05 Jan 2017 08:29:10 -0500
387+
388+exim4 (4.86.2-2ubuntu2) xenial; urgency=medium
389+
390+ * Rebuild against libmysqlclient20.
391+
392+ -- Robie Basak <robie.basak@ubuntu.com> Tue, 05 Apr 2016 12:21:41 +0000
393+
394+exim4 (4.86.2-2ubuntu1) xenial; urgency=medium
395+
396+ * Merge from Debian unstable. Remaining changes:
397+ - debian.control, debian/patches/fix_smtp_banner.patch
398+ + Show Ubuntu distribution in SMTP banner.
399+ + Build-Depends on lsb-release.
400+
401+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 15 Mar 2016 11:56:18 -0400
402+
403 exim4 (4.86.2-2) unstable; urgency=high
404
405 * Bump exim4-config Breaks to exim4-daemon-* (<< 4.86.2). Closes: #816790
406@@ -1285,6 +1570,27 @@ exim4 (4.86.2-1) unstable; urgency=high
407
408 -- Andreas Metzler <ametzler@debian.org> Tue, 01 Mar 2016 19:34:39 +0100
409
410+exim4 (4.86-7ubuntu3) xenial; urgency=medium
411+
412+ * No-change rebuild for gnutls transition.
413+
414+ -- Matthias Klose <doko@ubuntu.com> Wed, 17 Feb 2016 22:40:56 +0000
415+
416+exim4 (4.86-7ubuntu2) xenial; urgency=medium
417+
418+ * Rebuild for Perl 5.22.1.
419+
420+ -- Colin Watson <cjwatson@ubuntu.com> Fri, 18 Dec 2015 10:30:54 +0000
421+
422+exim4 (4.86-7ubuntu1) xenial; urgency=medium
423+
424+ * Merge from Debian unstable. Remaining changes:
425+ - debian.control, debian/patches/fix_smtp_banner.patch
426+ + Show Ubuntu distribution in SMTP banner.
427+ + Build-Depends on lsb-release.
428+
429+ -- Pierre-André MOREY <pierre-andre.morey@canonical.com> Mon, 14 Dec 2015 14:23:51 +0100
430+
431 exim4 (4.86-7) unstable; urgency=medium
432
433 * Allow arch-indep build (dpkg-buildpackage -A). Closes: #806023
434@@ -1335,6 +1641,15 @@ exim4 (4.86-4) unstable; urgency=medium
435
436 -- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2015 15:01:01 +0200
437
438+exim4 (4.86-3ubuntu1) wily; urgency=medium
439+
440+ * Merge from Debian unstable. (LP: #1485369) Remaining changes:
441+ - debian/control, debian/patches/fix_smtp_banner.patch:
442+ + Show Ubuntu distribution in SMTP banner.
443+ + Build-Depends on lsb-release.
444+
445+ -- Artur Rona <ari-tczew@ubuntu.com> Thu, 17 Sep 2015 13:18:20 +0100
446+
447 exim4 (4.86-3) unstable; urgency=medium
448
449 * Pull three patches from upstream git:
450@@ -1375,6 +1690,15 @@ exim4 (4.86~RC5-1) unstable; urgency=medium
451
452 -- Andreas Metzler <ametzler@debian.org> Sat, 18 Jul 2015 11:46:11 +0200
453
454+exim4 (4.86~RC4-2ubuntu1) wily; urgency=low
455+
456+ * Merge from Debian unstable. (LP: #1166671) Remaining changes:
457+ - debian/control, debian/patches/fix_smtp_banner.patch:
458+ + Show Ubuntu distribution in SMTP banner.
459+ + Build-Depends on lsb-release.
460+
461+ -- Artur Rona <ari-tczew@ubuntu.com> Mon, 06 Jul 2015 12:09:36 +0200
462+
463 exim4 (4.86~RC4-2) unstable; urgency=medium
464
465 * Drop libmysqlclient15-dev alternative build-dependency. Closes: #790463
466@@ -1539,6 +1863,18 @@ exim4 (4.85~RC1+dfsg-1) experimental; urgency=medium
467
468 -- Andreas Metzler <ametzler@debian.org> Tue, 18 Nov 2014 19:28:20 +0100
469
470+exim4 (4.84-8ubuntu1) vivid; urgency=low
471+
472+ * Merge from Debian unstable. (LP: #1434300) Remaining changes:
473+ - debian/control, debian/patches/fix_smtp_banner.patch:
474+ + Show Ubuntu distribution in SMTP banner.
