Merge ~bryce/ubuntu/+source/exim4:merge-v4.97-4-noble into ubuntu/+source/exim4:debian/sid

Proposed by Bryce Harrington
Status: Merged
Approved by: git-ubuntu bot
Approved revision: not available
Merge reported by: git-ubuntu bot
Merged at revision: e1aee92a7ab906c1c433ccdc0db849546b23f801
Proposed branch: ~bryce/ubuntu/+source/exim4:merge-v4.97-4-noble
Merge into: ubuntu/+source/exim4:debian/sid
Diff against target: 1789 lines (+1226/-20) (has conflicts)
6 files modified
debian/EDITME.exim4-heavy.diff (+0/-12)
debian/changelog (+1140/-0)
debian/control (+3/-2)
debian/debconf/conf.d/acl/30_exim4-config_check_rcpt (+27/-6)
debian/patches/fix_smtp_banner.patch (+55/-0)
debian/patches/series (+1/-0)
Conflict in debian/changelog
Reviewer Review Type Date Requested Status
git-ubuntu bot Approve
Andreas Hasenack Approve
Canonical Server Reporter Pending
Canonical Server Core Reviewers Pending
Review via email: mp+459547@code.launchpad.net

Description of the change

This is a re-merge for exim4 to pull an autopkgtest fix from Debian, that I think will fix the error we're seeing in autopkgtests. The error in those logs matches the situation that this change aims to fix.

I've verified the tests pass for the PPA:

* Results:
  - exim4/4.97-4ubuntu1~noble1
    + ✅ exim4 on noble for amd64 @ 27.01.24 22:52:23 Log️ 🗒️
    + ✅ exim4 on noble for arm64 @ 27.01.24 22:46:42 Log️ 🗒️
    + ✅ exim4 on noble for armhf @ 27.01.24 22:45:51 Log️ 🗒️
    + ✅ exim4 on noble for ppc64el @ 27.01.24 22:44:41 Log️ 🗒️
    + ✅ exim4 on noble for s390x @ 27.01.24 22:44:19 Log️ 🗒️

PPA: https://launchpad.net/~bryce/+archive/ubuntu/exim4-merge-v4.97-4

To post a comment you must log in.
Revision history for this message
Andreas Hasenack (ahasenack) wrote :

Debian just uploaded 4.97-5 ;)

Revision history for this message
Andreas Hasenack (ahasenack) wrote :

+1, straightforward

review: Approve
Revision history for this message
git-ubuntu bot (git-ubuntu-bot) wrote :

Approvers: bryce, ahasenack
Uploaders: bryce, ahasenack
MP auto-approved

review: Approve
Revision history for this message
Bryce Harrington (bryce) wrote :

Thanks Andreas, pushed:

Successfully signed dsc, buildinfo, changes files
Vcs-Git: https://git.launchpad.net/~bryce/ubuntu/+source/exim4
Vcs-Git-Commit: e1aee92a7ab906c1c433ccdc0db849546b23f801
Vcs-Git-Ref: refs/heads/merge-v4.97-4-noble
$ dput ubuntu ../exim4_4.97-4ubuntu1_source.changes
gpg: ../exim4_4.97-4ubuntu1_source.changes: Valid signature from E603B2578FB8F0FB
gpg: ../exim4_4.97-4ubuntu1.dsc: Valid signature from E603B2578FB8F0FB
D: Setting host argument.
Checking signature on .changes
Checking signature on .dsc
Uploading to ubuntu (via ftp to upload.ubuntu.com):
  Uploading exim4_4.97-4ubuntu1.dsc: done.
  Uploading exim4_4.97.orig.tar.xz: done.
  Uploading exim4_4.97-4ubuntu1.debian.tar.xz: done.
  Uploading exim4_4.97-4ubuntu1_source.buildinfo: done.
  Uploading exim4_4.97-4ubuntu1_source.changes: done.

