Merge ~mirespace/ubuntu/+source/exim4:merge-lpSD94-exim4-test into ubuntu/+source/exim4:debian/sid

Proposed by Miriam España Acebal
Status: Merged
Approved by: Christian Ehrhardt 
Approved revision: 0125ed75a4c1e29cafd36cf020f9dc4ea752b3e1
Merge reported by: Bryce Harrington
Merged at revision: 0125ed75a4c1e29cafd36cf020f9dc4ea752b3e1
Proposed branch: ~mirespace/ubuntu/+source/exim4:merge-lpSD94-exim4-test
Merge into: ubuntu/+source/exim4:debian/sid
Diff against target: 1342 lines (+908/-2)
4 files modified
debian/changelog (+850/-0)
debian/control (+4/-2)
debian/patches/fix_smtp_banner.patch (+53/-0)
debian/patches/series (+1/-0)
Reviewer Review Type Date Requested Status
Christian Ehrhardt  (community) Approve
Lucas Kanashiro (community) Needs Fixing
Canonical Server Pending
Review via email: mp+405952@code.launchpad.net
To post a comment you must log in.
Revision history for this message
Miriam España Acebal (mirespace) wrote :

There is a built PPA for this: https://launchpad.net/~mirespace/+archive/ubuntu/hello-testing-sd94.

The usual tags are there:

lpSD94/logical/4.94.2-2ubuntu2
lpSD94/new/debian
lpSD94/old/debian
lpSD94/old/ubuntu
lpSD94/reconstruct/4.94.2-2ubuntu2
lpSD94/split/4.94.2-2ubuntu2

Revision history for this message
Lucas Kanashiro (lucaskanashiro) wrote :

* Changelog:
  - [√] old content and logical tag match as expected
  - [√] changelog entry correct version and targeted codename
  - [x] changelog entries correct
        -> There is a minor indentation issue.
  - [√] update-maintainer has been run

* Actual changes:
  - [√] no upstream changes to consider
  - [√] no further upstream version to consider
  - [√] debian changes look safe

* Old Delta:
  - [-] dropped changes are ok to be dropped
  - [√] nothing else to drop
  - [√] changes forwarded upstream/debian (if appropriate)

* New Delta:
  - [√] no new patches added
  - [-] patches match what was proposed upstream
  - [-] patches correctly included in debian/patches/series
  - [-] patches have correct DEP3 metadata

* Build/Test:
  - [√] build is ok
  - [√] verified PPA package installs/uninstalls
  - [√] autopkgtest against the PPA package passes
  - [√] sanity checks test fine

Thanks for this MP Miriam, good work! There is a minor issue in your changelog entry that needs to be fixed before uploading this package to the archive but that's all :) I am making some comments to try to help you in your future merges, if you have any question feel free to ask.

I checked your split tag and the content is OK but, as my personal preference, I'd prefer to add the 'update-maintainer' git commit on top of the actual delta. No need to redo everything to change this.

I suppose you ran 'git ubuntu merge finish ubuntu/devel' to reconstruct the changelog, there is a minor indentation issue there because of the indentation of your commit message. This is something we need to fix to upload the package. It should be the following:

  * Merge with Debian unstable. Remaining changes:
    - Show Ubuntu distribution in SMTP banner
      + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
      + Build-Depends on lsb-release to detect Distribution.

I added 2 more spaces to the second line. If you keep the right indentation in the commit messages git-ubuntu will generate it correctly for you, or you can fix-up things by the end of the merge.

You added the last commit to remove the LP reference (not LP, actually it was SD), I'd squash it with the 'reconstruct-changelog' commit since I believe you add it there, just to keep the history more clear. I'd like this to be done before we upload this package.

review: Needs Fixing
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

Checking:
1. CL changes now in one commit
2. indent now LGTM
3. checked the kind of whitespace (spaces)
=> all ok and the rest was reviewed before already (still looks good)

Sponsoring ...

Revision history for this message
Christian Ehrhardt  (paelzer) :
review: Approve
Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

To ssh://git.launchpad.net/~usd-import-team/ubuntu/+source/exim4
 * [new tag] upload/4.94.2-7ubuntu1 -> upload/4.94.2-7ubuntu

Note: The end result is fine, but I've seen this
+<<<<<<< HEAD
+=======
in commit 198b6c94f467d1461f5b74ebb4430bc5ef0a3b4d
which indicated hat something was going on which was not right.
Please have an extra eye for that next time.

Gladly (but only in this case) since exim4 is a known error-case for git ubuntu this content won't be stored forever. Therefore I'll go ahead and upload.
Otherwise I'd suggest to change/push so this isn't in git-memory for all time.

Uploading to ubuntu (via ftp to upload.ubuntu.com):
  Uploading exim4_4.94.2-7ubuntu1.dsc: done.
  Uploading exim4_4.94.2-7ubuntu1.debian.tar.xz: done.
  Uploading exim4_4.94.2-7ubuntu1_source.buildinfo: done.
  Uploading exim4_4.94.2-7ubuntu1_source.changes: done.
Successfully uploaded packages.

Revision history for this message
Miriam España Acebal (mirespace) wrote :

Thank you Lukas for all your kind words and for the didactic comment :)

Revision history for this message
Bryce Harrington (bryce) wrote :

 exim4 | 4.94.2-7ubuntu2 | impish | source

This has transitioned.

Congrats Miriam on your first official git ubuntu merge. :-)

Revision history for this message
Miriam España Acebal (mirespace) wrote :