475+ + Build-Depends on lsb-release.
476+ - debian/control:
477+ + Don't provide default-mta; in Ubuntu,
478+ we want postfix to be the default.
479+
480+ -- Artur Rona <ari-tczew@ubuntu.com> Thu, 19 Mar 2015 00:15:40 +0100
481+
482 exim4 (4.84-8) unstable; urgency=medium
483
484 * Pull 83_Remove-limit-on-remove_headers-item-size.-Bug-1533.patch and
485@@ -1556,6 +1892,15 @@ exim4 (4.84-7) unstable; urgency=medium
486
487 -- Andreas Metzler <ametzler@debian.org> Sat, 07 Feb 2015 15:12:33 +0100
488
489+exim4 (4.84-6ubuntu1) vivid; urgency=medium
490+
491+ * Resynchronise with Debian. Remaining changes:
492+ - Show Ubuntu distribution in SMTP banner.
493+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
494+ default.
495+
496+ -- Colin Watson <cjwatson@ubuntu.com> Wed, 14 Jan 2015 11:26:29 +0000
497+
498 exim4 (4.84-6) unstable; urgency=medium
499
500 * Revert init script's restart order change in 4.84-4 for the time being.
501@@ -1564,6 +1909,15 @@ exim4 (4.84-6) unstable; urgency=medium
502
503 -- Andreas Metzler <ametzler@debian.org> Sun, 21 Dec 2014 14:07:12 +0100
504
505+exim4 (4.84-5ubuntu1) vivid; urgency=medium
506+
507+ * Resynchronise with Debian. Remaining changes:
508+ - Show Ubuntu distribution in SMTP banner.
509+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
510+ default.
511+
512+ -- Colin Watson <cjwatson@ubuntu.com> Thu, 18 Dec 2014 15:26:17 +0000
513+
514 exim4 (4.84-5) unstable; urgency=medium
515
516 * 82_quoted-or-r-2047-encoded.diff pulled from upstream git (sans
517@@ -1571,6 +1925,15 @@ exim4 (4.84-5) unstable; urgency=medium
518
519 -- Andreas Metzler <ametzler@debian.org> Wed, 17 Dec 2014 19:03:39 +0100
520
521+exim4 (4.84-4ubuntu1) vivid; urgency=medium
522+
523+ * Resynchronise with Debian. Remaining changes:
524+ - Show Ubuntu distribution in SMTP banner.
525+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
526+ default.
527+
528+ -- Colin Watson <cjwatson@ubuntu.com> Tue, 02 Dec 2014 15:28:46 +0000
529+
530 exim4 (4.84-4) unstable; urgency=medium
531
532 * Unset message_prefix/message_sufix in maildrop_pipe transport. Maildrop
533@@ -1585,6 +1948,15 @@ exim4 (4.84-4) unstable; urgency=medium
534
535 -- Andreas Metzler <ametzler@debian.org> Sun, 30 Nov 2014 08:24:04 +0100
536
537+exim4 (4.84-3ubuntu1) vivid; urgency=medium
538+
539+ * Resynchronise with Debian. Remaining changes:
540+ - Show Ubuntu distribution in SMTP banner.
541+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
542+ default.
543+
544+ -- Colin Watson <cjwatson@ubuntu.com> Tue, 11 Nov 2014 13:43:35 +0000
545+
546 exim4 (4.84-3) unstable; urgency=medium
547
548 * Apply patch to Italian (it) debconf template translation, thanks to
549@@ -1614,6 +1986,24 @@ exim4 (4.84~RC2-1) unstable; urgency=medium
550
551 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Aug 2014 07:42:00 +0200
552
553+exim4 (4.84~RC1-3ubuntu2) utopic; urgency=medium
554+
555+ * Rebuild for Perl 5.20.0.
556+
557+ -- Colin Watson <cjwatson@ubuntu.com> Thu, 21 Aug 2014 12:18:13 +0100
558+
559+exim4 (4.84~RC1-3ubuntu1) utopic; urgency=low
560+
561+ * Merge from Debian unstable (LP: #1351470). Remaining changes:
562+ - Show Ubuntu distribution on smtp:
563+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
564+ with Ubuntu distribution
565+ + debian/control: added lsb-release build dependency
566+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
567+ default.
