-
exim4 (4.89-5ubuntu1.3) artful-security; urgency=medium
* SECURITY UPDATE: Buffer overflow in base64d()
- debian/patches/CVE-2018-6789.patch: fix overflow in src/base64.c.
- CVE-2018-6789
-- Marc Deslauriers <email address hidden> Sat, 10 Feb 2018 14:12:27 -0500
-
exim4 (4.89-5ubuntu1.2) artful-security; urgency=medium
* SECURITY UPDATE: stack-exhaustion remote DoS
- debian/patches/CVE-2017-16944.patch: do not treat the first lonely
dot special in src/receive.c, src/smtp_in.c.
- CVE-2017-16944
-- Marc Deslauriers <email address hidden> Wed, 29 Nov 2017 08:59:31 -0500
-
exim4 (4.89-5ubuntu1.1) artful-security; urgency=medium
* SECURITY UPDATE: remote code execution via use-after-free
- debian/patches/CVE-2017-16943.patch: avoid release of store if there
have been later allocations in src/receive.c.
- CVE-2017-16943
-- Marc Deslauriers <email address hidden> Mon, 27 Nov 2017 07:37:47 -0500
-
exim4 (4.89-5ubuntu1) artful; urgency=medium
* Merge from Debian testing.
Remaining changes:
- Show Ubuntu distribution in SMTP banner
- Build-Depends on lsb-release to detect Distribution.
- d/p/fix_smtp_banner.patch: Show Ubuntu distribution in SMTP banner.
-- Christian Ehrhardt <email address hidden> Wed, 16 Aug 2017 15:42:47 +0200
-
exim4 (4.89-3ubuntu2) artful; urgency=medium
* No-change rebuild for perl 5.26.0.
-- Matthias Klose <email address hidden> Wed, 26 Jul 2017 20:02:24 +0000
-
exim4 (4.89-3ubuntu1) artful; urgency=medium
* Merge from Debian. Remaining changes:
- Show Ubuntu distribution in SMTP banner.
- Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
exim4 (4.89-3) unstable; urgency=high
* Re-upload to unstable.
exim4 (4.89-2+deb9u1) stretch-security; urgency=medium
* CVE-2017-100369
-- Marc Deslauriers <email address hidden> Tue, 27 Jun 2017 10:20:42 -0400
-
exim4 (4.89-2ubuntu1) artful; urgency=medium
* Merge from Debian testing.
Remaining changes:
+ Show Ubuntu distribution in SMTP banner.
+ Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
-- Christian Ehrhardt <email address hidden> Thu, 01 Jun 2017 11:58:00 +0200
-
exim4 (4.88-5ubuntu1) zesty; urgency=medium
* Merge from Debian unstable.
Version 4.88 fixes CVE-2016-9963 (LP: #1654750) and symlink
local root escalation (LP: #1580454)
Remaining changes:
+ Show Ubuntu distribution in SMTP banner.
+ Build-Depends on lsb-release (needed for the Ubuntu SMTP banner patch)
-- Christian Ehrhardt <email address hidden> Tue, 24 Jan 2017 10:15:09 +0100