Thanks to all of you for the support! :D

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk
1diff --git a/debian/changelog b/debian/changelog
2index d965dd7..785e462 100644
3--- a/debian/changelog
4+++ b/debian/changelog
5@@ -1,3 +1,12 @@
6+exim4 (4.94.2-7ubuntu1) impish; urgency=medium
7+
8+ * Merge with Debian unstable (LP: #SD94). Remaining changes:
9+ - Show Ubuntu distribution in SMTP banner
10+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
11+ + Build-Depends on lsb-release to detect Distribution.
12+
13+ -- Miriam Espana Acebal <miriam.espana@canonical.com> Thu, 15 Jul 2021 13:23:50 +0200
14+
15 exim4 (4.94.2-7) unstable; urgency=medium
16
17 * 73_05-Fix-tainted-message-for-fakereject.patch from upstream +fixes
18@@ -44,6 +53,25 @@ exim4 (4.94.2-3) unstable; urgency=medium
19
20 -- Andreas Metzler <ametzler@debian.org> Thu, 13 May 2021 18:53:53 +0200
21
22+exim4 (4.94.2-2ubuntu2) impish; urgency=medium
23+
24+ * No-change rebuild due to OpenLDAP soname bump.
25+
26+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Mon, 21 Jun 2021 17:47:09 -0400
27+
28+exim4 (4.94.2-2ubuntu1) impish; urgency=medium
29+
30+ * Merge with Debian unstable. Remaining changes:
31+ - Show Ubuntu distribution in SMTP banner
32+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
33+ + Build-Depends on lsb-release to detect Distribution.
34+ * Dropped changes:
35+ - debian/patches/sec-202105/*.patch: backport patches from upstream to
36+ correct issues.
37+ [Included in 4.94.2-1]
38+
39+ -- Utkarsh Gupta <utkarsh.gupta@canonical.com> Tue, 11 May 2021 18:25:10 +0530
40+
41 exim4 (4.94.2-2) unstable; urgency=medium
42
43 * Updates from exim-4.94.2+fixes:
44@@ -156,6 +184,28 @@ exim4 (4.94-16) unstable; urgency=medium
45
46 -- Andreas Metzler <ametzler@debian.org> Wed, 17 Mar 2021 13:50:44 +0100
47
48+exim4 (4.94-15ubuntu1.2) hirsute-security; urgency=medium
49+
50+ * SECURITY UPDATE: Multiple security issues
51+ - debian/patches/sec-202105/*.patch: backport patches from upstream to
52+ correct issues.
53+ - CVE-2020-28007, CVE-2020-28008, CVE-2020-28009, CVE-2020-28010,
54+ CVE-2020-28011, CVE-2020-28012, CVE-2020-28013, CVE-2020-28014,
55+ CVE-2020-28015, CVE-2020-28016, CVE-2020-28017, CVE-2020-28018,
56+ CVE-2020-28019, CVE-2020-28021, CVE-2020-28022, CVE-2020-28023,
57+ CVE-2020-28024, CVE-2020-28025, CVE-2020-28026, CVE-2021-27216
58+
59+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Fri, 30 Apr 2021 08:46:21 -0400
60+
61+exim4 (4.94-15ubuntu1) hirsute; urgency=medium
62+
63+ * Merge with Debian unstable (LP: #1916744). Remaining changes:
64+ - Show Ubuntu distribution in SMTP banner
65+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
66+ + Build-Depends on lsb-release to detect Distribution.
67+
68+ -- Utkarsh Gupta <utkarsh.gupta@canonical.com> Wed, 24 Feb 2021 17:32:37 +0530
69+
70 exim4 (4.94-15) unstable; urgency=medium
71
72 * Update from exim-4.94+fixes:
73@@ -180,6 +230,15 @@ exim4 (4.94-13) unstable; urgency=medium
74
75 -- Andreas Metzler <ametzler@debian.org> Sat, 30 Jan 2021 14:50:50 +0100
76
77+exim4 (4.94-12ubuntu1) hirsute; urgency=medium
78+
79+ * Merge with Debian unstable. Remaining changes:
80+ - Show Ubuntu distribution in SMTP banner
81+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
82+ + Build-Depends on lsb-release to detect Distribution.
83+
84+ -- Bryce Harrington <bryce@canonical.com> Wed, 20 Jan 2021 19:35:04 -0800
85+
86 exim4 (4.94-12) unstable; urgency=medium
87
88 * Update from exim-4.94+fixes:
89@@ -214,6 +273,15 @@ exim4 (4.94-10) unstable; urgency=low
90
91 -- Andreas Metzler <ametzler@debian.org> Sat, 19 Dec 2020 12:03:56 +0100
92
93+exim4 (4.94-9ubuntu1) hirsute; urgency=medium
94+
95+ * Merge with Debian unstable. Remaining changes:
96+ - Show Ubuntu distribution in SMTP banner
97+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
98+ + Build-Depends on lsb-release to detect Distribution.
99+
100+ -- Bryce Harrington <bryce@canonical.com> Sat, 07 Nov 2020 01:01:32 +0000
101+
102 exim4 (4.94-9) unstable; urgency=low
103
104 * Update from exim-4.94+fixes:
105@@ -243,6 +311,15 @@ exim4 (4.94-8) unstable; urgency=low
106
107 -- Andreas Metzler <ametzler@debian.org> Thu, 17 Sep 2020 06:54:00 +0200
108
109+exim4 (4.94-7ubuntu1) groovy; urgency=medium
110+
111+ * Merge with Debian unstable. Remaining changes:
112+ - Show Ubuntu distribution in SMTP banner
113+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
114+ + Build-Depends on lsb-release to detect Distribution.
115+
116+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Mon, 24 Aug 2020 16:36:31 -0400
117+
118 exim4 (4.94-7) unstable; urgency=low
119
120 * Update from exim-4.94+fixes:
121@@ -253,6 +330,15 @@ exim4 (4.94-7) unstable; urgency=low
122
123 -- Andreas Metzler <ametzler@debian.org> Fri, 24 Jul 2020 13:31:47 +0200
124
125+exim4 (4.94-6ubuntu1) groovy; urgency=medium
126+
127+ * Merge with Debian unstable. Remaining changes:
128+ - Show Ubuntu distribution in SMTP banner
129+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
130+ + Build-Depends on lsb-release to detect Distribution.
131+
132+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Thu, 13 Aug 2020 13:49:10 -0400
133+
134 exim4 (4.94-6) unstable; urgency=medium
135
136 * Fix typo (missing "S") in REMOTE_SMTP_SMARTHOST_TLS_VERIFY_HOSTS macro.
137@@ -304,6 +390,15 @@ exim4 (4.94-3) unstable; urgency=medium
138
139 -- Andreas Metzler <ametzler@debian.org> Fri, 19 Jun 2020 10:31:26 +0200
140
141+exim4 (4.94-2ubuntu1) groovy; urgency=medium
142+
143+ * Merge with Debian unstable (LP: #1881723). Remaining changes:
144+ - Show Ubuntu distribution in SMTP banner
145+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
146+ + Build-Depends on lsb-release to detect Distribution.
147+
148+ -- Bryce Harrington <bryce@canonical.com> Fri, 12 Jun 2020 01:55:28 +0000
149+
150 exim4 (4.94-2) unstable; urgency=low
151
152 * Tighten package interdependencies. With 4.94's daemon avoiding of
153@@ -406,6 +501,15 @@ exim4 (4.93-16) unstable; urgency=medium
154
155 -- Andreas Metzler <ametzler@debian.org> Sat, 09 May 2020 19:10:34 +0200
156
157+exim4 (4.93-15ubuntu1) groovy; urgency=medium
158+
159+ * Merge with Debian unstable. Remaining changes:
160+ - Show Ubuntu distribution in SMTP banner
161+ + Build-Depends on lsb-release to detect Distribution.
162+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
163+
164+ -- Sergio Durigan Junior <sergio.durigan@canonical.com> Tue, 05 May 2020 15:37:59 -0400
165+
166 exim4 (4.93-15) unstable; urgency=low
167
168 * Update from exim-4.93+fixes:
169@@ -425,6 +529,15 @@ exim4 (4.93-14) unstable; urgency=low
170
171 -- Andreas Metzler <ametzler@debian.org> Fri, 10 Apr 2020 13:53:34 +0200
172
173+exim4 (4.93-13ubuntu1) focal; urgency=medium
174+
175+ * Merge with Debian unstable. Remaining changes:
176+ - Show Ubuntu distribution in SMTP banner
177+ + Build-Depends on lsb-release to detect Distribution.
178+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
179+
180+ -- Bryce Harrington <bryce@canonical.com> Fri, 27 Mar 2020 16:00:03 -0700
181+
182 exim4 (4.93-13) unstable; urgency=medium
183
184 * Update from exim-4.93+fixes:
185@@ -436,6 +549,15 @@ exim4 (4.93-13) unstable; urgency=medium
186
187 -- Andreas Metzler <ametzler@debian.org> Sat, 21 Mar 2020 11:39:19 +0100