568+
569+ -- Corey Bryant <corey.bryant@canonical.com> Mon, 04 Aug 2014 11:48:39 -0400
570+
571 exim4 (4.84~RC1-3) unstable; urgency=medium
572
573 * Third try. Simply comment *custom* in debian/control.
574@@ -1682,6 +2072,18 @@ exim4 (4.83~RC1-1) experimental; urgency=medium
575
576 -- Andreas Metzler <ametzler@debian.org> Thu, 29 May 2014 13:09:04 +0200
577
578+exim4 (4.82.1-2ubuntu1) utopic; urgency=low
579+
580+ * Merge from Debian unstable (LP: #1348074). Remaining changes:
581+ - Show Ubuntu distribution on smtp:
582+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
583+ with Ubuntu distribution
584+ + debian/control: added lsb-release build dependency
585+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
586+ default.
587+
588+ -- Robie Basak <robie.basak@ubuntu.com> Fri, 25 Jul 2014 15:53:09 +0000
589+
590 exim4 (4.82.1-2) unstable; urgency=high
591
592 * [87_double_expansion.diff] from upstream. Stop unwanted double expansion
593@@ -1699,6 +2101,18 @@ exim4 (4.82.1-1) unstable; urgency=high
594
595 -- Andreas Metzler <ametzler@debian.org> Wed, 28 May 2014 19:01:43 +0200
596
597+exim4 (4.82-8ubuntu1) utopic; urgency=medium
598+
599+ * Merge from Debian unstable. Remaining changes:
600+ - Show Ubuntu distribution on smtp:
601+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
602+ with Ubuntu distribution
603+ + debian/control: added lsb-release build dependency
604+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
605+ default.
606+
607+ -- Dimitri John Ledkov <xnox@ubuntu.com> Sat, 17 May 2014 01:50:20 +0100
608+
609 exim4 (4.82-8) unstable; urgency=medium
610
611 * Now that GMP has been relicensed to LGPLv3+/GPLv2+ build exim against
612@@ -1762,6 +2176,78 @@ exim4 (4.82-4) unstable; urgency=medium
613
614 -- Andreas Metzler <ametzler@debian.org> Sun, 09 Feb 2014 19:41:34 +0100
615
616+exim4 (4.82-3ubuntu2.4) trusty-security; urgency=medium
617+
618+ * SECURITY UPDATE: Buffer overflow in base64d()
619+ - debian/patches/CVE-2018-6789.patch: fix overflow in
620+ src/auths/b64decode.c.
621+ - CVE-2018-6789
622+
623+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 10 Feb 2018 14:19:43 -0500
624+
625+exim4 (4.82-3ubuntu2.3) trusty-security; urgency=medium
626+
627+ * SECURITY UPDATE: memory leak
628+ - debian/patches/CVE-2017-1000368.patch: free -p argument if
629+ allocation was required.
630+ - CVE-2017-1000368
631+
632+ -- Steve Beattie <sbeattie@ubuntu.com> Fri, 02 Jun 2017 22:44:35 -0700
633+
634+exim4 (4.82-3ubuntu2.2) trusty-security; urgency=medium
635+
636+ * SECURITY UPDATE: DKIM information leakage
637+ - debian/patches/CVE-2016-9963.patch: fix information leakage in
638+ src/dkim.c, src/transports/smtp.c.
639+ - CVE-2016-9963
640+
641+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 05 Jan 2017 08:31:06 -0500
642+
643+exim4 (4.82-3ubuntu2.1) trusty-security; urgency=medium
644+
645+ * SECURITY UPDATE: privilege escalation via crafted lookup value
646+ - debian/patches/CVE-2014-2972.patch: only expand integers for integer
647+ math once.
648+ - CVE-2014-2972
649+ * SECURITY UPDATE: privilege escalation when used with perl_startup
650+ - debian/patches/CVE-2016-1531.patch: add new add_environment and
651+ keep_environment configuration options.
652+ - debian/patches/CVE-2016-1531-2.patch: don't issue env warning if env
653+ is empty.
654+ - debian/patches/CVE-2016-1531-3.patch: store the initial working
655+ directory, expand $initial_cwd.