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1diff --git a/debian/EDITME.exim4-heavy.diff b/debian/EDITME.exim4-heavy.diff
2index 0a63d8b..26faf78 100644
3--- a/debian/EDITME.exim4-heavy.diff
4+++ b/debian/EDITME.exim4-heavy.diff
5@@ -150,18 +150,6 @@
6
7
8 #------------------------------------------------------------------------------
9-@@ -1056,9 +1059,9 @@
10- # installed on your system (www.libspf2.org). Depending on where it is installed
11- # you may have to edit the CFLAGS and LDFLAGS lines.
12-
13--# SUPPORT_SPF=yes
14-+SUPPORT_SPF=yes
15- # CFLAGS += -I/usr/local/include
16--# LDFLAGS += -lspf2
17-+LDFLAGS += -lspf2
18-
19-
20- #------------------------------------------------------------------------------
21 @@ -1387,7 +1390,7 @@
22 # local part) can be increased by changing this value. It should be set to
23 # a multiple of 16.
24diff --git a/debian/changelog b/debian/changelog
25index f4858ea..365dbb8 100644
26--- a/debian/changelog
27+++ b/debian/changelog
28@@ -1,3 +1,4 @@
29+<<<<<<< debian/changelog
30 exim4 (4.97-5) unstable; urgency=low
31
32 * Multiple fixes from upstream GIT master:
33@@ -21,6 +22,27 @@ exim4 (4.97-5) unstable; urgency=low
34 (upstream bug #3059)
35
36 -- Andreas Metzler <ametzler@debian.org> Sun, 28 Jan 2024 14:08:10 +0100
37+=======
38+exim4 (4.97-4ubuntu1) noble; urgency=medium
39+
40+ * Merge with Debian unstable (LP: #2051408). Remaining changes:
41+ - Show Ubuntu distribution in SMTP banner
42+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution
43+ in SMTP banner.
44+ + d/control: Build-Depends on lsb-release to detect Distribution.
45+ - Disable external SPF support to avoid Build-Depends on libspf2-dev
46+ (only available in universe). SPF can still be implemented via
47+ spf-tools-perl, as documented in exim4.conf.template. This reverts
48+ Vcs-Git commit 494f1fe, first released in 4.95~RC0-1.
49+ (LP #1952738)
50+ + d/control: drop Build-Depends on libspf2-dev.
51+ + d/EDITME.exim4-heavy.diff: disable support for libspf2.
52+ + d/d/c/a/30_exim4-config_check_rcpt: restore SPF logic based
53+ on spfquery.mail-spf-perl from spf-tools-perl, but without
54+ the previously supported helo detection.
55+
56+ -- Bryce Harrington <bryce@canonical.com> Fri, 26 Jan 2024 17:11:37 -0800
57+>>>>>>> debian/changelog
58
59 exim4 (4.97-4) unstable; urgency=medium
60
61@@ -30,6 +52,55 @@ exim4 (4.97-4) unstable; urgency=medium
62
63 -- Andreas Metzler <ametzler@debian.org> Sat, 06 Jan 2024 07:48:19 +0100
64
65+exim4 (4.97-3ubuntu2) noble; urgency=medium
66+
67+ * No-change rebuild for the perl update.
68+
69+ -- Matthias Klose <doko@ubuntu.com> Thu, 11 Jan 2024 04:29:22 +0100
70+
71+exim4 (4.97-3ubuntu1) noble; urgency=medium
72+
73+ * Merge with Debian unstable (LP: #2040379). Remaining changes:
74+ - Show Ubuntu distribution in SMTP banner
75+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution
76+ in SMTP banner.
77+ + d/control: Build-Depends on lsb-release to detect Distribution.
78+ - Disable external SPF support to avoid Build-Depends on libspf2-dev
79+ (only available in universe). SPF can still be implemented via
80+ spf-tools-perl, as documented in exim4.conf.template. This reverts
81+ Vcs-Git commit 494f1fe, first released in 4.95~RC0-1.
82+ (LP #1952738)
83+ + d/control: drop Build-Depends on libspf2-dev.
84+ + d/EDITME.exim4-heavy.diff: disable support for libspf2.
85+ + d/d/c/a/30_exim4-config_check_rcpt: restore SPF logic based
86+ on spfquery.mail-spf-perl from spf-tools-perl, but without
87+ the previously supported helo detection.
88+ * Dropped:
89+ - information disclosure
90+ + d/p/CVE-2023-42114.patch: fix possible OOB read in
91+ SPA authenticator
92+ [Included in 4.97~RC1-2]
93+ - remote code execution
94+ + d/p/CVE-2023-42115.patch: fix possible OOB write in
95+ external authenticator
96+ [Included in 4.97~RC1-2]
97+ - remote code execution
98+ + d/p/CVE-2023-42116.patch: fix possible OOB write in
99+ SPA authenticator
100+ [Included in 4.97~RC1-2]
101+ - d/p/CVE-2023-42114_15_16.patch:
102+ + use uschar more in spa authenticator
103+ [Included in 4.97~RC1-2]
104+ - remote code execution
105+ + d/p/CVE-2023-42117.patch: fixed string_is_ip_address()
106+ in string.c
107+ - information disclosure
108+ + d/p/CVE-2023-42119.patch: hardened dnsdb.c against
109+ crafted DNS responses.
110+ [Included in upstream release 4.97]
111+
112+ -- Bryce Harrington <bryce@canonical.com> Wed, 03 Jan 2024 12:58:30 -0800
113+
114 exim4 (4.97-3) unstable; urgency=medium
115
116 * Fixes from upstream GIT master:
117@@ -207,6 +278,64 @@ exim4 (4.96-18) unstable; urgency=medium
118
119 -- Andreas Metzler <ametzler@debian.org> Sat, 05 Aug 2023 13:29:22 +0200
120
121+exim4 (4.96-17ubuntu2.1) mantic-security; urgency=medium
122+
123+ * SECURITY UPDATE: remote code execution
124+ - debian/patches/CVE-2023-42117.patch: fixed string_is_ip_address()
125+ in string.c
126+ - CVE-2023-42117
127+ * SECURITY UPDATE: information disclosure
128+ - debian/patches/CVE-2023-42119.patch: hardened dnsdb.c against
129+ crafted DNS responses.
130+ - CVE-2023-42119
131+
132+ -- Allen Huang <allen.huang@canonical.com> Wed, 25 Oct 2023 01:21:02 +0100
133+
134+exim4 (4.96-17ubuntu2) mantic; urgency=medium
135+
136+ * SECURITY UPDATE: information disclosure
137+ - debian/patches/CVE-2023-42114.patch: fix possible OOB read in
138+ SPA authenticator
139+ - CVE-2023-42114
140+ * SECURITY UPDATE: remote code execution
141+ - debian/patches/CVE-2023-42115.patch: fix possible OOB write in
142+ external authenticator
143+ - CVE-2023-42115
144+ * SECURITY UPDATE: remote code execution
145+ - debian/patches/CVE-2023-42116.patch: fix possible OOB write in
146+ SPA authenticator
147+ - CVE-2023-42116
148+ * debian/patches/CVE-2023-42114_15_16.patch:
149+ - use uschar more in spa authenticator
150+
151+ -- Allen Huang <allen.huang@canonical.com> Tue, 03 Oct 2023 14:35:45 +0100
152+
153+exim4 (4.96-17ubuntu1) mantic; urgency=medium
154+
155+ * Merge with Debian unstable (LP: #2030098). Remaining changes:
156+ - Disable external SPF support to avoid Build-Depends on libspf2-dev
157+ (only available in universe). SPF can still be implemented via
158+ spf-tools-perl, as documented in exim4.conf.template. This reverts
159+ Vcs-Git commit 494f1fe, first released in 4.95~RC0-1.
160+ (LP #1952738)
161+ + d/control: drop Build-Depends on libspf2-dev.
162+ + d/EDITME.exim4-heavy.diff: disable support for libspf2.
163+ + d/d/c/a/30_exim4-config_check_rcpt: restore SPF logic based
164+ on spfquery.mail-spf-perl from spf-tools-perl, but without
165+ the previously supported helo detection.
166+ - Show Ubuntu distribution in SMTP banner
167+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution
168+ in SMTP banner.
169+ + Build-Depends on lsb-release to detect Distribution.
170+ * Dropped:
171+ - d/p/fix-run--arg-parsing.patch: Fix argument parsing for ${run }
172+ expansion. Previously, when an argument included a close-brace
173+ character (e.g. it itself used an expansion) an error occurred.
174+ (LP #1998678)
175+ [Accepted by Debian in 4.96-16]
176+
177+ -- Bryce Harrington <bryce@canonical.com> Fri, 04 Aug 2023 20:28:47 -0700
178+
179 exim4 (4.96-17) unstable; urgency=low
180
181 * Fixes from upstream GIT master:
182@@ -235,6 +364,35 @@ exim4 (4.96-16) unstable; urgency=medium
183
184 -- Andreas Metzler <ametzler@debian.org> Sun, 11 Jun 2023 18:20:21 +0200
185
186+exim4 (4.96-15ubuntu2) mantic; urgency=medium
187+
188+ * d/p/fix-run--arg-parsing.patch: Fix argument parsing for ${run }
189+ expansion. Previously, when an argument included a close-brace
190+ character (e.g. it itself used an expansion) an error occurred.
191+ (LP: #1998678)
192+ * d/d/c/a/30_exim4-config_check_rcpt: In SPF config snippet,
193+ drop support for helo scope.
194+
195+ -- Bryce Harrington <bryce@canonical.com> Wed, 07 Jun 2023 22:28:04 -0700
196+
197+exim4 (4.96-15ubuntu1) mantic; urgency=medium
198+
199+ * Merge with Debian unstable (LP: #2018070). Remaining changes:
200+ - Show Ubuntu distribution in SMTP banner
201+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution
202+ in SMTP banner.
203+ + Build-Depends on lsb-release to detect Distribution.
204+ - Disable external SPF support to avoid Build-Depends on libspf2-dev
205+ (only available in universe). SPF can still be implemented via
206+ spf-tools-perl, as documented in exim4.conf.template. This reverts
207+ Vcs-Git commit 494f1fe, first released in 4.95~RC0-1.
208+ + d/control: drop Build-Depends on libspf2-dev.
209+ + d/d/c/a/30_exim4-config_check_rcpt: restore SPF logic based
210+ on spfquery.mail-spf-perl from spf-tools-perl.
211+ + d/EDITME.exim4-heavy.diff: disable support for libspf2.
212+
213+ -- Mitchell Dzurick <mitchell.dzurick@canonical.com> Fri, 19 May 2023 13:32:18 -0700
214+
215 exim4 (4.96-15) unstable; urgency=medium
216
217 * Pull from upstream GIT master:
218@@ -244,6 +402,24 @@ exim4 (4.96-15) unstable; urgency=medium
219
220 -- Andreas Metzler <ametzler@debian.org> Wed, 10 May 2023 18:30:35 +0200
221
222+exim4 (4.96-14ubuntu1) lunar; urgency=medium
223+
224+ * Merge with Debian unstable (LP: #2008016). Remaining changes:
225+ - Show Ubuntu distribution in SMTP banner
226+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution
227+ in SMTP banner.
228+ + Build-Depends on lsb-release to detect Distribution.
229+ - Disable external SPF support to avoid Build-Depends on libspf2-dev
230+ (only available in universe). SPF can still be implemented via
231+ spf-tools-perl, as documented in exim4.conf.template. This reverts
232+ Vcs-Git commit 494f1fe, first released in 4.95~RC0-1.
233+ + d/control: drop Build-Depends on libspf2-dev.
234+ + d/d/c/a/30_exim4-config_check_rcpt: restore SPF logic based
235+ on spfquery.mail-spf-perl from spf-tools-perl.
236+ + d/EDITME.exim4-heavy.diff: disable support for libspf2.
237+
238+ -- Bryce Harrington <bryce@canonical.com> Tue, 21 Feb 2023 19:52:34 +0000
239+
240 exim4 (4.96-14) unstable; urgency=medium