188
189+exim4 (4.93-12ubuntu1) focal; urgency=medium
190+
191+ * Merge with Debian unstable. Remaining changes:
192+ - Show Ubuntu distribution in SMTP banner
193+ + Build-Depends on lsb-release to detect Distribution.
194+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
195+
196+ -- Bryce Harrington <bryce@canonical.com> Fri, 13 Mar 2020 14:25:38 -0700
197+
198 exim4 (4.93-12) unstable; urgency=low
199
200 * Update from exim-4.93+fixes:
201@@ -451,6 +573,15 @@ exim4 (4.93-12) unstable; urgency=low
202
203 -- Andreas Metzler <ametzler@debian.org> Sat, 29 Feb 2020 15:53:44 +0100
204
205+exim4 (4.93-11ubuntu1) focal; urgency=medium
206+
207+ * Merge with Debian unstable. Remaining changes:
208+ - Show Ubuntu distribution in SMTP banner
209+ + Build-Depends on lsb-release to detect Distribution.
210+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
211+
212+ -- Bryce Harrington <bryce@canonical.com> Wed, 26 Feb 2020 02:34:11 +0000
213+
214 exim4 (4.93-11) unstable; urgency=medium
215
216 * Update from exim-4.93+fixes:
217@@ -470,6 +601,15 @@ exim4 (4.93-10) unstable; urgency=medium
218
219 -- Andreas Metzler <ametzler@debian.org> Sat, 01 Feb 2020 11:06:29 +0100
220
221+exim4 (4.93-9ubuntu1) focal; urgency=medium
222+
223+ * Merge with Debian unstable (LP: #1860051). Remaining changes:
224+ - Show Ubuntu distribution in SMTP banner
225+ - Build-Depends on lsb-release to detect Distribution.
226+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
227+
228+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Fri, 17 Jan 2020 09:39:13 +0100
229+
230 exim4 (4.93-9) unstable; urgency=medium
231
232 * Add 74_22-Taint-hybrid-checking-mode.patch.
233@@ -589,6 +729,25 @@ exim4 (4.93~RC3-1) unstable; urgency=low
234
235 -- Andreas Metzler <ametzler@debian.org> Sun, 17 Nov 2019 11:37:15 +0100
236
237+exim4 (4.93~RC2-1ubuntu1) focal; urgency=medium
238+
239+ * Merge with Debian unstable. Remaining changes:
240+ - Show Ubuntu distribution in SMTP banner
241+ + Build-Depends on lsb-release to detect Distribution.
242+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
243+ * Dropped:
244+ - SECURITY UPDATE: remote command execution
245+ + d/p/CVE-2019-15846.patch: ensure not to interpret '\\'
246+ before '\0' in src/string.c
247+ + CVE-2019-15846
248+ [Now in upstream as of 4.92.2-1]
249+ - SECURITY UPDATE: heap-based buffer overflow in string_vformat
250+ + debian/patches/CVE-2019-16928.patch: fix overflow in src/string.c.
251+ + CVE-2019-16928
252+ [Now upstream as of 4.92.3-1]
253+
254+ -- Bryce Harrington <bryce@canonical.com> Wed, 13 Nov 2019 18:56:58 -0800
255+
256 exim4 (4.93~RC2-1) unstable; urgency=low
257
258 * New upstream beta version.
259@@ -745,6 +904,42 @@ exim4 (4.92.1-2) unstable; urgency=medium
260
261 -- Andreas Metzler <ametzler@debian.org> Wed, 14 Aug 2019 09:25:28 +0200
262
263+exim4 (4.92.1-1ubuntu4) focal; urgency=medium
264+
265+ * No-change rebuild for the perl update.
266+
267+ -- Matthias Klose <doko@ubuntu.com> Fri, 18 Oct 2019 19:27:29 +0000
268+
269+exim4 (4.92.1-1ubuntu3) eoan; urgency=medium
270+
271+ * SECURITY UPDATE: heap-based buffer overflow in string_vformat
272+ - debian/patches/CVE-2019-16928.patch: fix overflow in src/string.c.
273+ - CVE-2019-16928
274+
275+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 28 Sep 2019 11:05:50 -0400
276+
277+exim4 (4.92.1-1ubuntu2) eoan; urgency=medium
278+
279+ * SECURITY UPDATE: remote command execution
280+ - debian/patches/CVE-2019-15846.patch: ensure not to interpret '\\'
281+ before '\0' in src/string.c
282+ - CVE-2019-15846
283+
284+ -- Alex Murray <alex.murray@canonical.com> Thu, 05 Sep 2019 11:29:48 +0930
285+
286+exim4 (4.92.1-1ubuntu1) eoan; urgency=medium
287+
288+ * Merge with Debian unstable. Remaining changes:
289+ - Show Ubuntu distribution in SMTP banner
290+ + Build-Depends on lsb-release to detect Distribution.
291+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
292+ * Dropped:
293+ - d/p/CVE-2019-13917.patch: avoid re-expansion in ${sort } in
294+ src/expand.c.
295+ [Fixed in 4.92.1]
296+
297+ -- Bryce Harrington <bryce@canonical.com> Mon, 12 Aug 2019 19:18:33 -0700
298+
299 exim4 (4.92.1-1) unstable; urgency=low
300
301 * New upstream bugfix release. (4.92.1 is 4.92 + the fix for CVE-2019-13917,
302@@ -815,6 +1010,24 @@ exim4 (4.92-8) unstable; urgency=low
303
304 -- Andreas Metzler <ametzler@debian.org> Sat, 08 Jun 2019 17:37:43 +0200
305
306+exim4 (4.92-7ubuntu2) eoan; urgency=medium
307+
308+ * SECURITY UPDATE: code execution via ${sort }
309+ - debian/patches/CVE-2019-13917.patch: avoid re-expansion in ${sort }
310+ in src/expand.c.
311+ - CVE-2019-13917
312+
313+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 25 Jul 2019 12:58:39 -0400
314+
315+exim4 (4.92-7ubuntu1) eoan; urgency=medium
316+
317+ * Merge with Debian unstable. Remaining changes:
318+ - Show Ubuntu distribution in SMTP banner
319+ + Build-Depends on lsb-release to detect Distribution.
320+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
321+
322+ -- Bryce Harrington <bryce@canonical.com> Mon, 13 May 2019 13:48:18 -0700
323+
324 exim4 (4.92-7) unstable; urgency=medium
325
326 * Upload to unstable.
327@@ -842,6 +1055,15 @@ exim4 (4.92-5) unstable; urgency=medium
328
329 -- Andreas Metzler <ametzler@debian.org> Sun, 07 Apr 2019 13:39:31 +0200
330
331+exim4 (4.92-4ubuntu1) disco; urgency=medium
332+
333+ * Merge with Debian unstable (LP: #1821339). Remaining changes:
334+ * Show Ubuntu distribution in SMTP banner
335+ - Build-Depends on lsb-release to detect Distribution.
336+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
337+
338+ -- Karl Stenerud <karl.stenerud@canonical.com> Mon, 25 Mar 2019 12:02:33 +0100
339+
340 exim4 (4.92-4) unstable; urgency=medium
341
342 * Another patch from exim-4.92+fixes branch:
343@@ -860,6 +1082,15 @@ exim4 (4.92-3) unstable; urgency=medium
344
345 -- Andreas Metzler <ametzler@debian.org> Wed, 20 Mar 2019 17:01:29 +0100
346
347+exim4 (4.92-2ubuntu1) disco; urgency=medium
348+
349+ * Merge with Debian unstable (LP: #1818444). Remaining changes:
350+ - Show Ubuntu distribution in SMTP banner
351+ + Build-Depends on lsb-release to detect Distribution.
352+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
353+
354+ -- Karl Stenerud <kstenerud@gmail.com> Tue, 05 Mar 2019 10:55:48 +0100
355+
356 exim4 (4.92-2) unstable; urgency=medium
357
358 * Upload to unstable.
359@@ -916,6 +1147,21 @@ exim4 (4.92~RC4-3) unstable; urgency=medium
360
361 -- Andreas Metzler <ametzler@debian.org> Sun, 20 Jan 2019 17:52:39 +0100
362
363+exim4 (4.92~RC4-2ubuntu2) disco; urgency=medium
364+
365+ * No-change rebuild against libmysqlclient21
366+
367+ -- Steve Langasek <steve.langasek@ubuntu.com> Fri, 01 Feb 2019 16:57:54 +0000
368+
369+exim4 (4.92~RC4-2ubuntu1) disco; urgency=medium
370+
371+ * Merge with Debian unstable (LP: #1811095). Remaining changes:
372+ - Show Ubuntu distribution in SMTP banner
373+ + Build-Depends on lsb-release to detect Distribution.
374+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
375+
376+ -- Karl Stenerud <kstenerud@gmail.com> Thu, 10 Jan 2019 16:41:45 +0100
377+
378 exim4 (4.92~RC4-2) unstable; urgency=medium
379
380 * Upload to unstable.
381@@ -1009,6 +1255,22 @@ exim4 (4.91-7) unstable; urgency=low
382