656+ - debian/patches/CVE-2016-1531-4.patch: delay chdir(/) until we opened
657+ the main config.
658+ - Add macros MAIN_KEEP_ENVIRONMENT and MAIN_ADD_ENVIRONMENT to set the
659+ new options. Set "keep_environment =" by default to avoid a runtime
660+ warning.
661+ - Bump exim4-config Breaks to exim4-daemon-* (<< 4.82-3ubuntu2.1).
662+ - debian/exim4-config.NEWS: Add entry to warn of potential breakage.
663+ - CVE-2016-1531
664+ * WARNING: This update may break existing installations.
665+
666+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Mon, 14 Mar 2016 12:57:00 -0400
667+
668+exim4 (4.82-3ubuntu2) trusty; urgency=medium
669+
670+ * debian/tests/control: Add missing python test dependency, as
671+ debian/tests/security calls python.
672+
673+ -- Martin Pitt <martin.pitt@ubuntu.com> Tue, 25 Feb 2014 17:33:13 +0100
674+
675+exim4 (4.82-3ubuntu1) trusty; urgency=low
676+
677+ * Merge from Debian unstable (LP: #1259620). Remaining changes:
678+ - Show Ubuntu distribution on smtp:
679+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
680+ with Ubuntu distribution
681+ + debian/control: added lsb-release build dependency
682+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
683+ default.
684+ - Build-depend on db5.3.
685+
686+ -- Yolanda Robla <yolanda.robla@canonical.com> Tue, 10 Dec 2013 17:07:20 +0000
687+
688 exim4 (4.82-3) unstable; urgency=low
689
690 * Upload to unstable.
691@@ -1842,6 +2328,21 @@ exim4 (4.82~rc1-1) experimental; urgency=low
692
693 -- Andreas Metzler <ametzler@debian.org> Sun, 29 Sep 2013 14:43:25 +0200
694
695+exim4 (4.80-9ubuntu2) trusty; urgency=low
696+
697+ * Build-depend on libdb5.3-dev, instead of libdb5.1-dev.
698+
699+ -- Dmitrijs Ledkovs <xnox@ubuntu.com> Mon, 04 Nov 2013 12:14:54 +0000
700+
701+exim4 (4.80-9ubuntu1) trusty; urgency=low
702+
703+ * Resynchronise with Debian. Remaining changes:
704+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
705+ default.
706+ - Add "Ubuntu" to SMTP banner.
707+
708+ -- Colin Watson <cjwatson@ubuntu.com> Mon, 28 Oct 2013 11:55:21 -0700
709+
710 exim4 (4.80-9) unstable; urgency=low
711
712 * Upload to unstable.
713@@ -1888,6 +2389,34 @@ exim4 (4.80-8) experimental; urgency=low
714
715 -- Andreas Metzler <ametzler@debian.org> Sun, 01 Sep 2013 15:58:49 +0200
716
717+exim4 (4.80-7ubuntu4) trusty; urgency=low
718+
719+ * Rebuild for Perl 5.18.
720+
721+ -- Colin Watson <cjwatson@ubuntu.com> Wed, 23 Oct 2013 10:24:08 +0100
722+
723+exim4 (4.80-7ubuntu3) saucy; urgency=low
724+
725+ * debian/patches/fix_smtp_banner.patch: updated SMTP banner
726+ with Ubuntu distribution
727+ * debian/control: added lsb-release build dependency
728+
729+ -- Yolanda Robla <yolanda.robla@canonical.com> Tue, 18 Jun 2013 19:17:43 +0200
730+
731+exim4 (4.80-7ubuntu2) saucy; urgency=low
732+
733+ * debian/tests: Add autopkgtest.
734+
735+ -- Yolanda <yolanda.robla@canonical.com> Mon, 27 May 2013 11:31:35 +0200
736+
737+exim4 (4.80-7ubuntu1) raring; urgency=low
738+
739+ * Merge from Debian unstable (LP: #1166383). Remaining changes:
740+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
741+ we want postfix to be the default.
