-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 18 Dec 2016 19:24:20 +0100 Source: exim4 Binary: exim4-base exim4-config exim4-daemon-light exim4 exim4-daemon-heavy eximon4 exim4-dbg exim4-daemon-light-dbg exim4-daemon-heavy-dbg exim4-dev Architecture: source amd64 all Version: 4.88~RC6-1~bpo8+1 Distribution: jessie-backports Urgency: medium Maintainer: Exim4 Maintainers <pkg-exim4-maintainers@lists.alioth.debian.org> Changed-By: Andreas Metzler <ametzler@debian.org> Description: exim4 - metapackage to ease Exim MTA (v4) installation exim4-base - support files for all Exim MTA (v4) packages exim4-config - configuration for the Exim MTA (v4) exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-heavy-dbg - debugging symbols for the Exim MTA "heavy" daemon exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-daemon-light-dbg - debugging symbols for the Exim MTA "light" daemon exim4-dbg - debugging symbols for the Exim MTA (utilities) exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Closes: 823855 832442 834699 839978 840355 Changes: exim4 (4.88~RC6-1~bpo8+1) jessie-backports; urgency=medium . * Rebuild for jessie-backports. * b-d on libmysqlclient-dev | libmysqlclient15-dev instead of default-libmysqlclient-dev. . exim4 (4.88~RC6-1) unstable; urgency=low . * New upstream version. . exim4 (4.88~RC5-1) unstable; urgency=low . * New upstream version. + Drop 75_01-Ensure-socket-is-nonblocking-before-draining.diff. . exim4 (4.88~RC4-2) unstable; urgency=low . * Pull 75_01-Ensure-socket-is-nonblocking-before-draining.diff from upstream GIT to fix exim bug 1914 (exim doesn't close connection after quit. * Upload to unstable. . exim4 (4.88~RC4-1) experimental; urgency=low . * New upstream version. . exim4 (4.88~RC3-1) experimental; urgency=medium . * New upstream version. Drop 75_01-Fix-check-for-commandline-macro-definition.patch 75_02_Fix-bug-with-aborted-server-TLS-connection-under-Gnu.patch. . exim4 (4.88~RC2-3) experimental; urgency=medium . * Fix thinko in exim4-daemon-*.postinst. Do not regenerate gnutls params on every upgrade. * 75_02_Fix-bug-with-aborted-server-TLS-connection-under-Gnu.patch: Fix longstanding bug with aborted TLS server connection handling. Under GnuTLS, when a session startup failed (eg because the client disconnected) Exim did stdio operations after fclose. This was exposed by a recent change which nulled out the file handle after the fclose. . exim4 (4.88~RC2-2) experimental; urgency=medium . * 75_01-Fix-check-for-commandline-macro-definition.patch - Fix permission problems on commandline mail submission. Closes: #840355 . exim4 (4.88~RC2-1) experimental; urgency=low . * New upstream version. + Changed default Diffie-Hellman parameters to be Exim-specific, created by Phil Pennock. Added RFC7919 DH primes as an alternative. Closes: #839978 * Set tls_dhparam = historic to use site-specific DH parameters. * Again, ship /usr/share/exim4/exim4_refresh_gnutls-params, use it in -daemon postinst. * Initialize /var/spool/exim4/gnutls-params-2048 at daemon install, either by running certtool or by installing /usr/share/exim4/gnutls-params-2048. Do not try to use openssl dhparam, it takes too long. . exim4 (4.88~RC1-1) experimental; urgency=low . * Drop reference to removed (in 4.80-7) "what"-option in init script usage message. (Thanks, Calum Mackay!) Closes: #823855 * 92_CVE-2016-1238.diff: eximstats: Remove . from @INC [CVE-2016-1238] Closes: #832442 * [lintian] update-exim4.conf.8 - fix typo. * [lintian] Drop unused override binaries-have-file-conflict. * B-d on default-libmysqlclient-dev. * New upstream version. + Refresh patches: 31_eximmanpage.dpatch 32_exim4.dpatch 35_install.dpatch 50_localscan_dlopen.dpatch + Drop superfluous patches. 71_01_configure.default-nice-message-for-overlong-lines-Bu.patch 71_02_Delivery-quieten-smtp-transport-conn-reuse-vs.-deliv.patch 71_03_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch 71_04_Avoid-exposing-passwords-in-log-on-failing-ldap-look.patch + Fix crash in VRFY handling when handed an unqualified name (lacking @domain). Apply the same qualification processing as RCPT. Closes: #834699 + Fix a possible security hole, wherein a process operating with the Exim UID can gain a root shell. Credit to http://www.halfdog.net/ for discovery and writeup. LP: #1580454 * [lintian] exim4-config_files.5 - fix typo. Checksums-Sha1: 29ea6beed26787140d41020b9f2f1780eda47720 2837 exim4_4.88~RC6-1~bpo8+1.dsc e5e160d32a983292fce4c3c214395d9371a75743 444348 exim4_4.88~RC6-1~bpo8+1.debian.tar.xz 461d2245bcd122135b3313a420374f3ccde16fa0 1092972 exim4-base_4.88~RC6-1~bpo8+1_amd64.deb 884f526340529f4641550bc3f88125092143f593 542086 exim4-daemon-light_4.88~RC6-1~bpo8+1_amd64.deb a7ed419cd47ae71c204c771e52616c1c06e2ce1b 591300 exim4-daemon-heavy_4.88~RC6-1~bpo8+1_amd64.deb decfe88c77abc43214aeffb9884a68a2547ddae0 128928 eximon4_4.88~RC6-1~bpo8+1_amd64.deb 6046a192fce7de8d65cd10022137c9a60bff92f0 341006 exim4-dbg_4.88~RC6-1~bpo8+1_amd64.deb 82f622b19e47a02bcfa289287546d9ec620dbe96 978300 exim4-daemon-light-dbg_4.88~RC6-1~bpo8+1_amd64.deb d5931924534171f6a0388643d1ec2a6d44751d68 1094654 exim4-daemon-heavy-dbg_4.88~RC6-1~bpo8+1_amd64.deb 4cfb5760663a5d0db80af0ace815a0538cc393cd 97382 exim4-dev_4.88~RC6-1~bpo8+1_amd64.deb 766bb22c8e68b012a37b92bfdc5fb44d4128a85f 409230 exim4-config_4.88~RC6-1~bpo8+1_all.deb ff3bd3bd66dad7aa1725ee225096a12c0eb9ac4c 8572 exim4_4.88~RC6-1~bpo8+1_all.deb Checksums-Sha256: abebe0ec31791bd803e4ac7ef3a23cee47a2f13fb591e5cd3769b2760e13eebb 2837 exim4_4.88~RC6-1~bpo8+1.dsc 1f3d15b99acff0209d884fb9d2b6f2795b8705d6cf2af7b1d113655baed200ad 444348 exim4_4.88~RC6-1~bpo8+1.debian.tar.xz 596df73449fac038f59b3bbbadbeab56c972aaa14a0d5e8b370fb13516a59c53 1092972 exim4-base_4.88~RC6-1~bpo8+1_amd64.deb 0484cb3e5f7137a44f8da721cb0e47d2c8c718dc7c1eb4090096aae2897c4e55 