383 -- Andreas Metzler <ametzler@debian.org> Sun, 26 Aug 2018 11:33:15 +0200
384
385+exim4 (4.91-6ubuntu2) disco; urgency=medium
386+
387+ * No-change rebuild for the perl 5.28 transition.
388+
389+ -- Adam Conrad <adconrad@ubuntu.com> Fri, 02 Nov 2018 18:08:13 -0600
390+
391+exim4 (4.91-6ubuntu1) cosmic; urgency=medium
392+
393+ * Merge with Debian unstable. Remaining changes:
394+ - Show Ubuntu distribution in SMTP banner
395+ + Build-Depends on lsb-release to detect Distribution.
396+ + d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
397+ [DEP3 header updated to indicate it has been forwarded to Debian]
398+
399+ -- Andreas Hasenack <andreas@canonical.com> Mon, 30 Jul 2018 15:35:06 -0300
400+
401 exim4 (4.91-6) unstable; urgency=low
402
403 * Update from exim-4_91+fixes branch:
404@@ -1020,6 +1282,16 @@ exim4 (4.91-6) unstable; urgency=low
405
406 -- Andreas Metzler <ametzler@debian.org> Fri, 20 Jul 2018 11:21:24 +0200
407
408+exim4 (4.91-5ubuntu1) cosmic; urgency=medium
409+
410+ * Merge with Debian unstable. Remaining changes:
411+ - Show Ubuntu distribution in SMTP banner
412+ - Build-Depends on lsb-release to detect Distribution.
413+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
414+ [DEP3 header updated to indicate it has been forwarded to Debian]
415+
416+ -- Andreas Hasenack <andreas@canonical.com> Tue, 03 Jul 2018 11:13:08 -0300
417+
418 exim4 (4.91-5) unstable; urgency=medium
419
420 * Update from exim-4_91+fixes branch:
421@@ -1029,6 +1301,15 @@ exim4 (4.91-5) unstable; urgency=medium
422
423 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Jun 2018 18:10:39 +0200
424
425+exim4 (4.91-4ubuntu1) cosmic; urgency=medium
426+
427+ * Merge from Debian testing, Remaining changes:
428+ - Show Ubuntu distribution in SMTP banner
429+ - Build-Depends on lsb-release to detect Distribution.
430+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
431+
432+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Wed, 30 May 2018 12:46:14 +0200
433+
434 exim4 (4.91-4) unstable; urgency=medium
435
436 * Update from exim-4_91+fixes branch:
437@@ -1147,6 +1428,15 @@ exim4 (4.90.1-2) unstable; urgency=medium
438
439 -- Andreas Metzler <ametzler@debian.org> Sat, 10 Mar 2018 14:25:51 +0100
440
441+exim4 (4.90.1-1ubuntu1) bionic; urgency=medium
442+
443+ * Merge from Debian testing, Remaining changes:
444+ - Show Ubuntu distribution in SMTP banner
445+ - Build-Depends on lsb-release to detect Distribution.
446+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
447+
448+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Wed, 14 Feb 2018 17:01:14 +0100
449+
450 exim4 (4.90.1-1) unstable; urgency=high
451
452 * New upstream version, fixing CVE-2018-6789. Closes: #890000
453@@ -1341,6 +1631,15 @@ exim4 (4.89-10) unstable; urgency=critical
454
455 -- Andreas Metzler <ametzler@debian.org> Sat, 25 Nov 2017 11:43:24 +0100
456
457+exim4 (4.89-9ubuntu1) bionic; urgency=medium
458+
459+ * Merge from Debian unstable, Remaining changes:
460+ - Show Ubuntu distribution in SMTP banner
461+ - Build-Depends on lsb-release to detect Distribution.
462+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
463+
464+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Thu, 16 Nov 2017 10:02:23 +0100
465+
466 exim4 (4.89-9) unstable; urgency=medium
467
468 * Upload to unstable.
469@@ -1383,6 +1682,42 @@ exim4 (4.89-6) unstable; urgency=medium
470
471 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Sep 2017 15:29:39 +0200
472
473+exim4 (4.89-5ubuntu1.3) artful-security; urgency=medium
474+
475+ * SECURITY UPDATE: Buffer overflow in base64d()
476+ - debian/patches/CVE-2018-6789.patch: fix overflow in src/base64.c.
477+ - CVE-2018-6789
478+
479+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 10 Feb 2018 14:12:27 -0500
480+
481+exim4 (4.89-5ubuntu1.2) artful-security; urgency=medium
482+
483+ * SECURITY UPDATE: stack-exhaustion remote DoS
484+ - debian/patches/CVE-2017-16944.patch: do not treat the first lonely
485+ dot special in src/receive.c, src/smtp_in.c.
486+ - CVE-2017-16944
487+
488+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Wed, 29 Nov 2017 08:59:31 -0500
489+
490+exim4 (4.89-5ubuntu1.1) artful-security; urgency=medium
491+
492+ * SECURITY UPDATE: remote code execution via use-after-free
493+ - debian/patches/CVE-2017-16943.patch: avoid release of store if there
494+ have been later allocations in src/receive.c.
495+ - CVE-2017-16943
496+
497+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Mon, 27 Nov 2017 07:37:47 -0500
498+
499+exim4 (4.89-5ubuntu1) artful; urgency=medium
500+
501+ * Merge from Debian testing.
502+ Remaining changes:
503+ - Show Ubuntu distribution in SMTP banner
504+ - Build-Depends on lsb-release to detect Distribution.
505+ - d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
506+
507+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Wed, 16 Aug 2017 15:42:47 +0200
508+
509 exim4 (4.89-5) unstable; urgency=medium
510
511 * Update to exim-4_89+fixes branch:
512@@ -1427,6 +1762,20 @@ exim4 (4.89-4) unstable; urgency=low
513
514 -- Andreas Metzler <ametzler@debian.org> Sat, 15 Jul 2017 12:46:16 +0200
515
516+exim4 (4.89-3ubuntu2) artful; urgency=medium
517+
518+ * No-change rebuild for perl 5.26.0.
519+
520+ -- Matthias Klose <doko@ubuntu.com> Wed, 26 Jul 2017 20:02:24 +0000
521+
522+exim4 (4.89-3ubuntu1) artful; urgency=medium
523+
524+ * Merge from Debian. Remaining changes:
525+ - Show Ubuntu distribution in SMTP banner.
526+ - Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
527+
528+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 27 Jun 2017 10:20:42 -0400
529+
530 exim4 (4.89-3) unstable; urgency=high
531
532 * Re-upload to unstable.
533@@ -1439,6 +1788,15 @@ exim4 (4.89-2+deb9u1) stretch-security; urgency=medium
534
535 -- <jmm@debian.org> Wed, 14 Jun 2017 07:03:07 +0200
536
537+exim4 (4.89-2ubuntu1) artful; urgency=medium
538+
539+ * Merge from Debian testing.
540+ Remaining changes:
541+ + Show Ubuntu distribution in SMTP banner.
542+ + Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
543+
544+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Thu, 01 Jun 2017 11:58:00 +0200
545+
546 exim4 (4.89-2) unstable; urgency=medium
547
548 * Revert addition of header "# pidfile: /var/run/exim4/exim.pid" to
549@@ -1530,6 +1888,17 @@ exim4 (4.89~RC1-1) unstable; urgency=low
550
551 -- Andreas Metzler <ametzler@debian.org> Tue, 31 Jan 2017 19:52:50 +0100
552
553+exim4 (4.88-5ubuntu1) zesty; urgency=medium
554+
555+ * Merge from Debian unstable.
556+ Version 4.88 fixes CVE-2016-9963 (LP: #1654750) and symlink
557+ local root escalation (LP: #1580454)
558+ Remaining changes:
559+ + Show Ubuntu distribution in SMTP banner.
560+ + Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
561+
562+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Tue, 24 Jan 2017 10:15:09 +0100
563+
564 exim4 (4.88-5) unstable; urgency=medium
565
566 * 78_Disable-chunking-BDAT-by-default.patch: Change default value of main
567@@ -1682,6 +2051,20 @@ exim4 (4.88~RC1-1) experimental; urgency=low
568
569 -- Andreas Metzler <ametzler@debian.org> Sun, 25 Sep 2016 15:44:00 +0200
570
571+exim4 (4.87-3ubuntu2) zesty; urgency=medium
572+
573+ * No-change rebuild for perl 5.24 transition
574+
575+ -- Iain Lane <iain@orangesquash.org.uk> Mon, 24 Oct 2016 10:08:10 +0100