742+
743+ -- Robie Basak <robie.basak@canonical.com> Mon, 08 Apr 2013 18:13:15 +0100
744+
745 exim4 (4.80-7) unstable; urgency=low
746
747 * Use exim's ${quote:xxx} operator when invoking spfquery to disallow
748@@ -1907,6 +2436,14 @@ exim4 (4.80-6) unstable; urgency=low
749
750 -- Andreas Metzler <ametzler@debian.org> Wed, 21 Nov 2012 19:08:53 +0100
751
752+exim4 (4.80-5.1ubuntu1) raring; urgency=low
753+
754+ * Merge from Debian. Remaining changes:
755+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
756+ we want postfix to be the default.
757+
758+ -- Oussama Bounaim <o.bounaim@gmail.com> Sun, 11 Nov 2012 07:11:06 +0100
759+
760 exim4 (4.80-5.1) unstable; urgency=high
761
762 * Non-maintainer upload by the Security Team.
763@@ -1934,6 +2471,23 @@ exim4 (4.80-4) unstable; urgency=low
764
765 -- Andreas Metzler <ametzler@debian.org> Sat, 23 Jun 2012 18:35:03 +0200
766
767+exim4 (4.80-3ubuntu1.1) quantal-security; urgency=low
768+
769+ * SECURITY UPDATE: arbitrary code execution via dns decode logic
770+ - debian/patches/CVE-2012-5671.patch: adjust max length and validate
771+ against it in src/pdkim/pdkim.h, src/dkim.c.
772+ - CVE-2012-5671
773+
774+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 25 Oct 2012 08:22:46 -0400
775+
776+exim4 (4.80-3ubuntu1) quantal; urgency=low
777+
778+ * Merge from Debian unstable. Remaining changes:
779+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
780+ we want postfix to be the default.
781+
782+ -- Clint Byrum <clint@ubuntu.com> Thu, 14 Jun 2012 15:28:08 -0700
783+
784 exim4 (4.80-3) unstable; urgency=low
785
786 * Pull 75_openssl_sni.diff from upstream. - Segfault caused by NULL
787@@ -2081,6 +2635,26 @@ exim4 (4.76-4) experimental; urgency=low
788
789 -- Andreas Metzler <ametzler@debian.org> Sat, 24 Sep 2011 18:36:08 +0200
790
791+exim4 (4.76-3ubuntu3) precise; urgency=low
792+
793+ * Rebuild for libmysqlclient transition
794+
795+ -- Clint Byrum <clint@ubuntu.com> Wed, 23 Nov 2011 23:29:35 -0800
796+
797+exim4 (4.76-3ubuntu2) precise; urgency=low
798+
799+ * Rebuild for Perl 5.14.
800+
801+ -- Colin Watson <cjwatson@ubuntu.com> Wed, 16 Nov 2011 01:22:39 +0000
802+
803+exim4 (4.76-3ubuntu1) precise; urgency=low
804+
805+ * Merge from debian unstable. Remaining changes:
806+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
807+ we want postfix to be the default.
808+
809+ -- Stéphane Graber <stgraber@ubuntu.com> Thu, 20 Oct 2011 11:29:07 -0400
810+
811 exim4 (4.76-3) unstable; urgency=low
812
813 * [exim4-base.cron.daily] Correct invocation of mail(1), options need to be
814@@ -2101,6 +2675,14 @@ exim4 (4.76-3) unstable; urgency=low
815
816 -- Andreas Metzler <ametzler@debian.org> Sun, 18 Sep 2011 11:49:13 +0200
817
818+exim4 (4.76-2ubuntu1) oneiric; urgency=low
819+
820+ * Merge from debian unstable. Remaining changes:
821+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
822+ we want postfix to be the default.
823+
824+ -- Stéphane Graber <stgraber@ubuntu.com> Mon, 30 May 2011 17:48:56 -0400
825+
826 exim4 (4.76-2) unstable; urgency=low
827
828 * debian/rules: Remove test/ and test-stamp on clean.
829@@ -2113,6 +2695,14 @@ exim4 (4.76-2) unstable; urgency=low
830
831 -- Andreas Metzler <ametzler@debian.org> Sun, 29 May 2011 18:21:03 +0200
832
833+exim4 (4.76-1ubuntu1) oneiric; urgency=low
834+
835+ * Merge from debian unstable. Remaining changes (LP: #779391):
836+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
837+ we want postfix to be the default.
838+
839+ -- Stéphane Graber <stgraber@ubuntu.com> Mon, 23 May 2011 12:37:30 -0400
840+
841 exim4 (4.76-1) unstable; urgency=low
842
843 * New upstream version.