241
242 * Pull from upstream GIT master:
243@@ -288,6 +464,25 @@ exim4 (4.96-10) unstable; urgency=medium
244
245 -- Andreas Metzler <ametzler@debian.org> Mon, 19 Dec 2022 18:23:13 +0100
246
247+exim4 (4.96-9ubuntu1) lunar; urgency=medium
248+
249+ * Merge with Debian unstable. (LP: #1993399) Remaining changes:
250+ - Show Ubuntu distribution in SMTP banner
251+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution
252+ in SMTP banner.
253+ + Build-Depends on lsb-release to detect Distribution.
254+ - Disable external SPF support to avoid Build-Depends on libspf2-dev
255+ (only available in universe). SPF can still be implemented via
256+ spf-tools-perl, as documented in exim4.conf.template. (LP #1952738)
257+ This reverts Vcs-Git commit 494f1fe, first released in 4.95~RC0-1.
258+ Changes:
259+ + d/control: drop Build-Depends on libspf2-dev.
260+ + d/d/c/a/30_exim4-config_check_rcpt: restore SPF logic based
261+ on spfquery.mail-spf-perl from spf-tools-perl.
262+ + d/EDITME.exim4-heavy.diff: disable support for libspf2.
263+
264+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 08 Dec 2022 12:19:10 -0500
265+
266 exim4 (4.96-9) unstable; urgency=medium
267
268 * Cherrypick three fixes from upstream GIT master:
269@@ -350,6 +545,31 @@ exim4 (4.96-4) unstable; urgency=low
270
271 -- Andreas Metzler <ametzler@debian.org> Sun, 11 Sep 2022 13:38:26 +0200
272
273+exim4 (4.96-3ubuntu2) lunar; urgency=medium
274+
275+ * Rebuild against new perlapi-5.36.
276+
277+ -- Gianfranco Costamagna <locutusofborg@debian.org> Sat, 05 Nov 2022 09:11:59 +0100
278+
279+exim4 (4.96-3ubuntu1) kinetic; urgency=medium
280+
281+ * Merge with Debian unstable. (LP: #1971274) Remaining changes:
282+ - Show Ubuntu distribution in SMTP banner
283+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution
284+ in SMTP banner.
285+ + Build-Depends on lsb-release to detect Distribution.
286+ - Disable external SPF support to avoid Build-Depends on libspf2-dev
287+ (only available in universe). SPF can still be implemented via
288+ spf-tools-perl, as documented in exim4.conf.template. (LP #1952738)
289+ This reverts Vcs-Git commit 494f1fe, first released in 4.95~RC0-1.
290+ Changes:
291+ + d/control: drop Build-Depends on libspf2-dev.
292+ + d/d/c/a/30_exim4-config_check_rcpt: restore SPF logic based
293+ on spfquery.mail-spf-perl from spf-tools-perl.
294+ + d/EDITME.exim4-heavy.diff: disable support for libspf2.
295+
296+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Thu, 14 Jul 2022 10:33:39 +0200
297+
298 exim4 (4.96-3) unstable; urgency=medium
299
300 * Fix error messages of test-groff -b -mandoc -dAD=l -rF0 -rHY=0 -t -w w -z
301@@ -439,6 +659,40 @@ exim4 (4.95-5) unstable; urgency=medium
302
303 -- Andreas Metzler <ametzler@debian.org> Sun, 10 Apr 2022 13:57:43 +0200
304
305+exim4 (4.95-4ubuntu3) kinetic; urgency=medium
306+
307+ * d/p/lp1974214-segfault-smtp-delivery-0{1,2}.patch: Fix segfault when
308+ there's an SMTP delivery attempt following a deferral. (LP: #1974214)
309+
310+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Fri, 03 Jun 2022 17:37:10 -0400
311+
312+exim4 (4.95-4ubuntu2) jammy; urgency=medium
313+
314+ * d/p/lp1966923-exiqgrep-syntax-error.patch: Fix exiqgrep syntax error,
315+ improve the validation of command-line options and add a new -E option
316+ to allow specifying a binary to be used. (LP: #1966923)
317+
318+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Wed, 30 Mar 2022 16:45:24 -0400
319+
320+exim4 (4.95-4ubuntu1) jammy; urgency=medium
321+
322+ * Merge with Debian unstable. Remaining changes:
323+ - Show Ubuntu distribution in SMTP banner
324+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution
325+ in SMTP banner.
326+ + Build-Depends on lsb-release to detect Distribution.
327+ - Disable external SPF support to avoid Build-Depends on libspf2-dev
328+ (only available in universe). SPF can still be implemented via
329+ spf-tools-perl, as documented in exim4.conf.template. (LP #1952738)
330+ This reverts Vcs-Git commit 494f1fe, first released in 4.95~RC0-1.
331+ Changes:
332+ + d/control: drop Build-Depends on libspf2-dev.
333+ + d/d/c/a/30_exim4-config_check_rcpt: restore SPF logic based
334+ on spfquery.mail-spf-perl from spf-tools-perl.
335+ + d/EDITME.exim4-heavy.diff: disable support for libspf2.
336+
337+ -- Utkarsh Gupta <utkarsh@ubuntu.com> Fri, 25 Feb 2022 01:47:15 +0530
338+
339 exim4 (4.95-4) unstable; urgency=low
340
341 * Fix typo in exiqgrep.8.
342@@ -471,6 +725,36 @@ exim4 (4.95-3) unstable; urgency=low
343
344 -- Andreas Metzler <ametzler@debian.org> Thu, 16 Dec 2021 19:26:32 +0100
345
346+exim4 (4.95-2ubuntu3) jammy; urgency=medium
347+
348+ * No-change rebuild for the perl update.
349+
350+ -- Matthias Klose <doko@ubuntu.com> Sun, 06 Feb 2022 14:52:48 +0100
351+
352+exim4 (4.95-2ubuntu2) jammy; urgency=medium
353+
354+ * New delta:
355+ - Disable external SPF support to avoid Build-Depends on libspf2-dev
356+ (only available in universe). SPF can still be implemented via
357+ spf-tools-perl, as documented in exim4.conf.template. (LP: #1952738)
358+ This reverts Vcs-Git commit 494f1fe, first released in 4.95~RC0-1.
359+ Changes:
360+ + d/control: drop Build-Depends on libspf2-dev.
361+ + d/d/c/a/30_exim4-config_check_rcpt: restore SPF logic based
362+ on spfquery.mail-spf-perl from spf-tools-perl.
363+ + d/EDITME.exim4-heavy.diff: disable support for libspf2.
364+
365+ -- Paride Legovini <paride@ubuntu.com> Wed, 01 Dec 2021 11:48:10 +0100
366+
367+exim4 (4.95-2ubuntu1) jammy; urgency=medium
368+
369+ * Merge with Debian unstable (LP: #1946857). Remaining changes:
370+ - Show Ubuntu distribution in SMTP banner
371+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
372+ + Build-Depends on lsb-release to detect Distribution.
373+
374+ -- Lena Voytek <lena.voytek@canonical.com> Tue, 09 Nov 2021 10:10:14 -0700
375+
376 exim4 (4.95-2) unstable; urgency=medium
377
378 * 75_30-Avoid-calling-gettimeofday-select-per-char-for-cmdli.patch from
379@@ -545,6 +829,21 @@ exim4 (4.95~RC0-1) experimental; urgency=low
380
381 -- Andreas Metzler <ametzler@debian.org> Mon, 19 Jul 2021 13:10:00 +0200
382
383+exim4 (4.94.2-7ubuntu3) jammy; urgency=medium
384+
385+ * No-change rebuild against libidn12
386+
387+ -- Steve Langasek <steve.langasek@ubuntu.com> Sun, 07 Nov 2021 05:31:31 +0000
388+
389+exim4 (4.94.2-7ubuntu2) impish; urgency=medium
390+
391+ * Merge with Debian unstable. Remaining changes:
392+ - Show Ubuntu distribution in SMTP banner
393+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
394+ + Build-Depends on lsb-release to detect Distribution.
395+
396+ -- Miriam Espana Acebal <miriam.espana@canonical.com> Thu, 15 Jul 2021 13:23:50 +0200
397+
398 exim4 (4.94.2-7) unstable; urgency=medium
399
400 * 73_05-Fix-tainted-message-for-fakereject.patch from upstream +fixes
401@@ -591,6 +890,25 @@ exim4 (4.94.2-3) unstable; urgency=medium
402
403 -- Andreas Metzler <ametzler@debian.org> Thu, 13 May 2021 18:53:53 +0200
404
405+exim4 (4.94.2-2ubuntu2) impish; urgency=medium
406+
407+ * No-change rebuild due to OpenLDAP soname bump.
408+
409+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Mon, 21 Jun 2021 17:47:09 -0400
410+
411+exim4 (4.94.2-2ubuntu1) impish; urgency=medium
412+
413+ * Merge with Debian unstable. Remaining changes:
414+ - Show Ubuntu distribution in SMTP banner
415+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
416+ + Build-Depends on lsb-release to detect Distribution.
417+ * Dropped changes:
418+ - debian/patches/sec-202105/*.patch: backport patches from upstream to
419+ correct issues.
420+ [Included in 4.94.2-1]
421+
422+ -- Utkarsh Gupta <utkarsh.gupta@canonical.com> Tue, 11 May 2021 18:25:10 +0530
423+
424 exim4 (4.94.2-2) unstable; urgency=medium
425
426 * Updates from exim-4.94.2+fixes:
427@@ -703,6 +1021,28 @@ exim4 (4.94-16) unstable; urgency=medium
428
429 -- Andreas Metzler <ametzler@debian.org> Wed, 17 Mar 2021 13:50:44 +0100
430
431+exim4 (4.94-15ubuntu1.2) hirsute-security; urgency=medium
432+
433+ * SECURITY UPDATE: Multiple security issues
434+ - debian/patches/sec-202105/*.patch: backport patches from upstream to
435+ correct issues.
436+ - CVE-2020-28007, CVE-2020-28008, CVE-2020-28009, CVE-2020-28010,
437+ CVE-2020-28011, CVE-2020-28012, CVE-2020-28013, CVE-2020-28014,
438+ CVE-2020-28015, CVE-2020-28016, CVE-2020-28017, CVE-2020-28018,
439+ CVE-2020-28019, CVE-2020-28021, CVE-2020-28022, CVE-2020-28023,
440+ CVE-2020-28024, CVE-2020-28025, CVE-2020-28026, CVE-2021-27216
441+
442+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 30 Apr 2021 08:46:21 -0400
443+
444+exim4 (4.94-15ubuntu1) hirsute; urgency=medium
445+
446+ * Merge with Debian unstable (LP: #1916744). Remaining changes:
447+ - Show Ubuntu distribution in SMTP banner
448+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
449+ + Build-Depends on lsb-release to detect Distribution.
450+
451+ -- Utkarsh Gupta <utkarsh.gupta@canonical.com> Wed, 24 Feb 2021 17:32:37 +0530
452+
453 exim4 (4.94-15) unstable; urgency=medium
454
455 * Update from exim-4.94+fixes:
456@@ -727,6 +1067,15 @@ exim4 (4.94-13) unstable; urgency=medium
457
458 -- Andreas Metzler <ametzler@debian.org> Sat, 30 Jan 2021 14:50:50 +0100
459
460+exim4 (4.94-12ubuntu1) hirsute; urgency=medium
461+
462+ * Merge with Debian unstable. Remaining changes:
463+ - Show Ubuntu distribution in SMTP banner
464+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
465+ + Build-Depends on lsb-release to detect Distribution.
466+
467+ -- Bryce Harrington <bryce@canonical.com> Wed, 20 Jan 2021 19:35:04 -0800
468+
469 exim4 (4.94-12) unstable; urgency=medium
470
471 * Update from exim-4.94+fixes:
472@@ -761,6 +1110,15 @@ exim4 (4.94-10) unstable; urgency=low
473
474 -- Andreas Metzler <ametzler@debian.org> Sat, 19 Dec 2020 12:03:56 +0100
475
476+exim4 (4.94-9ubuntu1) hirsute; urgency=medium
477+
478+ * Merge with Debian unstable. Remaining changes:
479+ - Show Ubuntu distribution in SMTP banner
480+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
481+ + Build-Depends on lsb-release to detect Distribution.
482+
483+ -- Bryce Harrington <bryce@canonical.com> Sat, 07 Nov 2020 01:01:32 +0000
484+
485 exim4 (4.94-9) unstable; urgency=low
486
487 * Update from exim-4.94+fixes:
488@@ -790,6 +1148,15 @@ exim4 (4.94-8) unstable; urgency=low
489
490 -- Andreas Metzler <ametzler@debian.org> Thu, 17 Sep 2020 06:54:00 +0200
491
492+exim4 (4.94-7ubuntu1) groovy; urgency=medium
493+
494+ * Merge with Debian unstable. Remaining changes:
495+ - Show Ubuntu distribution in SMTP banner
496+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
497+ + Build-Depends on lsb-release to detect Distribution.
498+
499+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Mon, 24 Aug 2020 16:36:31 -0400
500+
501 exim4 (4.94-7) unstable; urgency=low
502
503 * Update from exim-4.94+fixes:
504@@ -800,6 +1167,15 @@ exim4 (4.94-7) unstable; urgency=low
505
506 -- Andreas Metzler <ametzler@debian.org> Fri, 24 Jul 2020 13:31:47 +0200
507
508+exim4 (4.94-6ubuntu1) groovy; urgency=medium
509+
510+ * Merge with Debian unstable. Remaining changes:
511+ - Show Ubuntu distribution in SMTP banner
512+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
513+ + Build-Depends on lsb-release to detect Distribution.
514+
515+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Thu, 13 Aug 2020 13:49:10 -0400
516+
517 exim4 (4.94-6) unstable; urgency=medium
518
519 * Fix typo (missing "S") in REMOTE_SMTP_SMARTHOST_TLS_VERIFY_HOSTS macro.
520@@ -851,6 +1227,15 @@ exim4 (4.94-3) unstable; urgency=medium
521
522 -- Andreas Metzler <ametzler@debian.org> Fri, 19 Jun 2020 10:31:26 +0200
523
524+exim4 (4.94-2ubuntu1) groovy; urgency=medium
525+
526+ * Merge with Debian unstable (LP: #1881723). Remaining changes:
527+ - Show Ubuntu distribution in SMTP banner
528+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
529+ + Build-Depends on lsb-release to detect Distribution.
530+
531+ -- Bryce Harrington <bryce@canonical.com> Fri, 12 Jun 2020 01:55:28 +0000
532+
533 exim4 (4.94-2) unstable; urgency=low
534
535 * Tighten package interdependencies. With 4.94's daemon avoiding of
536@@ -953,6 +1338,15 @@ exim4 (4.93-16) unstable; urgency=medium
537
538 -- Andreas Metzler <ametzler@debian.org> Sat, 09 May 2020 19:10:34 +0200
539
540+exim4 (4.93-15ubuntu1) groovy; urgency=medium
541+
542+ * Merge with Debian unstable. Remaining changes:
543+ - Show Ubuntu distribution in SMTP banner
544+ + Build-Depends on lsb-release to detect Distribution.
545+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
546+
547+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Tue, 05 May 2020 15:37:59 -0400
548+
549 exim4 (4.93-15) unstable; urgency=low
550
551 * Update from exim-4.93+fixes:
552@@ -972,6 +1366,15 @@ exim4 (4.93-14) unstable; urgency=low
553
554 -- Andreas Metzler <ametzler@debian.org> Fri, 10 Apr 2020 13:53:34 +0200
555
556+exim4 (4.93-13ubuntu1) focal; urgency=medium
557+
558+ * Merge with Debian unstable. Remaining changes:
559+ - Show Ubuntu distribution in SMTP banner
560+ + Build-Depends on lsb-release to detect Distribution.
561+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
562+
563+ -- Bryce Harrington <bryce@canonical.com> Fri, 27 Mar 2020 16:00:03 -0700
564+
565 exim4 (4.93-13) unstable; urgency=medium
566
567 * Update from exim-4.93+fixes:
568@@ -983,6 +1386,15 @@ exim4 (4.93-13) unstable; urgency=medium
569
570 -- Andreas Metzler <ametzler@debian.org> Sat, 21 Mar 2020 11:39:19 +0100
571
572+exim4 (4.93-12ubuntu1) focal; urgency=medium
573+
574+ * Merge with Debian unstable. Remaining changes:
575+ - Show Ubuntu distribution in SMTP banner
576+ + Build-Depends on lsb-release to detect Distribution.
577+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
578+
579+ -- Bryce Harrington <bryce@canonical.com> Fri, 13 Mar 2020 14:25:38 -0700
580+
581 exim4 (4.93-12) unstable; urgency=low
582
583 * Update from exim-4.93+fixes:
584@@ -998,6 +1410,15 @@ exim4 (4.93-12) unstable; urgency=low
585
586 -- Andreas Metzler <ametzler@debian.org> Sat, 29 Feb 2020 15:53:44 +0100
587
588+exim4 (4.93-11ubuntu1) focal; urgency=medium
589+
590+ * Merge with Debian unstable. Remaining changes:
591+ - Show Ubuntu distribution in SMTP banner
592+ + Build-Depends on lsb-release to detect Distribution.
593+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
594+
595+ -- Bryce Harrington <bryce@canonical.com> Wed, 26 Feb 2020 02:34:11 +0000
596+
597 exim4 (4.93-11) unstable; urgency=medium
598
599 * Update from exim-4.93+fixes:
600@@ -1017,6 +1438,15 @@ exim4 (4.93-10) unstable; urgency=medium
601
602 -- Andreas Metzler <ametzler@debian.org> Sat, 01 Feb 2020 11:06:29 +0100
603
604+exim4 (4.93-9ubuntu1) focal; urgency=medium
605+
606+ * Merge with Debian unstable (LP: #1860051). Remaining changes:
607+ - Show Ubuntu distribution in SMTP banner
608+ - Build-Depends on lsb-release to detect Distribution.
609+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
610+
611+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Fri, 17 Jan 2020 09:39:13 +0100
612+
613 exim4 (4.93-9) unstable; urgency=medium
614
615 * Add 74_22-Taint-hybrid-checking-mode.patch.
616@@ -1136,6 +1566,25 @@ exim4 (4.93~RC3-1) unstable; urgency=low
617
618 -- Andreas Metzler <ametzler@debian.org> Sun, 17 Nov 2019 11:37:15 +0100
619
620+exim4 (4.93~RC2-1ubuntu1) focal; urgency=medium
621+
622+ * Merge with Debian unstable. Remaining changes:
623+ - Show Ubuntu distribution in SMTP banner
624+ + Build-Depends on lsb-release to detect Distribution.
625+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
626+ * Dropped:
627+ - SECURITY UPDATE: remote command execution
628+ + d/p/CVE-2019-15846.patch: ensure not to interpret '\\'
629+ before '\0' in src/string.c
630+ + CVE-2019-15846
631+ [Now in upstream as of 4.92.2-1]
632+ - SECURITY UPDATE: heap-based buffer overflow in string_vformat
633+ + debian/patches/CVE-2019-16928.patch: fix overflow in src/string.c.
634+ + CVE-2019-16928
635+ [Now upstream as of 4.92.3-1]
636+
637+ -- Bryce Harrington <bryce@canonical.com> Wed, 13 Nov 2019 18:56:58 -0800
638+
639 exim4 (4.93~RC2-1) unstable; urgency=low
640
641 * New upstream beta version.
642@@ -1292,6 +1741,42 @@ exim4 (4.92.1-2) unstable; urgency=medium
643
644 -- Andreas Metzler <ametzler@debian.org> Wed, 14 Aug 2019 09:25:28 +0200
645
646+exim4 (4.92.1-1ubuntu4) focal; urgency=medium
647+
648+ * No-change rebuild for the perl update.
649+
650+ -- Matthias Klose <doko@ubuntu.com> Fri, 18 Oct 2019 19:27:29 +0000
651+
652+exim4 (4.92.1-1ubuntu3) eoan; urgency=medium
653+
654+ * SECURITY UPDATE: heap-based buffer overflow in string_vformat
655+ - debian/patches/CVE-2019-16928.patch: fix overflow in src/string.c.
656+ - CVE-2019-16928
657+
658+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 28 Sep 2019 11:05:50 -0400
659+
660+exim4 (4.92.1-1ubuntu2) eoan; urgency=medium
661+
662+ * SECURITY UPDATE: remote command execution
663+ - debian/patches/CVE-2019-15846.patch: ensure not to interpret '\\'
664+ before '\0' in src/string.c
665+ - CVE-2019-15846
666+
667+ -- Alex Murray <alex.murray@canonical.com> Thu, 05 Sep 2019 11:29:48 +0930
668+
669+exim4 (4.92.1-1ubuntu1) eoan; urgency=medium
670+
671+ * Merge with Debian unstable. Remaining changes:
672+ - Show Ubuntu distribution in SMTP banner
673+ + Build-Depends on lsb-release to detect Distribution.
674+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
675+ * Dropped:
676+ - d/p/CVE-2019-13917.patch: avoid re-expansion in ${sort } in
677+ src/expand.c.
678+ [Fixed in 4.92.1]
679+
680+ -- Bryce Harrington <bryce@canonical.com> Mon, 12 Aug 2019 19:18:33 -0700
681+
682 exim4 (4.92.1-1) unstable; urgency=low
683
684 * New upstream bugfix release. (4.92.1 is 4.92 + the fix for CVE-2019-13917,
685@@ -1362,6 +1847,24 @@ exim4 (4.92-8) unstable; urgency=low
686
687 -- Andreas Metzler <ametzler@debian.org> Sat, 08 Jun 2019 17:37:43 +0200
688
689+exim4 (4.92-7ubuntu2) eoan; urgency=medium
690+
691+ * SECURITY UPDATE: code execution via ${sort }
692+ - debian/patches/CVE-2019-13917.patch: avoid re-expansion in ${sort }
693+ in src/expand.c.
694+ - CVE-2019-13917
695+
696+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 25 Jul 2019 12:58:39 -0400
697+
698+exim4 (4.92-7ubuntu1) eoan; urgency=medium
699+
700+ * Merge with Debian unstable. Remaining changes:
701+ - Show Ubuntu distribution in SMTP banner
702+ + Build-Depends on lsb-release to detect Distribution.
703+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
704+
705+ -- Bryce Harrington <bryce@canonical.com> Mon, 13 May 2019 13:48:18 -0700
706+
707 exim4 (4.92-7) unstable; urgency=medium
708
709 * Upload to unstable.
710@@ -1389,6 +1892,15 @@ exim4 (4.92-5) unstable; urgency=medium
711
712 -- Andreas Metzler <ametzler@debian.org> Sun, 07 Apr 2019 13:39:31 +0200
713
714+exim4 (4.92-4ubuntu1) disco; urgency=medium
715+
716+ * Merge with Debian unstable (LP: #1821339). Remaining changes:
717+ * Show Ubuntu distribution in SMTP banner
718+ - Build-Depends on lsb-release to detect Distribution.
719+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
720+
721+ -- Karl Stenerud <karl.stenerud@canonical.com> Mon, 25 Mar 2019 12:02:33 +0100
722+
723 exim4 (4.92-4) unstable; urgency=medium
724
725 * Another patch from exim-4.92+fixes branch:
726@@ -1407,6 +1919,15 @@ exim4 (4.92-3) unstable; urgency=medium
727
728 -- Andreas Metzler <ametzler@debian.org> Wed, 20 Mar 2019 17:01:29 +0100
729
730+exim4 (4.92-2ubuntu1) disco; urgency=medium
731+
732+ * Merge with Debian unstable (LP: #1818444). Remaining changes:
733+ - Show Ubuntu distribution in SMTP banner
734+ + Build-Depends on lsb-release to detect Distribution.
735+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
736+
737+ -- Karl Stenerud <kstenerud@gmail.com> Tue, 05 Mar 2019 10:55:48 +0100
738+
739 exim4 (4.92-2) unstable; urgency=medium
740
741 * Upload to unstable.