576+
577+exim4 (4.87-3ubuntu1) yakkety; urgency=medium
578+
579+ * Merge from Debian unstable. Remaining changes:
580+ + Show Ubuntu distribution in SMTP banner.
581+ + Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
582+
583+ -- Christian Ehrhardt <christian.ehrhardt@canonical.com> Tue, 26 Jul 2016 13:30:09 +0200
584+
585 exim4 (4.87-3) unstable; urgency=medium
586
587 * Pull multiple patches from upstream GIT:
588@@ -1855,6 +2238,48 @@ exim4 (4.87~RC1-1) experimental; urgency=medium
589
590 -- Andreas Metzler <ametzler@debian.org> Fri, 11 Dec 2015 20:15:30 +0100
591
592+exim4 (4.86.2-2ubuntu2.3) xenial-security; urgency=medium
593+
594+ * SECURITY UPDATE: Buffer overflow in base64d()
595+ - debian/patches/CVE-2018-6789.patch: fix overflow in
596+ src/auths/b64decode.c.
597+ - CVE-2018-6789
598+
599+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 10 Feb 2018 14:18:40 -0500
600+
601+exim4 (4.86.2-2ubuntu2.2) xenial-security; urgency=medium
602+
603+ * SECURITY UPDATE: memory leak
604+ - debian/patches/93_CVE-2017-1000368.patch: free -p argument if
605+ allocation was required.
606+ - CVE-2017-1000368
607+
608+ -- Steve Beattie <sbeattie@ubuntu.com> Fri, 02 Jun 2017 22:07:28 -0700
609+
610+exim4 (4.86.2-2ubuntu2.1) xenial-security; urgency=medium
611+
612+ * SECURITY UPDATE: DKIM information leakage
613+ - debian/patches/CVE-2016-9963.patch: fix information leakage in
614+ src/dkim.c, src/transports/smtp.c.
615+ - CVE-2016-9963
616+
617+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 05 Jan 2017 08:29:10 -0500
618+
619+exim4 (4.86.2-2ubuntu2) xenial; urgency=medium
620+
621+ * Rebuild against libmysqlclient20.
622+
623+ -- Robie Basak <robie.basak@ubuntu.com> Tue, 05 Apr 2016 12:21:41 +0000
624+
625+exim4 (4.86.2-2ubuntu1) xenial; urgency=medium
626+
627+ * Merge from Debian unstable. Remaining changes:
628+ - debian.control, debian/patches/fix_smtp_banner.patch
629+ + Show Ubuntu distribution in SMTP banner.
630+ + Build-Depends on lsb-release.
631+
632+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 15 Mar 2016 11:56:18 -0400
633+
634 exim4 (4.86.2-2) unstable; urgency=high
635
636 * Bump exim4-config Breaks to exim4-daemon-* (<< 4.86.2). Closes: #816790
637@@ -1876,6 +2301,27 @@ exim4 (4.86.2-1) unstable; urgency=high
638
639 -- Andreas Metzler <ametzler@debian.org> Tue, 01 Mar 2016 19:34:39 +0100
640
641+exim4 (4.86-7ubuntu3) xenial; urgency=medium
642+
643+ * No-change rebuild for gnutls transition.
644+
645+ -- Matthias Klose <doko@ubuntu.com> Wed, 17 Feb 2016 22:40:56 +0000
646+
647+exim4 (4.86-7ubuntu2) xenial; urgency=medium
648+
649+ * Rebuild for Perl 5.22.1.
650+
651+ -- Colin Watson <cjwatson@ubuntu.com> Fri, 18 Dec 2015 10:30:54 +0000
652+
653+exim4 (4.86-7ubuntu1) xenial; urgency=medium
654+
655+ * Merge from Debian unstable. Remaining changes:
656+ - debian.control, debian/patches/fix_smtp_banner.patch
657+ + Show Ubuntu distribution in SMTP banner.
658+ + Build-Depends on lsb-release.
659+
660+ -- Pierre-André MOREY <pierre-andre.morey@canonical.com> Mon, 14 Dec 2015 14:23:51 +0100
661+
662 exim4 (4.86-7) unstable; urgency=medium
663
664 * Allow arch-indep build (dpkg-buildpackage -A). Closes: #806023
665@@ -1926,6 +2372,15 @@ exim4 (4.86-4) unstable; urgency=medium
666
667 -- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2015 15:01:01 +0200
668
669+exim4 (4.86-3ubuntu1) wily; urgency=medium
670+
671+ * Merge from Debian unstable. (LP: #1485369) Remaining changes:
672+ - debian/control, debian/patches/fix_smtp_banner.patch:
673+ + Show Ubuntu distribution in SMTP banner.
674+ + Build-Depends on lsb-release.
675+
676+ -- Artur Rona <ari-tczew@ubuntu.com> Thu, 17 Sep 2015 13:18:20 +0100
677+
678 exim4 (4.86-3) unstable; urgency=medium
679
680 * Pull three patches from upstream git:
681@@ -1966,6 +2421,15 @@ exim4 (4.86~RC5-1) unstable; urgency=medium
682
683 -- Andreas Metzler <ametzler@debian.org> Sat, 18 Jul 2015 11:46:11 +0200
684
685+exim4 (4.86~RC4-2ubuntu1) wily; urgency=low
686+
687+ * Merge from Debian unstable. (LP: #1166671) Remaining changes:
688+ - debian/control, debian/patches/fix_smtp_banner.patch:
689+ + Show Ubuntu distribution in SMTP banner.
690+ + Build-Depends on lsb-release.
691+
692+ -- Artur Rona <ari-tczew@ubuntu.com> Mon, 06 Jul 2015 12:09:36 +0200
693+
694 exim4 (4.86~RC4-2) unstable; urgency=medium
695
696 * Drop libmysqlclient15-dev alternative build-dependency. Closes: #790463
697@@ -2130,6 +2594,18 @@ exim4 (4.85~RC1+dfsg-1) experimental; urgency=medium
698
699 -- Andreas Metzler <ametzler@debian.org> Tue, 18 Nov 2014 19:28:20 +0100
700
701+exim4 (4.84-8ubuntu1) vivid; urgency=low
702+
703+ * Merge from Debian unstable. (LP: #1434300) Remaining changes:
704+ - debian/control, debian/patches/fix_smtp_banner.patch:
705+ + Show Ubuntu distribution in SMTP banner.
706+ + Build-Depends on lsb-release.
707+ - debian/control:
708+ + Don't provide default-mta; in Ubuntu,
709+ we want postfix to be the default.
710+
711+ -- Artur Rona <ari-tczew@ubuntu.com> Thu, 19 Mar 2015 00:15:40 +0100
712+
713 exim4 (4.84-8) unstable; urgency=medium
714
715 * Pull 83_Remove-limit-on-remove_headers-item-size.-Bug-1533.patch and
716@@ -2147,6 +2623,15 @@ exim4 (4.84-7) unstable; urgency=medium
717
718 -- Andreas Metzler <ametzler@debian.org> Sat, 07 Feb 2015 15:12:33 +0100
719
720+exim4 (4.84-6ubuntu1) vivid; urgency=medium
721+
722+ * Resynchronise with Debian. Remaining changes:
723+ - Show Ubuntu distribution in SMTP banner.
724+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
725+ default.
726+
727+ -- Colin Watson <cjwatson@ubuntu.com> Wed, 14 Jan 2015 11:26:29 +0000
728+
729 exim4 (4.84-6) unstable; urgency=medium
730
731 * Revert init script's restart order change in 4.84-4 for the time being.
732@@ -2155,6 +2640,15 @@ exim4 (4.84-6) unstable; urgency=medium
733
734 -- Andreas Metzler <ametzler@debian.org> Sun, 21 Dec 2014 14:07:12 +0100
735
736+exim4 (4.84-5ubuntu1) vivid; urgency=medium
737+
738+ * Resynchronise with Debian. Remaining changes:
739+ - Show Ubuntu distribution in SMTP banner.
740+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
741+ default.
742+
743+ -- Colin Watson <cjwatson@ubuntu.com> Thu, 18 Dec 2014 15:26:17 +0000
744+
745 exim4 (4.84-5) unstable; urgency=medium
746
747 * 82_quoted-or-r-2047-encoded.diff pulled from upstream git (sans
748@@ -2162,6 +2656,15 @@ exim4 (4.84-5) unstable; urgency=medium
749
750 -- Andreas Metzler <ametzler@debian.org> Wed, 17 Dec 2014 19:03:39 +0100
751
752+exim4 (4.84-4ubuntu1) vivid; urgency=medium
753+
754+ * Resynchronise with Debian. Remaining changes:
755+ - Show Ubuntu distribution in SMTP banner.
756+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
757+ default.
758+
759+ -- Colin Watson <cjwatson@ubuntu.com> Tue, 02 Dec 2014 15:28:46 +0000
760+
761 exim4 (4.84-4) unstable; urgency=medium
762
763 * Unset message_prefix/message_sufix in maildrop_pipe transport. Maildrop
764@@ -2176,6 +2679,15 @@ exim4 (4.84-4) unstable; urgency=medium
765
766 -- Andreas Metzler <ametzler@debian.org> Sun, 30 Nov 2014 08:24:04 +0100
767
768+exim4 (4.84-3ubuntu1) vivid; urgency=medium
769+
770+ * Resynchronise with Debian. Remaining changes:
771+ - Show Ubuntu distribution in SMTP banner.
772+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