844@@ -2159,6 +2749,14 @@ exim4 (4.75-3) unstable; urgency=high
845
846 -- Andreas Metzler <ametzler@debian.org> Fri, 06 May 2011 20:08:51 +0200
847
848+exim4 (4.75-2ubuntu1) oneiric; urgency=low
849+
850+ * Merge from debian unstable. Remaining changes:
851+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
852+ we want postfix to be the default.
853+
854+ -- Stéphane Graber <stgraber@ubuntu.com> Fri, 06 May 2011 14:51:28 -0400
855+
856 exim4 (4.75-2) unstable; urgency=low
857
858 * clamav socket on Debian is clamd:/var/run/clamav/clamd.ctl, fix
859@@ -2201,6 +2799,24 @@ exim4 (4.74-2) unstable; urgency=low
860
861 -- Andreas Metzler <ametzler@debian.org> Thu, 24 Feb 2011 19:02:07 +0100
862
863+exim4 (4.74-1ubuntu1) natty; urgency=low
864+
865+ * Merge from debian experimental. Remaining changes: (LP: #713855)
866+ - debian/patches/71_exiq_grep_error_on_messages_without_size.patch:
867+ + Improve handling of broken messages when "exim4 -bp" (mailq)
868+ reports lines without size info. (Closes: #528625)
869+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
870+ we want postfix to be the default.
871+ - debian/{control,rules}: Add and enable hardened build for PIE.
872+ (Closes: #542726)
873+ * Update 71_exiq_grep_error_on_messages_without_size.patch to get way
874+ which upstream has fixed it. Probably it can be dropped with next
875+ upstream release.
876+ * This upload fixes CVE: (LP: #708023)
877+ - CVE-2011-0017
878+
879+ -- Artur Rona <ari-tczew@ubuntu.com> Wed, 09 Feb 2011 21:31:35 +0100
880+
881 exim4 (4.74-1) experimental; urgency=low
882
883 * 4.74 release, should build on hurd again.
884@@ -2226,6 +2842,20 @@ exim4 (4.74~rc2-1) experimental; urgency=low
885
886 -- Andreas Metzler <ametzler@debian.org> Sun, 23 Jan 2011 14:02:36 +0100
887
888+exim4 (4.73~rc1-1ubuntu1) natty; urgency=low
889+
890+ * Merge from debian unstable. Remaining changes: (LP: #697934)
891+ - debian/patches/71_exiq_grep_error_on_messages_without_size.patch:
892+ + Improve handling of broken messages when "exim4 -bp" (mailq)
893+ reports lines without size info.
894+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
895+ we want postfix to be the default.
896+ - debian/{control,rules}: Add and enable hardened build for PIE.
897+ (Closes: #542726)
898+ * Drop B-D on libmysqlclient15-dev, resolved in Debian.
899+
900+ -- Artur Rona <ari-tczew@ubuntu.com> Tue, 28 Dec 2010 22:20:17 +0100
901+
902 exim4 (4.73~rc1-1) experimental; urgency=low
903
904 * New upstream release candidate.
905@@ -2321,6 +2951,20 @@ exim4 (4.72-3) unstable; urgency=low
906
907 -- Andreas Metzler <ametzler@debian.org> Sun, 26 Dec 2010 15:13:08 +0100
908
909+exim4 (4.72-2ubuntu1) natty; urgency=low
910+
911+ * Merge from debian unstable. Remaining changes: (LP: #671615)
912+ - debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
913+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
914+ lines without size info.
915+ - Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
916+ the default.
917+ - debian/control: Change build dependencies to MySQL 5.1.
918+ - debian/{control,rules}: add and enable hardened build for PIE
919+ (Closes: #542726).
920+
921+ -- Artur Rona <ari-tczew@ubuntu.com> Fri, 05 Nov 2010 21:05:47 +0100
922+
923 exim4 (4.72-2) unstable; urgency=low
924
925 [ Marc Haber ]
926@@ -2344,6 +2988,20 @@ exim4 (4.72-2) unstable; urgency=low
927
928 -- Andreas Metzler <ametzler@debian.org> Sat, 30 Oct 2010 13:38:26 +0200
929
930+exim4 (4.72-1ubuntu1) maverick; urgency=low
931+
932+ * Merge with Debian unstable (LP: #609620). Remaining changes:
933+ + debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
934+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
935+ lines without size info.