742@@ -1463,6 +1984,21 @@ exim4 (4.92~RC4-3) unstable; urgency=medium
743
744 -- Andreas Metzler <ametzler@debian.org> Sun, 20 Jan 2019 17:52:39 +0100
745
746+exim4 (4.92~RC4-2ubuntu2) disco; urgency=medium
747+
748+ * No-change rebuild against libmysqlclient21
749+
750+ -- Steve Langasek <steve.langasek@ubuntu.com> Fri, 01 Feb 2019 16:57:54 +0000
751+
752+exim4 (4.92~RC4-2ubuntu1) disco; urgency=medium
753+
754+ * Merge with Debian unstable (LP: #1811095). Remaining changes:
755+ - Show Ubuntu distribution in SMTP banner
756+ + Build-Depends on lsb-release to detect Distribution.
757+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
758+
759+ -- Karl Stenerud <kstenerud@gmail.com> Thu, 10 Jan 2019 16:41:45 +0100
760+
761 exim4 (4.92~RC4-2) unstable; urgency=medium
762
763 * Upload to unstable.
764@@ -1556,6 +2092,22 @@ exim4 (4.91-7) unstable; urgency=low
765
766 -- Andreas Metzler <ametzler@debian.org> Sun, 26 Aug 2018 11:33:15 +0200
767
768+exim4 (4.91-6ubuntu2) disco; urgency=medium
769+
770+ * No-change rebuild for the perl 5.28 transition.
771+
772+ -- Adam Conrad <adconrad@ubuntu.com> Fri, 02 Nov 2018 18:08:13 -0600
773+
774+exim4 (4.91-6ubuntu1) cosmic; urgency=medium
775+
776+ * Merge with Debian unstable. Remaining changes:
777+ - Show Ubuntu distribution in SMTP banner
778+ + Build-Depends on lsb-release to detect Distribution.
779+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
780+ [DEP3 header updated to indicate it has been forwarded to Debian]
781+
782+ -- Andreas Hasenack <andreas@canonical.com> Mon, 30 Jul 2018 15:35:06 -0300
783+
784 exim4 (4.91-6) unstable; urgency=low
785
786 * Update from exim-4_91+fixes branch:
787@@ -1567,6 +2119,16 @@ exim4 (4.91-6) unstable; urgency=low
788
789 -- Andreas Metzler <ametzler@debian.org> Fri, 20 Jul 2018 11:21:24 +0200
790
791+exim4 (4.91-5ubuntu1) cosmic; urgency=medium
792+
793+ * Merge with Debian unstable. Remaining changes:
794+ - Show Ubuntu distribution in SMTP banner
795+ - Build-Depends on lsb-release to detect Distribution.
796+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
797+ [DEP3 header updated to indicate it has been forwarded to Debian]
798+
799+ -- Andreas Hasenack <andreas@canonical.com> Tue, 03 Jul 2018 11:13:08 -0300
800+
801 exim4 (4.91-5) unstable; urgency=medium
802
803 * Update from exim-4_91+fixes branch:
804@@ -1576,6 +2138,15 @@ exim4 (4.91-5) unstable; urgency=medium
805
806 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Jun 2018 18:10:39 +0200
807
808+exim4 (4.91-4ubuntu1) cosmic; urgency=medium
809+
810+ * Merge from Debian testing, Remaining changes:
811+ - Show Ubuntu distribution in SMTP banner
812+ - Build-Depends on lsb-release to detect Distribution.
813+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
814+
815+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Wed, 30 May 2018 12:46:14 +0200
816+
817 exim4 (4.91-4) unstable; urgency=medium
818
819 * Update from exim-4_91+fixes branch:
820@@ -1694,6 +2265,15 @@ exim4 (4.90.1-2) unstable; urgency=medium
821
822 -- Andreas Metzler <ametzler@debian.org> Sat, 10 Mar 2018 14:25:51 +0100
823
824+exim4 (4.90.1-1ubuntu1) bionic; urgency=medium
825+
826+ * Merge from Debian testing, Remaining changes:
827+ - Show Ubuntu distribution in SMTP banner
828+ - Build-Depends on lsb-release to detect Distribution.
829+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
830+
831+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Wed, 14 Feb 2018 17:01:14 +0100
832+
833 exim4 (4.90.1-1) unstable; urgency=high
834
835 * New upstream version, fixing CVE-2018-6789. Closes: #890000
836@@ -1888,6 +2468,15 @@ exim4 (4.89-10) unstable; urgency=critical
837
838 -- Andreas Metzler <ametzler@debian.org> Sat, 25 Nov 2017 11:43:24 +0100
839
840+exim4 (4.89-9ubuntu1) bionic; urgency=medium
841+
842+ * Merge from Debian unstable, Remaining changes:
843+ - Show Ubuntu distribution in SMTP banner
844+ - Build-Depends on lsb-release to detect Distribution.
845+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
846+
847+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Thu, 16 Nov 2017 10:02:23 +0100
848+
849 exim4 (4.89-9) unstable; urgency=medium
850
851 * Upload to unstable.
852@@ -1930,6 +2519,42 @@ exim4 (4.89-6) unstable; urgency=medium
853
854 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Sep 2017 15:29:39 +0200
855
856+exim4 (4.89-5ubuntu1.3) artful-security; urgency=medium
857+
858+ * SECURITY UPDATE: Buffer overflow in base64d()
859+ - debian/patches/CVE-2018-6789.patch: fix overflow in src/base64.c.
860+ - CVE-2018-6789
861+
862+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 10 Feb 2018 14:12:27 -0500
863+
864+exim4 (4.89-5ubuntu1.2) artful-security; urgency=medium
865+
866+ * SECURITY UPDATE: stack-exhaustion remote DoS
867+ - debian/patches/CVE-2017-16944.patch: do not treat the first lonely
868+ dot special in src/receive.c, src/smtp_in.c.
869+ - CVE-2017-16944
870+
871+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 29 Nov 2017 08:59:31 -0500
872+
873+exim4 (4.89-5ubuntu1.1) artful-security; urgency=medium
874+
875+ * SECURITY UPDATE: remote code execution via use-after-free
876+ - debian/patches/CVE-2017-16943.patch: avoid release of store if there
877+ have been later allocations in src/receive.c.
878+ - CVE-2017-16943
879+
880+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Mon, 27 Nov 2017 07:37:47 -0500
881+
882+exim4 (4.89-5ubuntu1) artful; urgency=medium
883+
884+ * Merge from Debian testing.
885+ Remaining changes:
886+ - Show Ubuntu distribution in SMTP banner
887+ - Build-Depends on lsb-release to detect Distribution.
888+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
889+
890+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Wed, 16 Aug 2017 15:42:47 +0200
891+
892 exim4 (4.89-5) unstable; urgency=medium
893
894 * Update to exim-4_89+fixes branch:
895@@ -1974,6 +2599,20 @@ exim4 (4.89-4) unstable; urgency=low
896
897 -- Andreas Metzler <ametzler@debian.org> Sat, 15 Jul 2017 12:46:16 +0200
898
899+exim4 (4.89-3ubuntu2) artful; urgency=medium
900+
901+ * No-change rebuild for perl 5.26.0.
902+
903+ -- Matthias Klose <doko@ubuntu.com> Wed, 26 Jul 2017 20:02:24 +0000
904+
905+exim4 (4.89-3ubuntu1) artful; urgency=medium
906+
907+ * Merge from Debian. Remaining changes:
908+ - Show Ubuntu distribution in SMTP banner.
909+ - Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
910+
911+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 27 Jun 2017 10:20:42 -0400
912+
913 exim4 (4.89-3) unstable; urgency=high
914
915 * Re-upload to unstable.
916@@ -1986,6 +2625,15 @@ exim4 (4.89-2+deb9u1) stretch-security; urgency=medium
917
918 -- <jmm@debian.org> Wed, 14 Jun 2017 07:03:07 +0200
919
920+exim4 (4.89-2ubuntu1) artful; urgency=medium
921+
922+ * Merge from Debian testing.
923+ Remaining changes:
924+ + Show Ubuntu distribution in SMTP banner.
925+ + Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
926+
927+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Thu, 01 Jun 2017 11:58:00 +0200
928+
929 exim4 (4.89-2) unstable; urgency=medium
930
931 * Revert addition of header "# pidfile: /var/run/exim4/exim.pid" to
932@@ -2077,6 +2725,17 @@ exim4 (4.89~RC1-1) unstable; urgency=low
933
934 -- Andreas Metzler <ametzler@debian.org> Tue, 31 Jan 2017 19:52:50 +0100
935
936+exim4 (4.88-5ubuntu1) zesty; urgency=medium
937+
938+ * Merge from Debian unstable.
939+ Version 4.88 fixes CVE-2016-9963 (LP: #1654750) and symlink
940+ local root escalation (LP: #1580454)
941+ Remaining changes:
942+ + Show Ubuntu distribution in SMTP banner.
943+ + Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
944+
945+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Tue, 24 Jan 2017 10:15:09 +0100
946+
947 exim4 (4.88-5) unstable; urgency=medium
948
949 * 78_Disable-chunking-BDAT-by-default.patch: Change default value of main
950@@ -2229,6 +2888,20 @@ exim4 (4.88~RC1-1) experimental; urgency=low
951
952 -- Andreas Metzler <ametzler@debian.org> Sun, 25 Sep 2016 15:44:00 +0200
953
954+exim4 (4.87-3ubuntu2) zesty; urgency=medium
955+
956+ * No-change rebuild for perl 5.24 transition
957+
958+ -- Iain Lane <iain@orangesquash.org.uk> Mon, 24 Oct 2016 10:08:10 +0100
959+
960+exim4 (4.87-3ubuntu1) yakkety; urgency=medium
961+
962+ * Merge from Debian unstable. Remaining changes:
963+ + Show Ubuntu distribution in SMTP banner.
964+ + Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
965+
966+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Tue, 26 Jul 2016 13:30:09 +0200
967+
968 exim4 (4.87-3) unstable; urgency=medium
969
970 * Pull multiple patches from upstream GIT:
971@@ -2402,6 +3075,48 @@ exim4 (4.87~RC1-1) experimental; urgency=medium
972
973 -- Andreas Metzler <ametzler@debian.org> Fri, 11 Dec 2015 20:15:30 +0100
974
975+exim4 (4.86.2-2ubuntu2.3) xenial-security; urgency=medium
976+
977+ * SECURITY UPDATE: Buffer overflow in base64d()
978+ - debian/patches/CVE-2018-6789.patch: fix overflow in
979+ src/auths/b64decode.c.
980+ - CVE-2018-6789
981+
982+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 10 Feb 2018 14:18:40 -0500
983+
984+exim4 (4.86.2-2ubuntu2.2) xenial-security; urgency=medium
985+
986+ * SECURITY UPDATE: memory leak
987+ - debian/patches/93_CVE-2017-1000368.patch: free -p argument if
988+ allocation was required.
989+ - CVE-2017-1000368
990+
991+ -- Steve Beattie <sbeattie@ubuntu.com> Fri, 02 Jun 2017 22:07:28 -0700
992+
993+exim4 (4.86.2-2ubuntu2.1) xenial-security; urgency=medium
994+
995+ * SECURITY UPDATE: DKIM information leakage
996+ - debian/patches/CVE-2016-9963.patch: fix information leakage in
997+ src/dkim.c, src/transports/smtp.c.
998+ - CVE-2016-9963
999+
1000+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 05 Jan 2017 08:29:10 -0500
1001+
1002+exim4 (4.86.2-2ubuntu2) xenial; urgency=medium
1003+
1004+ * Rebuild against libmysqlclient20.
1005+
1006+ -- Robie Basak <robie.basak@ubuntu.com> Tue, 05 Apr 2016 12:21:41 +0000
1007+
1008+exim4 (4.86.2-2ubuntu1) xenial; urgency=medium