773+ default.
774+
775+ -- Colin Watson <cjwatson@ubuntu.com> Tue, 11 Nov 2014 13:43:35 +0000
776+
777 exim4 (4.84-3) unstable; urgency=medium
778
779 * Apply patch to Italian (it) debconf template translation, thanks to
780@@ -2205,6 +2717,24 @@ exim4 (4.84~RC2-1) unstable; urgency=medium
781
782 -- Andreas Metzler <ametzler@debian.org> Sat, 09 Aug 2014 07:42:00 +0200
783
784+exim4 (4.84~RC1-3ubuntu2) utopic; urgency=medium
785+
786+ * Rebuild for Perl 5.20.0.
787+
788+ -- Colin Watson <cjwatson@ubuntu.com> Thu, 21 Aug 2014 12:18:13 +0100
789+
790+exim4 (4.84~RC1-3ubuntu1) utopic; urgency=low
791+
792+ * Merge from Debian unstable (LP: #1351470). Remaining changes:
793+ - Show Ubuntu distribution on smtp:
794+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
795+ with Ubuntu distribution
796+ + debian/control: added lsb-release build dependency
797+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
798+ default.
799+
800+ -- Corey Bryant <corey.bryant@canonical.com> Mon, 04 Aug 2014 11:48:39 -0400
801+
802 exim4 (4.84~RC1-3) unstable; urgency=medium
803
804 * Third try. Simply comment *custom* in debian/control.
805@@ -2273,6 +2803,18 @@ exim4 (4.83~RC1-1) experimental; urgency=medium
806
807 -- Andreas Metzler <ametzler@debian.org> Thu, 29 May 2014 13:09:04 +0200
808
809+exim4 (4.82.1-2ubuntu1) utopic; urgency=low
810+
811+ * Merge from Debian unstable (LP: #1348074). Remaining changes:
812+ - Show Ubuntu distribution on smtp:
813+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
814+ with Ubuntu distribution
815+ + debian/control: added lsb-release build dependency
816+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
817+ default.
818+
819+ -- Robie Basak <robie.basak@ubuntu.com> Fri, 25 Jul 2014 15:53:09 +0000
820+
821 exim4 (4.82.1-2) unstable; urgency=high
822
823 * [87_double_expansion.diff] from upstream. Stop unwanted double expansion
824@@ -2290,6 +2832,18 @@ exim4 (4.82.1-1) unstable; urgency=high
825
826 -- Andreas Metzler <ametzler@debian.org> Wed, 28 May 2014 19:01:43 +0200
827
828+exim4 (4.82-8ubuntu1) utopic; urgency=medium
829+
830+ * Merge from Debian unstable. Remaining changes:
831+ - Show Ubuntu distribution on smtp:
832+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
833+ with Ubuntu distribution
834+ + debian/control: added lsb-release build dependency
835+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
836+ default.
837+
838+ -- Dimitri John Ledkov <xnox@ubuntu.com> Sat, 17 May 2014 01:50:20 +0100
839+
840 exim4 (4.82-8) unstable; urgency=medium
841
842 * Now that GMP has been relicensed to LGPLv3+/GPLv2+ build exim against
843@@ -2353,6 +2907,78 @@ exim4 (4.82-4) unstable; urgency=medium
844
845 -- Andreas Metzler <ametzler@debian.org> Sun, 09 Feb 2014 19:41:34 +0100
846
847+exim4 (4.82-3ubuntu2.4) trusty-security; urgency=medium
848+
849+ * SECURITY UPDATE: Buffer overflow in base64d()
850+ - debian/patches/CVE-2018-6789.patch: fix overflow in
851+ src/auths/b64decode.c.
852+ - CVE-2018-6789
853+
854+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Sat, 10 Feb 2018 14:19:43 -0500
855+
856+exim4 (4.82-3ubuntu2.3) trusty-security; urgency=medium
857+
858+ * SECURITY UPDATE: memory leak
859+ - debian/patches/CVE-2017-1000368.patch: free -p argument if
860+ allocation was required.
861+ - CVE-2017-1000368
862+
863+ -- Steve Beattie <sbeattie@ubuntu.com> Fri, 02 Jun 2017 22:44:35 -0700
864+
865+exim4 (4.82-3ubuntu2.2) trusty-security; urgency=medium
866+
867+ * SECURITY UPDATE: DKIM information leakage
868+ - debian/patches/CVE-2016-9963.patch: fix information leakage in
869+ src/dkim.c, src/transports/smtp.c.
870+ - CVE-2016-9963
871+
872+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 05 Jan 2017 08:31:06 -0500
873+
874+exim4 (4.82-3ubuntu2.1) trusty-security; urgency=medium
875+
876+ * SECURITY UPDATE: privilege escalation via crafted lookup value
877+ - debian/patches/CVE-2014-2972.patch: only expand integers for integer
878+ math once.
879+ - CVE-2014-2972
880+ * SECURITY UPDATE: privilege escalation when used with perl_startup
881+ - debian/patches/CVE-2016-1531.patch: add new add_environment and
882+ keep_environment configuration options.
883+ - debian/patches/CVE-2016-1531-2.patch: don't issue env warning if env
884+ is empty.
885+ - debian/patches/CVE-2016-1531-3.patch: store the initial working
886+ directory, expand $initial_cwd.
887+ - debian/patches/CVE-2016-1531-4.patch: delay chdir(/) until we opened
888+ the main config.
889+ - Add macros MAIN_KEEP_ENVIRONMENT and MAIN_ADD_ENVIRONMENT to set the
890+ new options. Set "keep_environment =" by default to avoid a runtime
891+ warning.
892+ - Bump exim4-config Breaks to exim4-daemon-* (<< 4.82-3ubuntu2.1).
893+ - debian/exim4-config.NEWS: Add entry to warn of potential breakage.
894+ - CVE-2016-1531
895+ * WARNING: This update may break existing installations.
896+
897+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Mon, 14 Mar 2016 12:57:00 -0400
898+
899+exim4 (4.82-3ubuntu2) trusty; urgency=medium
900+
901+ * debian/tests/control: Add missing python test dependency, as
902+ debian/tests/security calls python.
903+
904+ -- Martin Pitt <martin.pitt@ubuntu.com> Tue, 25 Feb 2014 17:33:13 +0100
905+
906+exim4 (4.82-3ubuntu1) trusty; urgency=low
907+
908+ * Merge from Debian unstable (LP: #1259620). Remaining changes:
909+ - Show Ubuntu distribution on smtp:
910+ + debian/patches/fix_smtp_banner.patch: updated SMTP banner
911+ with Ubuntu distribution
912+ + debian/control: added lsb-release build dependency
913+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
914+ default.
915+ - Build-depend on db5.3.
916+
917+ -- Yolanda Robla <yolanda.robla@canonical.com> Tue, 10 Dec 2013 17:07:20 +0000
918+
919 exim4 (4.82-3) unstable; urgency=low
920
921 * Upload to unstable.
922@@ -2433,6 +3059,21 @@ exim4 (4.82~rc1-1) experimental; urgency=low
923
924 -- Andreas Metzler <ametzler@debian.org> Sun, 29 Sep 2013 14:43:25 +0200
925
926+exim4 (4.80-9ubuntu2) trusty; urgency=low
927+
928+ * Build-depend on libdb5.3-dev, instead of libdb5.1-dev.
929+
930+ -- Dmitrijs Ledkovs <xnox@ubuntu.com> Mon, 04 Nov 2013 12:14:54 +0000
931+
932+exim4 (4.80-9ubuntu1) trusty; urgency=low
933+
934+ * Resynchronise with Debian. Remaining changes:
935+ - Don't provide default-mta; in Ubuntu, we want postfix to be the
936+ default.
937+ - Add "Ubuntu" to SMTP banner.
938+
939+ -- Colin Watson <cjwatson@ubuntu.com> Mon, 28 Oct 2013 11:55:21 -0700
940+
941 exim4 (4.80-9) unstable; urgency=low
942
943 * Upload to unstable.
944@@ -2479,6 +3120,34 @@ exim4 (4.80-8) experimental; urgency=low
945
946 -- Andreas Metzler <ametzler@debian.org> Sun, 01 Sep 2013 15:58:49 +0200
947
948+exim4 (4.80-7ubuntu4) trusty; urgency=low
949+
950+ * Rebuild for Perl 5.18.
951+
952+ -- Colin Watson <cjwatson@ubuntu.com> Wed, 23 Oct 2013 10:24:08 +0100
953+
954+exim4 (4.80-7ubuntu3) saucy; urgency=low
955+
956+ * debian/patches/fix_smtp_banner.patch: updated SMTP banner
957+ with Ubuntu distribution
958+ * debian/control: added lsb-release build dependency
959+
960+ -- Yolanda Robla <yolanda.robla@canonical.com> Tue, 18 Jun 2013 19:17:43 +0200
961+
962+exim4 (4.80-7ubuntu2) saucy; urgency=low
963+
964+ * debian/tests: Add autopkgtest.
965+
966+ -- Yolanda <yolanda.robla@canonical.com> Mon, 27 May 2013 11:31:35 +0200
