-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 22 Nov 2019 13:44:47 +0100 Source: mailutils Architecture: source Version: 1:3.5-4 Distribution: buster Urgency: medium Maintainer: Jordi Mallach <jordi@debian.org> Changed-By: Jordi Mallach <jordi@debian.org> Closes: 944265 Changes: mailutils (1:3.5-4) buster; urgency=medium . * [CVE-2019-18862] Add patch from Sergey to have maidag drop setuid privileges for all delivery operations but mda (closes: #944265). Note that this security issue only affects systems that install maidag setuid, which is not the default in Debian. Checksums-Sha1: 7ccbc8d37e7ae89637c910086416fdfa98f931a1 2818 mailutils_3.5-4.dsc 02894e0e9afd31b08da2aeb8a3ac0d0a8c8a5564 30068 mailutils_3.5-4.debian.tar.xz 0065aa8048504bd9b13a6cd66431767089af6613 13911 mailutils_3.5-4_amd64.buildinfo Checksums-Sha256: 597753fc4d664962c3459646a5ef18f443e7c97df19a9be67b0f00d443de680b 2818 mailutils_3.5-4.dsc 756364374e3fd6b3b63836e5e05b273377f03d63967b0c588c00fb6ff1588edd 30068 mailutils_3.5-4.debian.tar.xz 46647471741e33e0bd6e490a707959be042cd5500d52e95cd5548191612fd3f0 13911 mailutils_3.5-4_amd64.buildinfo Files: 14174a5958fd81b617874a4eaa55bb5e 2818 mail optional mailutils_3.5-4.dsc 676d1e41c0d69bb431e7758d4cf67d87 30068 mail optional mailutils_3.5-4.debian.tar.xz 6a48f487cafe8497ab912ca739952f13 13911 mail optional mailutils_3.5-4_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE6BdUhsApKYN8KGoWJVAvb8vjywQFAl3cX6kACgkQJVAvb8vj ywRTQhAAmy8umQXABHczwZCyI52WiVH8McLmcXq5yPfKQzix9qKwxufo8Be1uEa0 Wq6L7rKPGT0jIIVeD3Ry7SX2fVWuhXQ0udpjYVCtVXo7RSGREmDeJSxLoDuE36EK f0QfI3PY72BwxyRKs8yqf4v7Du86BwYMy2Mi6pKzgkggUX8+0JMJxGz02hBxFCpF olm6wKWYoLT3490Xu+oBgxvMmbCaZB9SDV7AMGqRCFuG7htqKMCdTSgwuuOZ42M+ gGlJXNchIrwPgmnPg2JxwLwSwWYUeCr762HqNeCXh52GACEvBL4672US12q7KGKa oV0vWVZzBigEOUH7JXFJcCmh2Cev//t7PVAC8qwGQcKlxsbwY0q06nKyhSNK3eMD N1Oo97zS9VA0zpV/BBgXXMPRXslywPuDplY4Wp/xC+1cHMUwvjVk7nCGikYe7CMJ s1BlKMVhWZDu23FjA4iz6D25odxvCc6iUaZ5yEBT2YspNcTtvEZw9T1RI5vA9goV D7bBkfoPphxo2BpDo/RA1ramSSxlJNLmUfx84SSO8a6KW4n6AVU9+3C8MHlUEwsL o83iiXDsaWwYExbNBKoOOYsOBUFsonu3F6XjcNvHjoyNvdMeCjHr8QXgP9I45l26 ml3NE0HDRhBH2Oo4mwyTr8Kc/JIOJOLF7OEOIvonePu7IOoYk88= =3KDq -----END PGP SIGNATURE-----