542086 exim4-daemon-light_4.88~RC6-1~bpo8+1_amd64.deb a75707c3f5a645bac6764b7f9ec340890671ba76138ea4fa12d98bf411fc9cb8 591300 exim4-daemon-heavy_4.88~RC6-1~bpo8+1_amd64.deb 8933a03b9fad619368cb3a218b1f3475eaed21f1b5515db4e6fd509a2f680dd4 128928 eximon4_4.88~RC6-1~bpo8+1_amd64.deb 0b607997039e533b7d3c94c488ec2ba976a9caa15f0c34da294bff4dfb0c9a68 341006 exim4-dbg_4.88~RC6-1~bpo8+1_amd64.deb 9a5620e0683d67a21a0e308a178f6936fdffc171e433000ad69d0ce9d28d5f0d 978300 exim4-daemon-light-dbg_4.88~RC6-1~bpo8+1_amd64.deb 42bef27dcea2164129dd2a047e99477ecbd06489697afc49ecead8ceba8e3272 1094654 exim4-daemon-heavy-dbg_4.88~RC6-1~bpo8+1_amd64.deb 9ff5177cae925728a89c18d33929d7001130bfa01b526147733c7a56c801bb16 97382 exim4-dev_4.88~RC6-1~bpo8+1_amd64.deb 95f7a794a63bb38ffefbdc5168a3ba999718c71bbeba1416c1b1f4714bae8c2e 409230 exim4-config_4.88~RC6-1~bpo8+1_all.deb 2594fe8479d0b336958d2389fe977521f42ba36c3ce8569e35cabd4363944a69 8572 exim4_4.88~RC6-1~bpo8+1_all.deb Files: c3405a2932f3bfc6179ab6d24d111f8f 2837 mail standard exim4_4.88~RC6-1~bpo8+1.dsc 8035c620d9d66f9bee2bbfbf7be44cef 444348 mail standard exim4_4.88~RC6-1~bpo8+1.debian.tar.xz d7119783601b318da0555f4420ffc7fb 1092972 mail standard exim4-base_4.88~RC6-1~bpo8+1_amd64.deb c99e34a7b1a37bcf507b3dc90d83abd7 542086 mail standard exim4-daemon-light_4.88~RC6-1~bpo8+1_amd64.deb 383cf4ff4d027f17a9d7b190ab355563 591300 mail optional exim4-daemon-heavy_4.88~RC6-1~bpo8+1_amd64.deb e8de1804af9c87a7c48c3ef57ebf72f1 128928 mail optional eximon4_4.88~RC6-1~bpo8+1_amd64.deb c9f87fde9d2911ac6d407ec87fa6edea 341006 debug extra exim4-dbg_4.88~RC6-1~bpo8+1_amd64.deb 2e488b0f39babc360eed6cabc14fe0e2 978300 debug extra exim4-daemon-light-dbg_4.88~RC6-1~bpo8+1_amd64.deb 36fa19c407014136994a2909fa0cd8d5 1094654 debug extra exim4-daemon-heavy-dbg_4.88~RC6-1~bpo8+1_amd64.deb 9e62c6ceab2130fba6ae15eb80cf31e9 97382 mail extra exim4-dev_4.88~RC6-1~bpo8+1_amd64.deb 80bdfcb8e8894c57ee5b04e42d435370 409230 mail standard exim4-config_4.88~RC6-1~bpo8+1_all.deb 261d5eb5ad194f4e3ed1dc46ca7789a6 8572 mail standard exim4_4.88~RC6-1~bpo8+1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAlhW1XMACgkQpU8BhUOC FIQjNg/6Am2EtPbuqs45rYuOEQyw1MujUWH0NkOgWHpmbNFKtEbZlA4lgHo+BTxB 0012W0KDqcGclLQmPHG9rkEsoV8DYxSchsmyo+dXfWC26d2KVKl5ucEXvf/26qdr OHqbF409tTO4C2DDi0X9kzYmN9JLOYW9qM0HW0zMEFMlVIGRGBUgS9rIrCeIidw2 3pWfwT263sOaJzf1GvqxF8ujOGfxhTW8mJldX3H5Wb8lHDK/Qq75Fm35uAO6mpGp hNunIWEsOAO5tMPXjVLd7+wua86etQk82+TPSb3bvnG95wlogavMoJZTdgH8dmoj kPo+1yYG+4z923/asUME/gxWjjUIcae9xqVJKuIhoG5CrKo//NylWd/RJAuPQmK1 S7pAxQqJkDoTAOz8okOhmusRJY9BpuRO2FXfRynLnUtXiWsCAcW5Aw4KMEoEc8S9 jsNNn1Gp/0LkmzJP1cJWVcINY2uG56qQTo7FfgPrSyG7otLAaI/E4LM8TgL6y5cK XnORzTSyvSdfDvjPtY0J7p2+SDb/BtY+t7nK0xdMOXzRJ5BWaNX7xF0ax1ceZVdY NQy11qOjHIffHacBZyX8X5OS1NXqLpmIPq4TJhd7F5M41zULVxAvP5cj6INL6WCh W9vksOSyFDbgV87O+sYhEq96VbCNFOyB179ppKEYxAx86umCWHE= =j33x -----END PGP SIGNATURE-----