1009+
1010+ * Merge from Debian unstable. Remaining changes:
1011+ - debian.control, debian/patches/fix_smtp_banner.patch
1012+ + Show Ubuntu distribution in SMTP banner.
1013+ + Build-Depends on lsb-release.
1014+
1015+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 15 Mar 2016 11:56:18 -0400
1016+
1017 exim4 (4.86.2-2) unstable; urgency=high
1018
1019 * Bump exim4-config Breaks to exim4-daemon-* (<< 4.86.2). Closes: #816790
1020@@ -2423,6 +3138,27 @@ exim4 (4.86.2-1) unstable; urgency=high
1021
1022 -- Andreas Metzler <ametzler@debian.org> Tue, 01 Mar 2016 19:34:39 +0100
1023
1024+exim4 (4.86-7ubuntu3) xenial; urgency=medium
1025+
1026+ * No-change rebuild for gnutls transition.
1027+
1028+ -- Matthias Klose <doko@ubuntu.com> Wed, 17 Feb 2016 22:40:56 +0000
1029+
1030+exim4 (4.86-7ubuntu2) xenial; urgency=medium
1031+
1032+ * Rebuild for Perl 5.22.1.
1033+
1034+ -- Colin Watson <cjwatson@ubuntu.com> Fri, 18 Dec 2015 10:30:54 +0000
1035+
1036+exim4 (4.86-7ubuntu1) xenial; urgency=medium
1037+
1038+ * Merge from Debian unstable. Remaining changes:
1039+ - debian.control, debian/patches/fix_smtp_banner.patch
1040+ + Show Ubuntu distribution in SMTP banner.
1041+ + Build-Depends on lsb-release.
1042+
1043+ -- Pierre-André MOREY <pierre-andre.morey@canonical.com> Mon, 14 Dec 2015 14:23:51 +0100
1044+
1045 exim4 (4.86-7) unstable; urgency=medium
1046
1047 * Allow arch-indep build (dpkg-buildpackage -A). Closes: #806023
1048@@ -2473,6 +3209,15 @@ exim4 (4.86-4) unstable; urgency=medium
1049
1050 -- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2015 15:01:01 +0200
1051
1052+exim4 (4.86-3ubuntu1) wily; urgency=medium
1053+
1054+ * Merge from Debian unstable. (LP: #1485369) Remaining changes:
1055+ - debian/control, debian/patches/fix_smtp_banner.patch:
1056+ + Show Ubuntu distribution in SMTP banner.
1057+ + Build-Depends on lsb-release.
1058+
1059+ -- Artur Rona <ari-tczew@ubuntu.com> Thu, 17 Sep 2015 13:18:20 +0100
1060+
1061 exim4 (4.86-3) unstable; urgency=medium
1062
1063 * Pull three patches from upstream git:
1064@@ -2513,6 +3258,15 @@ exim4 (4.86~RC5-1) unstable; urgency=medium
1065
1066 -- Andreas Metzler <ametzler@debian.org> Sat, 18 Jul 2015 11:46:11 +0200
1067
1068+exim4 (4.86~RC4-2ubuntu1) wily; urgency=low
1069+
1070+ * Merge from Debian unstable. (LP: #1166671) Remaining changes:
1071+ - debian/control, debian/patches/fix_smtp_banner.patch:
1072+ + Show Ubuntu distribution in SMTP banner.
1073+ + Build-Depends on lsb-release.
1074+
1075+ -- Artur Rona <ari-tczew@ubuntu.com> Mon, 06 Jul 2015 12:09:36 +0200
1076+
1077 exim4 (4.86~RC4-2) unstable; urgency=medium
1078
1079 * Drop libmysqlclient15-dev alternative build-dependency. Closes: #790463
1080@@ -2677,6 +3431,18 @@ exim4 (4.85~RC1+dfsg-1) experimental; urgency=medium
1081
1082 -- Andreas Metzler <ametzler@debian.org> Tue, 18 Nov 2014 19:28:20 +0100
1083
1084+exim4 (4.84-8ubuntu1) vivid; urgency=low
1085+
1086+ * Merge from Debian unstable. (LP: #1434300) Remaining changes:
1087+ - debian/control, debian/patches/fix_smtp_banner.patch:
1088+ + Show Ubuntu distribution in SMTP banner.
1089+ + Build-Depends on lsb-release.
1090+ - debian/control:
1091+ + Don't provide default-mta; in Ubuntu,
1092+ we want postfix to be the default.
1093+
1094+ -- Artur Rona <ari-tczew@ubuntu.com> Thu, 19 Mar 2015 00:15:40 +0100
1095+
1096 exim4 (4.84-8) unstable; urgency=medium
1097
1098 * Pull 83_Remove-limit-on-remove_headers-item-size.-Bug-1533.patch and
1099@@ -2694,6 +3460,15 @@ exim4 (4.84-7) unstable; urgency=medium
1100
1101 -- Andreas Metzler <ametzler@debian.org> Sat, 07 Feb 2015 15:12:33 +0100
1102
1103+exim4 (4.84-6ubuntu1) vivid; urgency=medium
1104+
1105+ * Resynchronise with Debian. Remaining changes:
1106+ - Show Ubuntu distribution in SMTP banner.
1107+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
1108+ default.
1109+
1110+ -- Colin Watson <cjwatson@ubuntu.com> Wed, 14 Jan 2015 11:26:29 +0000
1111+
1112 exim4 (4.84-6) unstable; urgency=medium
1113
1114 * Revert init script's restart order change in 4.84-4 for the time being.
1115@@ -2702,6 +3477,15 @@ exim4 (4.84-6) unstable; urgency=medium
1116
1117 -- Andreas Metzler <ametzler@debian.org> Sun, 21 Dec 2014 14:07:12 +0100
1118
1119+exim4 (4.84-5ubuntu1) vivid; urgency=medium
1120+
1121+ * Resynchronise with Debian. Remaining changes:
1122+ - Show Ubuntu distribution in SMTP banner.
1123+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
1124+ default.
1125+
1126+ -- Colin Watson <cjwatson@ubuntu.com> Thu, 18 Dec 2014 15:26:17 +0000
1127+
1128 exim4 (4.84-5) unstable; urgency=medium
1129
1130 * 82_quoted-or-r-2047-encoded.diff pulled from upstream git (sans
1131@@ -2709,6 +3493,15 @@ exim4 (4.84-5) unstable; urgency=medium
1132
1133 -- Andreas Metzler <ametzler@debian.org> Wed, 17 Dec 2014 19:03:39 +0100
1134
1135+exim4 (4.84-4ubuntu1) vivid; urgency=medium
1136+
1137+ * Resynchronise with Debian. Remaining changes:
1138+ - Show Ubuntu distribution in SMTP banner.
1139+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
1140+ default.
1141+
1142+ -- Colin Watson <cjwatson@ubuntu.com> Tue, 02 Dec 2014 15:28:46 +0000
1143+
1144 exim4 (4.84-4) unstable; urgency=medium
1145
1146 * Unset message_prefix/message_sufix in maildrop_pipe transport. Maildrop
1147@@ -2723,6 +3516,15 @@ exim4 (4.84-4) unstable; urgency=medium
1148
1149 -- Andreas Metzler <ametzler@debian.org> Sun, 30 Nov 2014 08:24:04 +0100
1150
1151+exim4 (4.84-3ubuntu1) vivid; urgency=medium
1152+
1153+ * Resynchronise with Debian. Remaining changes:
1154+ - Show Ubuntu distribution in SMTP banner.
1155+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
1156+ default.
1157+
1158+ -- Colin Watson <cjwatson@ubuntu.com> Tue, 11 Nov 2014 13:43:35 +0000
1159+
1160 exim4 (4.84-3) unstable; urgency=medium
1161
1162 * Apply patch to Italian (it) debconf template translation, thanks to
1163@@ -2752,6 +3554,24 @@ exim4 (4.84~RC2-1) unstable; urgency=medium
1164
1165 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Aug 2014 07:42:00 +0200
1166
1167+exim4 (4.84~RC1-3ubuntu2) utopic; urgency=medium
1168+
1169+ * Rebuild for Perl 5.20.0.
1170+
1171+ -- Colin Watson <cjwatson@ubuntu.com> Thu, 21 Aug 2014 12:18:13 +0100
1172+
1173+exim4 (4.84~RC1-3ubuntu1) utopic; urgency=low
1174+
1175+ * Merge from Debian unstable (LP: #1351470). Remaining changes:
1176+ - Show Ubuntu distribution on smtp:
1177+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
1178+ with Ubuntu distribution
1179+ + debian/control: added lsb-release build dependency
1180+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
1181+ default.
1182+
1183+ -- Corey Bryant <corey.bryant@canonical.com> Mon, 04 Aug 2014 11:48:39 -0400
1184+
1185 exim4 (4.84~RC1-3) unstable; urgency=medium
1186
1187 * Third try. Simply comment *custom* in debian/control.
1188@@ -2820,6 +3640,18 @@ exim4 (4.83~RC1-1) experimental; urgency=medium
1189
1190 -- Andreas Metzler <ametzler@debian.org> Thu, 29 May 2014 13:09:04 +0200
1191
1192+exim4 (4.82.1-2ubuntu1) utopic; urgency=low
1193+
1194+ * Merge from Debian unstable (LP: #1348074). Remaining changes:
1195+ - Show Ubuntu distribution on smtp:
1196+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
1197+ with Ubuntu distribution
1198+ + debian/control: added lsb-release build dependency
1199+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
1200+ default.
1201+
1202+ -- Robie Basak <robie.basak@ubuntu.com> Fri, 25 Jul 2014 15:53:09 +0000
1203+
1204 exim4 (4.82.1-2) unstable; urgency=high
1205
1206 * [87_double_expansion.diff] from upstream. Stop unwanted double expansion
1207@@ -2837,6 +3669,18 @@ exim4 (4.82.1-1) unstable; urgency=high
1208
1209 -- Andreas Metzler <ametzler@debian.org> Wed, 28 May 2014 19:01:43 +0200
1210
1211+exim4 (4.82-8ubuntu1) utopic; urgency=medium
1212+
1213+ * Merge from Debian unstable. Remaining changes:
1214+ - Show Ubuntu distribution on smtp:
1215+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
1216+ with Ubuntu distribution
1217+ + debian/control: added lsb-release build dependency
1218+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
1219+ default.
1220+
1221+ -- Dimitri John Ledkov <xnox@ubuntu.com> Sat, 17 May 2014 01:50:20 +0100
1222+
1223 exim4 (4.82-8) unstable; urgency=medium
1224
1225 * Now that GMP has been relicensed to LGPLv3+/GPLv2+ build exim against
1226@@ -2900,6 +3744,78 @@ exim4 (4.82-4) unstable; urgency=medium
1227
1228 -- Andreas Metzler <ametzler@debian.org> Sun, 09 Feb 2014 19:41:34 +0100
1229
1230+exim4 (4.82-3ubuntu2.4) trusty-security; urgency=medium
1231+
1232+ * SECURITY UPDATE: Buffer overflow in base64d()
1233+ - debian/patches/CVE-2018-6789.patch: fix overflow in
1234+ src/auths/b64decode.c.
1235+ - CVE-2018-6789
1236+
1237+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 10 Feb 2018 14:19:43 -0500
1238+
1239+exim4 (4.82-3ubuntu2.3) trusty-security; urgency=medium
1240+
1241+ * SECURITY UPDATE: memory leak
1242+ - debian/patches/CVE-2017-1000368.patch: free -p argument if
1243+ allocation was required.
1244+ - CVE-2017-1000368
1245+
1246+ -- Steve Beattie <sbeattie@ubuntu.com> Fri, 02 Jun 2017 22:44:35 -0700
1247+
1248+exim4 (4.82-3ubuntu2.2) trusty-security; urgency=medium
1249+
1250+ * SECURITY UPDATE: DKIM information leakage
1251+ - debian/patches/CVE-2016-9963.patch: fix information leakage in
1252+ src/dkim.c, src/transports/smtp.c.
1253+ - CVE-2016-9963
1254+
1255+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 05 Jan 2017 08:31:06 -0500
1256+
1257+exim4 (4.82-3ubuntu2.1) trusty-security; urgency=medium
1258+
1259+ * SECURITY UPDATE: privilege escalation via crafted lookup value
1260+ - debian/patches/CVE-2014-2972.patch: only expand integers for integer
1261+ math once.
1262+ - CVE-2014-2972
1263+ * SECURITY UPDATE: privilege escalation when used with perl_startup
1264+ - debian/patches/CVE-2016-1531.patch: add new add_environment and
1265+ keep_environment configuration options.
