-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 13 May 2020 18:18:26 +0200 Source: exim4 Architecture: source Version: 4.89-2+deb9u7 Distribution: stretch-security Urgency: high Maintainer: Exim4 Maintainers <pkg-exim4-maintainers@lists.alioth.debian.org> Changed-By: Andreas Metzler <ametzler@debian.org> Changes: exim4 (4.89-2+deb9u7) stretch-security; urgency=high . * Fix authentication bypass in SPA authenticator due to out-of-bound buffer read. https://bugs.exim.org/show_bug.cgi?id=2571 CVE-2020-12783 Checksums-Sha1: 0eccda65013a3ebc0ad358abbbb3ae9ba04f8485 3054 exim4_4.89-2+deb9u7.dsc 2b0d3e82a2d3cd578be8ea43579eae1ee4e1df1c 996 exim4_4.89.orig.tar.xz.asc c1251609944d323c1059c7223b9c350b5e2655d0 455052 exim4_4.89-2+deb9u7.debian.tar.xz Checksums-Sha256: 1f84c5b2e4d6db74fcb13c99674d3635797b2e7681923f8b39cb04b5aaafa87d 3054 exim4_4.89-2+deb9u7.dsc 8bc441fd562cdb322b5180f010ff2f2308d121afe6118b27f316f981873aa2cc 996 exim4_4.89.orig.tar.xz.asc 22ff2913b872e732c344ae86b42b5839799cf4cf234eb0a750bb14e9e3e979ae 455052 exim4_4.89-2+deb9u7.debian.tar.xz Files: 5bbe2a21d781901b89793b78d0b1ced8 3054 mail standard exim4_4.89-2+deb9u7.dsc fa05d033ee4652d9ff585f58477c8ab4 996 mail standard exim4_4.89.orig.tar.xz.asc a1874852389e4e50471e7417acc09c18 455052 mail standard exim4_4.89-2+deb9u7.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAl69eLYACgkQpU8BhUOC FIRr7w//V4zLrfAADPcNTYL17oIrzrkTh1HyIP7OEERhKuydQJ2CJmsI/36GK10S AFFmydWr20FYAKmys+ouPA2AHQ/izR7NXuYg/hK5U5WzUdPCFamQ0UM3eYJaTxaN LKYergYJ1D1UVYaHgyY+v45+PaPeLrmt6ttMIE/lFn41m/rlQjj1acwtGzsNqNZb sCdm8fMAdKV3wti/Sa5xVb7lANecpWpRDJyRgHv8Cwo59SC4TsJsIX9Zu1n3KIlG seL1bX9iuKaKaC/usgQzjYvYBFnaapQogcWQzIIWcaEU1ZY+7I819CBF/VR7GfC7 PxrVZU3+iqIjiIykbS/NfaLJ/5nuTnmyqKpAx5HD95LjZWj6yot5Ruvt6+WGAryy 2VaX1xEKU4S0mM8UHRY/3QiqmvhkwKzSvgeRO9Q8+JcfgCTBHbn4SV6jELQDVrRc JJz1kME6HBAiqy4aUZgPQFR/ima33qfJt/Q9l4Fy4xK5EAwrT+WmSsTxkPq580QQ +yHWWq/bPgnus5/zDR4UObXLumr1bxAM6nhe+TRvB2g6kyYckFxOAtP0aXo1RRY6 fU6B7s6ja/7JhWIq0lzyWh58IyppV03VdAXJOzGQdLi1lZ8BGXCCwVX52i7452S7 8PIux8ED7efn4DvuqmLU1eQPtz0ydPubSmZnqbUmDIlchBHXZt8= =6pRx -----END PGP SIGNATURE-----