967+
968+exim4 (4.80-7ubuntu1) raring; urgency=low
969+
970+ * Merge from Debian unstable (LP: #1166383). Remaining changes:
971+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
972+ we want postfix to be the default.
973+
974+ -- Robie Basak <robie.basak@canonical.com> Mon, 08 Apr 2013 18:13:15 +0100
975+
976 exim4 (4.80-7) unstable; urgency=low
977
978 * Use exim's ${quote:xxx} operator when invoking spfquery to disallow
979@@ -2498,6 +3167,14 @@ exim4 (4.80-6) unstable; urgency=low
980
981 -- Andreas Metzler <ametzler@debian.org> Wed, 21 Nov 2012 19:08:53 +0100
982
983+exim4 (4.80-5.1ubuntu1) raring; urgency=low
984+
985+ * Merge from Debian. Remaining changes:
986+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
987+ we want postfix to be the default.
988+
989+ -- Oussama Bounaim <o.bounaim@gmail.com> Sun, 11 Nov 2012 07:11:06 +0100
990+
991 exim4 (4.80-5.1) unstable; urgency=high
992
993 * Non-maintainer upload by the Security Team.
994@@ -2525,6 +3202,23 @@ exim4 (4.80-4) unstable; urgency=low
995
996 -- Andreas Metzler <ametzler@debian.org> Sat, 23 Jun 2012 18:35:03 +0200
997
998+exim4 (4.80-3ubuntu1.1) quantal-security; urgency=low
999+
1000+ * SECURITY UPDATE: arbitrary code execution via dns decode logic
1001+ - debian/patches/CVE-2012-5671.patch: adjust max length and validate
1002+ against it in src/pdkim/pdkim.h, src/dkim.c.
1003+ - CVE-2012-5671
1004+
1005+ -- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 25 Oct 2012 08:22:46 -0400
1006+
1007+exim4 (4.80-3ubuntu1) quantal; urgency=low
1008+
1009+ * Merge from Debian unstable. Remaining changes:
1010+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1011+ we want postfix to be the default.
1012+
1013+ -- Clint Byrum <clint@ubuntu.com> Thu, 14 Jun 2012 15:28:08 -0700
1014+
1015 exim4 (4.80-3) unstable; urgency=low
1016
1017 * Pull 75_openssl_sni.diff from upstream. - Segfault caused by NULL
1018@@ -2672,6 +3366,26 @@ exim4 (4.76-4) experimental; urgency=low
1019
1020 -- Andreas Metzler <ametzler@debian.org> Sat, 24 Sep 2011 18:36:08 +0200
1021
1022+exim4 (4.76-3ubuntu3) precise; urgency=low
1023+
1024+ * Rebuild for libmysqlclient transition
1025+
1026+ -- Clint Byrum <clint@ubuntu.com> Wed, 23 Nov 2011 23:29:35 -0800
1027+
1028+exim4 (4.76-3ubuntu2) precise; urgency=low
1029+
1030+ * Rebuild for Perl 5.14.
1031+
1032+ -- Colin Watson <cjwatson@ubuntu.com> Wed, 16 Nov 2011 01:22:39 +0000
1033+
1034+exim4 (4.76-3ubuntu1) precise; urgency=low
1035+
1036+ * Merge from debian unstable. Remaining changes:
1037+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1038+ we want postfix to be the default.
1039+
1040+ -- Stéphane Graber <stgraber@ubuntu.com> Thu, 20 Oct 2011 11:29:07 -0400
1041+
1042 exim4 (4.76-3) unstable; urgency=low
1043
1044 * [exim4-base.cron.daily] Correct invocation of mail(1), options need to be
1045@@ -2692,6 +3406,14 @@ exim4 (4.76-3) unstable; urgency=low
1046
1047 -- Andreas Metzler <ametzler@debian.org> Sun, 18 Sep 2011 11:49:13 +0200
1048
1049+exim4 (4.76-2ubuntu1) oneiric; urgency=low
1050+
1051+ * Merge from debian unstable. Remaining changes:
1052+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1053+ we want postfix to be the default.
1054+
1055+ -- Stéphane Graber <stgraber@ubuntu.com> Mon, 30 May 2011 17:48:56 -0400
1056+
1057 exim4 (4.76-2) unstable; urgency=low
1058
1059 * debian/rules: Remove test/ and test-stamp on clean.
1060@@ -2704,6 +3426,14 @@ exim4 (4.76-2) unstable; urgency=low
1061
1062 -- Andreas Metzler <ametzler@debian.org> Sun, 29 May 2011 18:21:03 +0200
1063
1064+exim4 (4.76-1ubuntu1) oneiric; urgency=low
1065+
1066+ * Merge from debian unstable. Remaining changes (LP: #779391):
1067+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1068+ we want postfix to be the default.
1069+
1070+ -- Stéphane Graber <stgraber@ubuntu.com> Mon, 23 May 2011 12:37:30 -0400
1071+
1072 exim4 (4.76-1) unstable; urgency=low
1073
1074 * New upstream version.
1075@@ -2750,6 +3480,14 @@ exim4 (4.75-3) unstable; urgency=high
1076
1077 -- Andreas Metzler <ametzler@debian.org> Fri, 06 May 2011 20:08:51 +0200
1078
1079+exim4 (4.75-2ubuntu1) oneiric; urgency=low
1080+
1081+ * Merge from debian unstable. Remaining changes:
1082+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1083+ we want postfix to be the default.
1084+
1085+ -- Stéphane Graber <stgraber@ubuntu.com> Fri, 06 May 2011 14:51:28 -0400
1086+
1087 exim4 (4.75-2) unstable; urgency=low
1088
1089 * clamav socket on Debian is clamd:/var/run/clamav/clamd.ctl, fix
1090@@ -2792,6 +3530,24 @@ exim4 (4.74-2) unstable; urgency=low
1091
1092 -- Andreas Metzler <ametzler@debian.org> Thu, 24 Feb 2011 19:02:07 +0100
1093
1094+exim4 (4.74-1ubuntu1) natty; urgency=low
1095+
1096+ * Merge from debian experimental. Remaining changes: (LP: #713855)
1097+ - debian/patches/71_exiq_grep_error_on_messages_without_size.patch:
1098+ + Improve handling of broken messages when "exim4 -bp" (mailq)
1099+ reports lines without size info. (Closes: #528625)
1100+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1101+ we want postfix to be the default.
1102+ - debian/{control,rules}: Add and enable hardened build for PIE.
1103+ (Closes: #542726)
1104+ * Update 71_exiq_grep_error_on_messages_without_size.patch to get way
1105+ which upstream has fixed it. Probably it can be dropped with next
1106+ upstream release.
1107+ * This upload fixes CVE: (LP: #708023)
1108+ - CVE-2011-0017
1109+
1110+ -- Artur Rona <ari-tczew@ubuntu.com> Wed, 09 Feb 2011 21:31:35 +0100
1111+
1112 exim4 (4.74-1) experimental; urgency=low
1113
1114 * 4.74 release, should build on hurd again.
1115@@ -2817,6 +3573,20 @@ exim4 (4.74~rc2-1) experimental; urgency=low
1116
1117 -- Andreas Metzler <ametzler@debian.org> Sun, 23 Jan 2011 14:02:36 +0100
1118
1119+exim4 (4.73~rc1-1ubuntu1) natty; urgency=low
1120+
1121+ * Merge from debian unstable. Remaining changes: (LP: #697934)
1122+ - debian/patches/71_exiq_grep_error_on_messages_without_size.patch:
1123+ + Improve handling of broken messages when "exim4 -bp" (mailq)
1124+ reports lines without size info.
1125+ - debian/control: Don't declare a Provides: default-mta; in Ubuntu,
1126+ we want postfix to be the default.
1127+ - debian/{control,rules}: Add and enable hardened build for PIE.
1128+ (Closes: #542726)
1129+ * Drop B-D on libmysqlclient15-dev, resolved in Debian.
1130+
1131+ -- Artur Rona <ari-tczew@ubuntu.com> Tue, 28 Dec 2010 22:20:17 +0100
1132+
1133 exim4 (4.73~rc1-1) experimental; urgency=low
1134
1135 * New upstream release candidate.
1136@@ -2912,6 +3682,20 @@ exim4 (4.72-3) unstable; urgency=low
1137
1138 -- Andreas Metzler <ametzler@debian.org> Sun, 26 Dec 2010 15:13:08 +0100
1139
1140+exim4 (4.72-2ubuntu1) natty; urgency=low
1141+
1142+ * Merge from debian unstable. Remaining changes: (LP: #671615)
1143+ - debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
1144+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
1145+ lines without size info.
1146+ - Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
1147+ the default.
1148+ - debian/control: Change build dependencies to MySQL 5.1.
1149+ - debian/{control,rules}: add and enable hardened build for PIE
1150+ (Closes: #542726).
1151+
1152+ -- Artur Rona <ari-tczew@ubuntu.com> Fri, 05 Nov 2010 21:05:47 +0100
1153+