1266+ - debian/patches/CVE-2016-1531-2.patch: don't issue env warning if env
1267+ is empty.
1268+ - debian/patches/CVE-2016-1531-3.patch: store the initial working
1269+ directory, expand $initial_cwd.
1270+ - debian/patches/CVE-2016-1531-4.patch: delay chdir(/) until we opened
1271+ the main config.
1272+ - Add macros MAIN_KEEP_ENVIRONMENT and MAIN_ADD_ENVIRONMENT to set the
1273+ new options. Set "keep_environment =" by default to avoid a runtime
1274+ warning.
1275+ - Bump exim4-config Breaks to exim4-daemon-* (<< 4.82-3ubuntu2.1).
1276+ - debian/exim4-config.NEWS: Add entry to warn of potential breakage.
1277+ - CVE-2016-1531
1278+ * WARNING: This update may break existing installations.
1279+
1280+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Mon, 14 Mar 2016 12:57:00 -0400
1281+
1282+exim4 (4.82-3ubuntu2) trusty; urgency=medium
1283+
1284+ * debian/tests/control: Add missing python test dependency, as
1285+ debian/tests/security calls python.
1286+
1287+ -- Martin Pitt <martin.pitt@ubuntu.com> Tue, 25 Feb 2014 17:33:13 +0100
1288+
1289+exim4 (4.82-3ubuntu1) trusty; urgency=low
1290+
1291+ * Merge from Debian unstable (LP: #1259620). Remaining changes:
1292+ - Show Ubuntu distribution on smtp:
1293+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
1294+ with Ubuntu distribution
1295+ + debian/control: added lsb-release build dependency
1296+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
1297+ default.
1298+ - Build-depend on db5.3.
1299+
1300+ -- Yolanda Robla <yolanda.robla@canonical.com> Tue, 10 Dec 2013 17:07:20 +0000
1301+
1302 exim4 (4.82-3) unstable; urgency=low
1303
1304 * Upload to unstable.
1305@@ -2980,6 +3896,21 @@ exim4 (4.82~rc1-1) experimental; urgency=low
1306
1307 -- Andreas Metzler <ametzler@debian.org> Sun, 29 Sep 2013 14:43:25 +0200
1308
1309+exim4 (4.80-9ubuntu2) trusty; urgency=low
1310+
1311+ * Build-depend on libdb5.3-dev, instead of libdb5.1-dev.
1312+
1313+ -- Dmitrijs Ledkovs <xnox@ubuntu.com> Mon, 04 Nov 2013 12:14:54 +0000
1314+
1315+exim4 (4.80-9ubuntu1) trusty; urgency=low
1316+
1317+ * Resynchronise with Debian. Remaining changes:
1318+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
1319+ default.
1320+ - Add "Ubuntu" to SMTP banner.
1321+
1322+ -- Colin Watson <cjwatson@ubuntu.com> Mon, 28 Oct 2013 11:55:21 -0700
1323+
1324 exim4 (4.80-9) unstable; urgency=low
1325
1326 * Upload to unstable.
1327@@ -3026,6 +3957,34 @@ exim4 (4.80-8) experimental; urgency=low
1328
1329 -- Andreas Metzler <ametzler@debian.org> Sun, 01 Sep 2013 15:58:49 +0200
1330
1331+exim4 (4.80-7ubuntu4) trusty; urgency=low
1332+
1333+ * Rebuild for Perl 5.18.
1334+
1335+ -- Colin Watson <cjwatson@ubuntu.com> Wed, 23 Oct 2013 10:24:08 +0100
1336+
1337+exim4 (4.80-7ubuntu3) saucy; urgency=low
1338+
1339+ * debian/patches/fix_smtp_banner.patch: updated SMTP banner
1340+ with Ubuntu distribution
1341+ * debian/control: added lsb-release build dependency
1342+
1343+ -- Yolanda Robla <yolanda.robla@canonical.com> Tue, 18 Jun 2013 19:17:43 +0200
1344+
1345+exim4 (4.80-7ubuntu2) saucy; urgency=low
1346+
1347+ * debian/tests: Add autopkgtest.
1348+
1349+ -- Yolanda <yolanda.robla@canonical.com> Mon, 27 May 2013 11:31:35 +0200
1350+
1351+exim4 (4.80-7ubuntu1) raring; urgency=low
1352+
1353+ * Merge from Debian unstable (LP: #1166383). Remaining changes:
1354+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1355+ we want postfix to be the default.
1356+
1357+ -- Robie Basak <robie.basak@canonical.com> Mon, 08 Apr 2013 18:13:15 +0100
1358+
1359 exim4 (4.80-7) unstable; urgency=low
1360
1361 * Use exim's ${quote:xxx} operator when invoking spfquery to disallow
1362@@ -3045,6 +4004,14 @@ exim4 (4.80-6) unstable; urgency=low
1363
1364 -- Andreas Metzler <ametzler@debian.org> Wed, 21 Nov 2012 19:08:53 +0100
1365
1366+exim4 (4.80-5.1ubuntu1) raring; urgency=low
1367+
1368+ * Merge from Debian. Remaining changes:
1369+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1370+ we want postfix to be the default.
1371+
1372+ -- Oussama Bounaim <o.bounaim@gmail.com> Sun, 11 Nov 2012 07:11:06 +0100
1373+
1374 exim4 (4.80-5.1) unstable; urgency=high
1375
1376 * Non-maintainer upload by the Security Team.
1377@@ -3072,6 +4039,23 @@ exim4 (4.80-4) unstable; urgency=low
1378
1379 -- Andreas Metzler <ametzler@debian.org> Sat, 23 Jun 2012 18:35:03 +0200
1380
1381+exim4 (4.80-3ubuntu1.1) quantal-security; urgency=low
1382+
1383+ * SECURITY UPDATE: arbitrary code execution via dns decode logic
1384+ - debian/patches/CVE-2012-5671.patch: adjust max length and validate
1385+ against it in src/pdkim/pdkim.h, src/dkim.c.
1386+ - CVE-2012-5671
1387+
1388+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 25 Oct 2012 08:22:46 -0400
1389+
1390+exim4 (4.80-3ubuntu1) quantal; urgency=low
1391+
1392+ * Merge from Debian unstable. Remaining changes:
1393+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1394+ we want postfix to be the default.
1395+
1396+ -- Clint Byrum <clint@ubuntu.com> Thu, 14 Jun 2012 15:28:08 -0700
1397+
1398 exim4 (4.80-3) unstable; urgency=low
1399
1400 * Pull 75_openssl_sni.diff from upstream. - Segfault caused by NULL
1401@@ -3219,6 +4203,26 @@ exim4 (4.76-4) experimental; urgency=low
1402
1403 -- Andreas Metzler <ametzler@debian.org> Sat, 24 Sep 2011 18:36:08 +0200
1404
1405+exim4 (4.76-3ubuntu3) precise; urgency=low
1406+
1407+ * Rebuild for libmysqlclient transition
1408+
1409+ -- Clint Byrum <clint@ubuntu.com> Wed, 23 Nov 2011 23:29:35 -0800
1410+
1411+exim4 (4.76-3ubuntu2) precise; urgency=low
1412+
1413+ * Rebuild for Perl 5.14.
1414+
1415+ -- Colin Watson <cjwatson@ubuntu.com> Wed, 16 Nov 2011 01:22:39 +0000
1416+
1417+exim4 (4.76-3ubuntu1) precise; urgency=low
1418+
1419+ * Merge from debian unstable. Remaining changes:
1420+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1421+ we want postfix to be the default.
1422+
1423+ -- Stéphane Graber <stgraber@ubuntu.com> Thu, 20 Oct 2011 11:29:07 -0400
1424+
1425 exim4 (4.76-3) unstable; urgency=low
1426
1427 * [exim4-base.cron.daily] Correct invocation of mail(1), options need to be
1428@@ -3239,6 +4243,14 @@ exim4 (4.76-3) unstable; urgency=low
1429
1430 -- Andreas Metzler <ametzler@debian.org> Sun, 18 Sep 2011 11:49:13 +0200
1431
1432+exim4 (4.76-2ubuntu1) oneiric; urgency=low
1433+
1434+ * Merge from debian unstable. Remaining changes:
1435+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1436+ we want postfix to be the default.
1437+
1438+ -- Stéphane Graber <stgraber@ubuntu.com> Mon, 30 May 2011 17:48:56 -0400
1439+
1440 exim4 (4.76-2) unstable; urgency=low
1441
1442 * debian/rules: Remove test/ and test-stamp on clean.
1443@@ -3251,6 +4263,14 @@ exim4 (4.76-2) unstable; urgency=low
1444
1445 -- Andreas Metzler <ametzler@debian.org> Sun, 29 May 2011 18:21:03 +0200
1446
1447+exim4 (4.76-1ubuntu1) oneiric; urgency=low
1448+
1449+ * Merge from debian unstable. Remaining changes (LP: #779391):
1450+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1451+ we want postfix to be the default.
1452+
1453+ -- Stéphane Graber <stgraber@ubuntu.com> Mon, 23 May 2011 12:37:30 -0400
1454+
1455 exim4 (4.76-1) unstable; urgency=low
1456
1457 * New upstream version.
1458@@ -3297,6 +4317,14 @@ exim4 (4.75-3) unstable; urgency=high
1459
1460 -- Andreas Metzler <ametzler@debian.org> Fri, 06 May 2011 20:08:51 +0200
1461
1462+exim4 (4.75-2ubuntu1) oneiric; urgency=low
1463+
1464+ * Merge from debian unstable. Remaining changes:
1465+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1466+ we want postfix to be the default.
1467+
1468+ -- Stéphane Graber <stgraber@ubuntu.com> Fri, 06 May 2011 14:51:28 -0400
1469+
1470 exim4 (4.75-2) unstable; urgency=low
1471
1472 * clamav socket on Debian is clamd:/var/run/clamav/clamd.ctl, fix
1473@@ -3339,6 +4367,24 @@ exim4 (4.74-2) unstable; urgency=low
1474
1475 -- Andreas Metzler <ametzler@debian.org> Thu, 24 Feb 2011 19:02:07 +0100
1476
1477+exim4 (4.74-1ubuntu1) natty; urgency=low
1478+
1479+ * Merge from debian experimental. Remaining changes: (LP: #713855)
1480+ - debian/patches/71_exiq_grep_error_on_messages_without_size.patch:
1481+ + Improve handling of broken messages when "exim4 -bp" (mailq)
1482+ reports lines without size info. (Closes: #528625)
1483+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1484+ we want postfix to be the default.
1485+ - debian/{control,rules}: Add and enable hardened build for PIE.
1486+ (Closes: #542726)
1487+ * Update 71_exiq_grep_error_on_messages_without_size.patch to get way
1488+ which upstream has fixed it. Probably it can be dropped with next
1489+ upstream release.
1490+ * This upload fixes CVE: (LP: #708023)
1491+ - CVE-2011-0017
1492+
1493+ -- Artur Rona <ari-tczew@ubuntu.com> Wed, 09 Feb 2011 21:31:35 +0100
1494+
1495 exim4 (4.74-1) experimental; urgency=low
1496
1497 * 4.74 release, should build on hurd again.
1498@@ -3364,6 +4410,20 @@ exim4 (4.74~rc2-1) experimental; urgency=low
1499
1500 -- Andreas Metzler <ametzler@debian.org> Sun, 23 Jan 2011 14:02:36 +0100
1501
1502+exim4 (4.73~rc1-1ubuntu1) natty; urgency=low
1503+
1504+ * Merge from debian unstable. Remaining changes: (LP: #697934)
1505+ - debian/patches/71_exiq_grep_error_on_messages_without_size.patch:
1506+ + Improve handling of broken messages when "exim4 -bp" (mailq)
1507+ reports lines without size info.
1508+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1509+ we want postfix to be the default.
1510+ - debian/{control,rules}: Add and enable hardened build for PIE.
1511+ (Closes: #542726)
1512+ * Drop B-D on libmysqlclient15-dev, resolved in Debian.
1513+
1514+ -- Artur Rona <ari-tczew@ubuntu.com> Tue, 28 Dec 2010 22:20:17 +0100
1515+
1516 exim4 (4.73~rc1-1) experimental; urgency=low
1517
1518 * New upstream release candidate.
1519@@ -3459,6 +4519,20 @@ exim4 (4.72-3) unstable; urgency=low
1520
1521 -- Andreas Metzler <ametzler@debian.org> Sun, 26 Dec 2010 15:13:08 +0100
1522
1523+exim4 (4.72-2ubuntu1) natty; urgency=low
1524+
1525+ * Merge from debian unstable. Remaining changes: (LP: #671615)