936+ + Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
937+ the default.
938+ + debian/control: Change build dependencies to MySQL 5.1.
939+ + debian/{control,rules}: add and enable hardened build for PIE
940+ (Closes: #542726).
941+
942+ -- Artur Rona <ari-tczew@tlen.pl> Sun, 25 Jul 2010 02:00:42 +0200
943+
944 exim4 (4.72-1) unstable; urgency=low
945
946 * New upstream release. (Identical to the git snapshot previously
947@@ -2395,6 +3053,20 @@ exim4 (4.71-4) unstable; urgency=low
948
949 -- Andreas Metzler <ametzler@debian.org> Thu, 25 Mar 2010 17:34:30 +0100
950
951+exim4 (4.71-3ubuntu1) lucid; urgency=low
952+
953+ * Merge with Debian unstable (lp: #501657). Remaining changes:
954+ + debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
955+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
956+ lines without size info.
957+ + Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
958+ the default.
959+ + debian/control: Change build dependencies to MySQL 5.1.
960+ + debian/{control,rules}: add and enable hardened build for PIE
961+ (Debian bug 542726).
962+
963+ -- Michael Bienia <geser@ubuntu.com> Fri, 01 Jan 2010 16:28:19 +0100
964+
965 exim4 (4.71-3) unstable; urgency=low
966
967 * exim4-base.cron.daily: Do not run exim_tidydb on Berkeley DB logfiles.
968@@ -2509,6 +3181,35 @@ exim4 (4.70~cvs+20091017-1) experimental; urgency=low
969
970 -- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2009 14:26:54 +0200
971
972+exim4 (4.69-11ubuntu4) karmic; urgency=low
973+
974+ * debian/{control,rules}: add and enable hardened build for PIE
975+ (Debian bug 542726).
976+
977+ -- Kees Cook <kees@ubuntu.com> Thu, 20 Aug 2009 17:33:26 -0700
978+
979+exim4 (4.69-11ubuntu3) karmic; urgency=low
980+
981+ * debian/control: Change build dependencies to MySQL 5.1.
982+
983+ -- Mathias Gug <mathiaz@ubuntu.com> Mon, 17 Aug 2009 17:57:26 -0400
984+
985+exim4 (4.69-11ubuntu2) karmic; urgency=low
986+
987+ * Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
988+ the default.
989+
990+ -- Steve Langasek <steve.langasek@ubuntu.com> Wed, 03 Jun 2009 15:39:14 +0000
991+
992+exim4 (4.69-11ubuntu1) karmic; urgency=low
993+
994+ * Merge from debian unstable (LP: #375923), remaining changes:
995+ - debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
996+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
997+ lines without size info
998+
999+ -- Thierry Carrez <thierry.carrez@ubuntu.com> Wed, 13 May 2009 12:15:29 +0200
1000+
1001 exim4 (4.69-11) unstable; urgency=medium
1002
1003 * Build-Depend on lynx-cur|lynx instead of lynx. (lynx is just a dummy
1004@@ -2566,6 +3267,15 @@ exim4 (4.69-10) unstable; urgency=low
1005
1006 -- Andreas Metzler <ametzler@debian.org> Sat, 02 May 2009 09:05:56 +0200
1007
1008+exim4 (4.69-9ubuntu1) jaunty; urgency=low
1009+
1010+ [ Daniel van Eeden <launchpad@myname.nl> ]
1011+ * debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
1012+ Improve handling of broken messages when "exim4 -bp" (mailq) reports lines
1013+ w/o size info, LP: #18194
1014+
1015+ -- Dustin Kirkland <kirkland@ubuntu.com> Wed, 11 Feb 2009 06:43:52 -0600
1016+
1017 exim4 (4.69-9) unstable; urgency=medium
1018
1019 * [update-exim4.conf]: Use POSIX character classes [:alnum:] or explicit
1020diff --git a/debian/control b/debian/control
1021index 0d0ae2f..d72286f 100644