1154 exim4 (4.72-2) unstable; urgency=low
1155
1156 [ Marc Haber ]
1157@@ -2935,6 +3719,20 @@ exim4 (4.72-2) unstable; urgency=low
1158
1159 -- Andreas Metzler <ametzler@debian.org> Sat, 30 Oct 2010 13:38:26 +0200
1160
1161+exim4 (4.72-1ubuntu1) maverick; urgency=low
1162+
1163+ * Merge with Debian unstable (LP: #609620). Remaining changes:
1164+ + debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
1165+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
1166+ lines without size info.
1167+ + Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
1168+ the default.
1169+ + debian/control: Change build dependencies to MySQL 5.1.
1170+ + debian/{control,rules}: add and enable hardened build for PIE
1171+ (Closes: #542726).
1172+
1173+ -- Artur Rona <ari-tczew@tlen.pl> Sun, 25 Jul 2010 02:00:42 +0200
1174+
1175 exim4 (4.72-1) unstable; urgency=low
1176
1177 * New upstream release. (Identical to the git snapshot previously
1178@@ -2986,6 +3784,20 @@ exim4 (4.71-4) unstable; urgency=low
1179
1180 -- Andreas Metzler <ametzler@debian.org> Thu, 25 Mar 2010 17:34:30 +0100
1181
1182+exim4 (4.71-3ubuntu1) lucid; urgency=low
1183+
1184+ * Merge with Debian unstable (lp: #501657). Remaining changes:
1185+ + debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
1186+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
1187+ lines without size info.
1188+ + Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
1189+ the default.
1190+ + debian/control: Change build dependencies to MySQL 5.1.
1191+ + debian/{control,rules}: add and enable hardened build for PIE
1192+ (Debian bug 542726).
1193+
1194+ -- Michael Bienia <geser@ubuntu.com> Fri, 01 Jan 2010 16:28:19 +0100
1195+
1196 exim4 (4.71-3) unstable; urgency=low
1197
1198 * exim4-base.cron.daily: Do not run exim_tidydb on Berkeley DB logfiles.
1199@@ -3100,6 +3912,35 @@ exim4 (4.70~cvs+20091017-1) experimental; urgency=low
1200
1201 -- Andreas Metzler <ametzler@debian.org> Sat, 17 Oct 2009 14:26:54 +0200
1202
1203+exim4 (4.69-11ubuntu4) karmic; urgency=low
1204+
1205+ * debian/{control,rules}: add and enable hardened build for PIE
1206+ (Debian bug 542726).
1207+
1208+ -- Kees Cook <kees@ubuntu.com> Thu, 20 Aug 2009 17:33:26 -0700
1209+
1210+exim4 (4.69-11ubuntu3) karmic; urgency=low
1211+
1212+ * debian/control: Change build dependencies to MySQL 5.1.
1213+
1214+ -- Mathias Gug <mathiaz@ubuntu.com> Mon, 17 Aug 2009 17:57:26 -0400
1215+
1216+exim4 (4.69-11ubuntu2) karmic; urgency=low
1217+
1218+ * Don't declare a Provides: default-mta; in Ubuntu, we want postfix to be
1219+ the default.
1220+
1221+ -- Steve Langasek <steve.langasek@ubuntu.com> Wed, 03 Jun 2009 15:39:14 +0000
1222+
1223+exim4 (4.69-11ubuntu1) karmic; urgency=low
1224+
1225+ * Merge from debian unstable (LP: #375923), remaining changes:
1226+ - debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
1227+ Improve handling of broken messages when "exim4 -bp" (mailq) reports
1228+ lines without size info
1229+
1230+ -- Thierry Carrez <thierry.carrez@ubuntu.com> Wed, 13 May 2009 12:15:29 +0200
1231+
1232 exim4 (4.69-11) unstable; urgency=medium
1233
1234 * Build-Depend on lynx-cur|lynx instead of lynx. (lynx is just a dummy
1235@@ -3157,6 +3998,15 @@ exim4 (4.69-10) unstable; urgency=low
1236
1237 -- Andreas Metzler <ametzler@debian.org> Sat, 02 May 2009 09:05:56 +0200
1238
1239+exim4 (4.69-9ubuntu1) jaunty; urgency=low
1240+
1241+ [ Daniel van Eeden <launchpad@myname.nl> ]
1242+ * debian/patches/71_exiq_grep_error_on_messages_without_size.dpatch:
1243+ Improve handling of broken messages when "exim4 -bp" (mailq) reports lines
1244+ w/o size info, LP: #18194
1245+
1246+ -- Dustin Kirkland <kirkland@ubuntu.com> Wed, 11 Feb 2009 06:43:52 -0600
1247+
1248 exim4 (4.69-9) unstable; urgency=medium
1249
1250 * [update-exim4.conf]: Use POSIX character classes [:alnum:] or explicit
1251diff --git a/debian/control b/debian/control
1252index 8cb90e1..228ce14 100644
1253--- a/debian/control
1254+++ b/debian/control
1255@@ -4,7 +4,8 @@
1256 Source: exim4
1257 Section: mail
1258 Priority: standard
1259-Maintainer: Exim4 Maintainers <pkg-exim4-maintainers@lists.alioth.debian.org>
1260+Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
1261+XSBC-Original-Maintainer: Exim4 Maintainers <pkg-exim4-maintainers@lists.alioth.debian.org>
1262 Uploaders:
1263 Andreas Metzler <ametzler@debian.org>,
1264 Marc Haber <mh+debian-packages@zugschlus.de>
1265@@ -37,7 +38,8 @@ Build-Depends:
1266 libxt-dev,
1267 lynx,
1268 po-debconf,
1269- xsltproc
1270+ xsltproc,
1271+ lsb-release
1272
1273 Package: exim4-base
1274 Architecture: any
1275diff --git a/debian/patches/fix_smtp_banner.patch b/debian/patches/fix_smtp_banner.patch
1276new file mode 100644
1277index 0000000..615eb5a
1278--- /dev/null
1279+++ b/debian/patches/fix_smtp_banner.patch
1280@@ -0,0 +1,53 @@
1281+Description: Add EXIM_DISTRIBUTION var to display it on the SMTP banner
1282+Origin: https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-server-app-banner-updates
1283+Author: Yolanda Robla <yolanda.robla@canonical.com>
1284+Forwarded: https://salsa.debian.org/exim-team/exim4/merge_requests/2
1285+Last-Update: 2018-07-03
1286+
1287+--- a/src/globals.c
1288++++ b/src/globals.c
1289+@@ -1443,7 +1443,7 @@ int smtp_accept_queue_per_connection = 10;
1290+ int smtp_accept_reserve = 0;
1291+ uschar *smtp_active_hostname = NULL;
1292+ uschar *smtp_banner = US"$smtp_active_hostname ESMTP "
1293+- "Exim $version_number $tod_full"
1294++ "Exim $version_number " EXIM_DISTRIBUTION " $tod_full"
1295+ "\0<---------------Space to patch smtp_banner->";
1296+ int smtp_ch_index = 0;
1297+ uschar *smtp_cmd_argument = NULL;
1298+--- a/src/config.h.defaults
1299++++ b/src/config.h.defaults
1300+@@ -224,4 +224,6 @@ for EXIM_ARITH_MAX and _MIN in OS/oh.h-FOO */
1301+ #define SC_EXIM_ARITH "%" SCNi64 /* scanf incl. 0x prefix */
1302+ #define SC_EXIM_DEC "%" SCNd64 /* scanf decimal */
1303+
1304++#define EXIM_DISTRIBUTION
1305++
1306+ /* End of config.h.defaults */
1307+--- a/scripts/Configure-config.h
1308++++ b/scripts/Configure-config.h
1309+@@ -23,6 +23,12 @@
1310+ if [ "$1" != "" ] ; then MAKE=$1 ; fi
1311+ if [ "$MAKE" = "" ] ; then MAKE=make ; fi
1312+
1313++# exporting distribution to use it in smtp banner
1314++if test -x /usr/bin/lsb_release && lsb_release -si; then
1315++ export EXIM_DISTRIBUTION=\"$(lsb_release -si)\"
1316++else
1317++ export EXIM_DISTRIBUTION=\"\"
1318++fi
1319+ $MAKE buildconfig || exit 1
1320+
1321+ # BEWARE: tab characters needed in the following sed command. They have had
1322+--- a/src/exim.h
1323++++ b/src/exim.h
1324+@@ -597,5 +597,9 @@ default to EDQUOT if it exists, otherwise ENOSPC. */
1325+ # define EXIM_GROUPLIST_SIZE NGROUPS_MAX
1326+ #endif
1327+
1328++#ifndef EXIM_DISTRIBUTION
1329++ #define EXIM_DISTRIBUTION ""
1330++#endif
1331++
1332+ #endif
1333+ /* End of exim.h */
1334diff --git a/debian/patches/series b/debian/patches/series
1335index dcf16f9..1c93a55 100644
1336--- a/debian/patches/series
1337+++ b/debian/patches/series
1338@@ -39,3 +39,4 @@
1339 75_28_Fix-logging-with-build-time-config-and-empty-element.patch
1340 78_01-Command-line-option-for-no-notifier-socket.-Bug-2616.patch
1341 90_localscan_dlopen.dpatch
1342+fix_smtp_banner.patch

Subscribers

People subscribed via source and target branches