1526+ - debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
1527+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
1528+ lines without size info.
1529+ - Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
1530+ the default.
1531+ - debian/control: Change build dependencies to MySQL 5.1.
1532+ - debian/{control,rules}: add and enable hardened build for PIE
1533+ (Closes: #542726).
1534+
1535+ -- Artur Rona <ari-tczew@ubuntu.com> Fri, 05 Nov 2010 21:05:47 +0100
1536+
1537 exim4 (4.72-2) unstable; urgency=low
1538
1539 [ Marc Haber ]
1540@@ -3482,6 +4556,20 @@ exim4 (4.72-2) unstable; urgency=low
1541
1542 -- Andreas Metzler <ametzler@debian.org> Sat, 30 Oct 2010 13:38:26 +0200
1543
1544+exim4 (4.72-1ubuntu1) maverick; urgency=low
1545+
1546+ * Merge with Debian unstable (LP: #609620). Remaining changes:
1547+ + debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
1548+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
1549+ lines without size info.
1550+ + Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
1551+ the default.
1552+ + debian/control: Change build dependencies to MySQL 5.1.
1553+ + debian/{control,rules}: add and enable hardened build for PIE
1554+ (Closes: #542726).
1555+
1556+ -- Artur Rona <ari-tczew@tlen.pl> Sun, 25 Jul 2010 02:00:42 +0200
1557+
1558 exim4 (4.72-1) unstable; urgency=low
1559
1560 * New upstream release. (Identical to the git snapshot previously
1561@@ -3533,6 +4621,20 @@ exim4 (4.71-4) unstable; urgency=low
1562
1563 -- Andreas Metzler <ametzler@debian.org> Thu, 25 Mar 2010 17:34:30 +0100
1564
1565+exim4 (4.71-3ubuntu1) lucid; urgency=low
1566+
1567+ * Merge with Debian unstable (lp: #501657). Remaining changes:
1568+ + debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
1569+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
1570+ lines without size info.
1571+ + Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
1572+ the default.
1573+ + debian/control: Change build dependencies to MySQL 5.1.
1574+ + debian/{control,rules}: add and enable hardened build for PIE
1575+ (Debian bug 542726).
1576+
1577+ -- Michael Bienia <geser@ubuntu.com> Fri, 01 Jan 2010 16:28:19 +0100
1578+
1579 exim4 (4.71-3) unstable; urgency=low
1580
1581 * exim4-base.cron.daily: Do not run exim_tidydb on Berkeley DB logfiles.
1582@@ -3647,6 +4749,35 @@ exim4 (4.70~cvs+20091017-1) experimental; urgency=low
1583
1584 -- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2009 14:26:54 +0200
1585
1586+exim4 (4.69-11ubuntu4) karmic; urgency=low
1587+
1588+ * debian/{control,rules}: add and enable hardened build for PIE
1589+ (Debian bug 542726).
1590+
1591+ -- Kees Cook <kees@ubuntu.com> Thu, 20 Aug 2009 17:33:26 -0700
1592+
1593+exim4 (4.69-11ubuntu3) karmic; urgency=low
1594+
1595+ * debian/control: Change build dependencies to MySQL 5.1.
1596+
1597+ -- Mathias Gug <mathiaz@ubuntu.com> Mon, 17 Aug 2009 17:57:26 -0400
1598+
1599+exim4 (4.69-11ubuntu2) karmic; urgency=low
1600+
1601+ * Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
1602+ the default.
1603+
1604+ -- Steve Langasek <steve.langasek@ubuntu.com> Wed, 03 Jun 2009 15:39:14 +0000
1605+
1606+exim4 (4.69-11ubuntu1) karmic; urgency=low
1607+
1608+ * Merge from debian unstable (LP: #375923), remaining changes:
1609+ - debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
1610+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
1611+ lines without size info
1612+
1613+ -- Thierry Carrez <thierry.carrez@ubuntu.com> Wed, 13 May 2009 12:15:29 +0200
1614+
1615 exim4 (4.69-11) unstable; urgency=medium
1616
1617 * Build-Depend on lynx-cur|lynx instead of lynx. (lynx is just a dummy
1618@@ -3704,6 +4835,15 @@ exim4 (4.69-10) unstable; urgency=low
1619
1620 -- Andreas Metzler <ametzler@debian.org> Sat, 02 May 2009 09:05:56 +0200
1621
1622+exim4 (4.69-9ubuntu1) jaunty; urgency=low
1623+
1624+ [ Daniel van Eeden <launchpad@myname.nl> ]
1625+ * debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
1626+ Improve handling of broken messages when "exim4 -bp" (mailq) reports lines
1627+ w/o size info, LP: #18194
1628+
1629+ -- Dustin Kirkland <kirkland@ubuntu.com> Wed, 11 Feb 2009 06:43:52 -0600
1630+
1631 exim4 (4.69-9) unstable; urgency=medium
1632
1633 * [update-exim4.conf]: Use POSIX character classes [:alnum:] or explicit
1634diff --git a/debian/control b/debian/control
1635index a2249d5..219752b 100644
1636--- a/debian/control
1637+++ b/debian/control
1638@@ -4,7 +4,8 @@
1639 Source: exim4
1640 Section: mail
1641 Priority: standard
1642-Maintainer: Exim4 Maintainers <pkg-exim4-maintainers@lists.alioth.debian.org>
1643+Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
1644+XSBC-Original-Maintainer: Exim4 Maintainers <pkg-exim4-maintainers@lists.alioth.debian.org>
1645 Uploaders:
1646 Andreas Metzler <ametzler@debian.org>,
1647 Marc Haber <mh+debian-packages@zugschlus.de>,
1648@@ -30,7 +31,6 @@ Build-Depends:
1649 libperl-dev,
1650 libpq-dev,
1651 libsasl2-dev,
1652- libspf2-dev,
1653 libsqlite3-dev,
1654 libx11-dev,
1655 libxaw7-dev,
1656@@ -40,6 +40,7 @@ Build-Depends:
1657 lynx,
1658 po-debconf,
1659 xsltproc,
1660+ lsb-release
1661
1662 Package: exim4-base
1663 Architecture: any
1664diff --git a/debian/debconf/conf.d/acl/30_exim4-config_check_rcpt b/debian/debconf/conf.d/acl/30_exim4-config_check_rcpt
1665index 0403165..8a929f0 100644
1666--- a/debian/debconf/conf.d/acl/30_exim4-config_check_rcpt
1667+++ b/debian/debconf/conf.d/acl/30_exim4-config_check_rcpt
1668@@ -273,24 +273,45 @@ acl_check_rcpt:
1669 .endif
1670
1671
1672+ # Use spfquery to perform a pair of SPF checks.
1673+ #
1674+ # This is quite costly in terms of DNS lookups (~6 lookups per mail). Do not
1675+ # enable if that's an issue. Also note that if you enable this, you must
1676+ # install "spf-tools-perl" which provides the spfquery command.
1677+ # Missing spf-tools-perl will trigger the "Unexpected error in
1678+ # SPF check" warning.
1679 .ifdef CHECK_RCPT_SPF
1680- .ifdef _HAVE_SPF
1681 deny
1682 !acl = acl_local_deny_exceptions
1683- spf = fail
1684+ condition = ${run{/usr/bin/spfquery.mail-spf-perl \
1685+ --ip ${quote:$sender_host_address} \
1686+ --scope mfrom \
1687+ --identity ${quote:$sender_address}} \
1688+ {no}{${if eq {$runrc}{1}{yes}{no}}}}
1689 message = [SPF] $sender_host_address is not allowed to send mail from \
1690 ${if def:sender_address_domain {$sender_address_domain}{$sender_helo_name}}.
1691 log_message = SPF check failed.
1692
1693 defer
1694 !acl = acl_local_deny_exceptions
1695- spf = temperror
1696+ condition = ${if eq {$runrc}{5}{yes}{no}}
1697 message = Temporary DNS error while checking SPF record. Try again later.
1698
1699 warn
1700- spf = pass:softfail:neutral:permerror
1701- add_header = :at_start:$spf_received
1702- .endif
1703+ condition = ${if <={$runrc}{6}{yes}{no}}
1704+ add_header = Received-SPF: ${if eq {$runrc}{0}{pass}\
1705+ {${if eq {$runrc}{2}{softfail}\
1706+ {${if eq {$runrc}{3}{neutral}\
1707+ {${if eq {$runrc}{4}{permerror}\
1708+ {${if eq {$runrc}{6}{none}{error}}}}}}}}}\
1709+ } client-ip=$sender_host_address; \
1710+ ${if def:sender_address_domain \
1711+ {envelope-from=${sender_address}; }{}}\
1712+ helo=$sender_helo_name
1713+
1714+ warn
1715+ condition = ${if >{$runrc}{6}{yes}{no}}
1716+ log_message = Unexpected error in SPF check.
1717 .endif
1718
1719
1720diff --git a/debian/patches/fix_smtp_banner.patch b/debian/patches/fix_smtp_banner.patch
1721new file mode 100644
1722index 0000000..7009a95
1723--- /dev/null
1724+++ b/debian/patches/fix_smtp_banner.patch
1725@@ -0,0 +1,55 @@
1726+Description: Add EXIM_DISTRIBUTION var to display it on the SMTP banner
1727+Origin: https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-server-app-banner-updates
1728+Author: Yolanda Robla <yolanda.robla@canonical.com>
1729+Forwarded: https://salsa.debian.org/exim-team/exim4/merge_requests/2
1730+Last-Update: 2021-11-08
1731+
1732+--- a/src/globals.c
1733++++ b/src/globals.c
1734+@@ -1489,7 +1489,7 @@
1735+ uschar *smtp_active_hostname = NULL;
1736+ int smtp_backlog_monitor = 0;
1737+ uschar *smtp_banner = US"$smtp_active_hostname ESMTP "
1738+- "Exim $version_number $tod_full"
1739++ "Exim $version_number " EXIM_DISTRIBUTION " $tod_full"
1740+ "\0<---------------Space to patch smtp_banner->";
1741+ int smtp_ch_index = 0;
1742+ uschar *smtp_cmd_argument = NULL;
1743+--- a/src/config.h.defaults
1744++++ b/src/config.h.defaults
1745+@@ -234,4 +234,6 @@
1746+ #define SC_EXIM_ARITH "%" SCNi64 /* scanf incl. 0x prefix */
1747+ #define SC_EXIM_DEC "%" SCNd64 /* scanf decimal */
1748+
1749++#define EXIM_DISTRIBUTION
1750++
1751+ /* End of config.h.defaults */
1752+--- a/scripts/Configure-config.h
1753++++ b/scripts/Configure-config.h
1754+@@ -23,6 +23,13 @@
1755+ if [ "$1" != "" ] ; then MAKE=$1 ; fi
1756+ if [ "$MAKE" = "" ] ; then MAKE=make ; fi
1757+
1758++# exporting distribution to use it in smtp banner
1759++if test -x /usr/bin/lsb_release && lsb_release -si; then
1760++ export EXIM_DISTRIBUTION=\"$(lsb_release -si)\"
1761++else
1762++ export EXIM_DISTRIBUTION=\"\"
1763++fi
1764++
1765+ $MAKE buildconfig || exit 1
1766+
1767+ # BEWARE: tab characters needed in the following sed command. They have had
1768+--- a/src/exim.h
1769++++ b/src/exim.h
1770+@@ -651,6 +651,10 @@
1771+ # define EXIM_GROUPLIST_SIZE NGROUPS_MAX
1772+ #endif
1773+
1774++#ifndef EXIM_DISTRIBUTION
1775++ #define EXIM_DISTRIBUTION ""
1776++#endif
1777++
1778+ /* Linux has TCP_CORK, FreeBSD has TCP_NOPUSH; they do pretty much the same */
1779+
1780+ #ifdef TCP_CORK
1781diff --git a/debian/patches/series b/debian/patches/series
1782index c582df6..2a018a0 100644
1783--- a/debian/patches/series
1784+++ b/debian/patches/series
1785@@ -22,3 +22,4 @@
1786 78_07-ACL-in-regex-condition-release-store-every-thousand-.patch
1787 78_08-Fix-smtp-transport-response-to-close-after-all-rcpt-.patch
1788 90_localscan_dlopen.dpatch
1789+fix_smtp_banner.patch

Subscribers

People subscribed via source and target branches