1022--- a/debian/control
1023+++ b/debian/control
1024@@ -1,7 +1,8 @@
1025 Source: exim4
1026 Section: mail
1027 Priority: standard
1028-Maintainer: Exim4 Maintainers <pkg-exim4-maintainers@lists.alioth.debian.org>
1029+Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
1030+XSBC-Original-Maintainer: Exim4 Maintainers <pkg-exim4-maintainers@lists.alioth.debian.org>
1031 Uploaders:
1032 Andreas Metzler <ametzler@debian.org>,
1033 Marc Haber <mh+debian-packages@zugschlus.de>
1034@@ -32,7 +33,8 @@ Build-Depends:
1035 libxt-dev,
1036 lynx,
1037 po-debconf,
1038- xsltproc
1039+ xsltproc,
1040+ lsb-release
1041
1042 Package: exim4-base
1043 Architecture: any
1044diff --git a/debian/patches/fix_smtp_banner.patch b/debian/patches/fix_smtp_banner.patch
1045new file mode 100644
1046index 0000000..615eb5a
1047--- /dev/null
1048+++ b/debian/patches/fix_smtp_banner.patch
1049@@ -0,0 +1,53 @@
1050+Description: Add EXIM_DISTRIBUTION var to display it on the SMTP banner
1051+Origin: https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-server-app-banner-updates
1052+Author: Yolanda Robla <yolanda.robla@canonical.com>
1053+Forwarded: https://salsa.debian.org/exim-team/exim4/merge_requests/2
1054+Last-Update: 2018-07-03
1055+
1056+--- a/src/globals.c
1057++++ b/src/globals.c
1058+@@ -1443,7 +1443,7 @@ int smtp_accept_queue_per_connection = 10;
1059+ int smtp_accept_reserve = 0;
1060+ uschar *smtp_active_hostname = NULL;
1061+ uschar *smtp_banner = US"$smtp_active_hostname ESMTP "
1062+- "Exim $version_number $tod_full"
1063++ "Exim $version_number " EXIM_DISTRIBUTION " $tod_full"
1064+ "\0<---------------Space to patch smtp_banner->";
1065+ int smtp_ch_index = 0;
1066+ uschar *smtp_cmd_argument = NULL;
1067+--- a/src/config.h.defaults
1068++++ b/src/config.h.defaults
1069+@@ -224,4 +224,6 @@ for EXIM_ARITH_MAX and _MIN in OS/oh.h-FOO */
1070+ #define SC_EXIM_ARITH "%" SCNi64 /* scanf incl. 0x prefix */
1071+ #define SC_EXIM_DEC "%" SCNd64 /* scanf decimal */
1072+
1073++#define EXIM_DISTRIBUTION
1074++
1075+ /* End of config.h.defaults */
1076+--- a/scripts/Configure-config.h
1077++++ b/scripts/Configure-config.h
1078+@@ -23,6 +23,12 @@
1079+ if [ "$1" != "" ] ; then MAKE=$1 ; fi
1080+ if [ "$MAKE" = "" ] ; then MAKE=make ; fi
1081+
1082++# exporting distribution to use it in smtp banner
1083++if test -x /usr/bin/lsb_release && lsb_release -si; then
1084++ export EXIM_DISTRIBUTION=\"$(lsb_release -si)\"
1085++else
1086++ export EXIM_DISTRIBUTION=\"\"
1087++fi
1088+ $MAKE buildconfig || exit 1
1089+
1090+ # BEWARE: tab characters needed in the following sed command. They have had
1091+--- a/src/exim.h
1092++++ b/src/exim.h
1093+@@ -597,5 +597,9 @@ default to EDQUOT if it exists, otherwise ENOSPC. */
1094+ # define EXIM_GROUPLIST_SIZE NGROUPS_MAX
1095+ #endif
1096+
1097++#ifndef EXIM_DISTRIBUTION
1098++ #define EXIM_DISTRIBUTION ""
1099++#endif
1100++
1101+ #endif
1102+ /* End of exim.h */
1103diff --git a/debian/patches/series b/debian/patches/series
1104index ee540f0..af77e85 100644
1105--- a/debian/patches/series
1106+++ b/debian/patches/series
1107@@ -7,3 +7,4 @@
1108 67_unnecessaryCopt.diff
1109 70_remove_exim-users_references.dpatch
1110 90_localscan_dlopen.dpatch
1111+fix_smtp_banner.patch

Subscribers

People subscribed via source and target branches