Change logs for exim4 source package in Wily

  • exim4 (4.86-3ubuntu1.1) wily-security; urgency=medium
    
      * SECURITY UPDATE: privilege escalation when used with perl_startup
        - debian/patches/CVE-2016-1531.patch: add new add_environment and
          keep_environment configuration options.
        - debian/patches/CVE-2016-1531-2.patch: don't issue env warning if env
          is empty.
        - debian/patches/CVE-2016-1531-3.patch: store the initial working
          directory, expand $initial_cwd.
        - debian/patches/CVE-2016-1531-4.patch: delay chdir(/) until we opened
          the main config.
        - Add macros MAIN_KEEP_ENVIRONMENT and MAIN_ADD_ENVIRONMENT to set the
          new options. Set "keep_environment =" by default to avoid a runtime
          warning.
        - Bump exim4-config Breaks to exim4-daemon-* (<< 4.86-3ubuntu1.1).
        - debian/exim4-config.NEWS: Add entry to warn of potential breakage.
        - CVE-2016-1531
      * WARNING: This update may break existing installations.
    
     -- Marc Deslauriers <email address hidden>  Mon, 14 Mar 2016 11:26:13 -0400
  • exim4 (4.86-3ubuntu1) wily; urgency=medium
    
      * Merge from Debian unstable. (LP: #1485369) Remaining changes:
        - debian/control, debian/patches/fix_smtp_banner.patch:
          + Show Ubuntu distribution in SMTP banner.
          + Build-Depends on lsb-release.
    
    exim4 (4.86-3) unstable; urgency=medium
    
      * Pull three patches from upstream git:
        + 75_Fix-ESMTP-MAIL-command-option-processing.patch:
          Corrects handling of mail-addresses with whitespace.
          <http://article.gmane.org/gmane.mail.exim.user/97069>
        + 76_Fix-post-transport-crash.patch
          77_Fix-post-transport-crash-safeguard-for-missing-spool.patch
          <https://bugs.exim.org/show_bug.cgi?id=1671>
      * Fix spelling error in copyright file. (Thanks, lintian)
      * Pull 77_Fix-post-transport-crash-safeguard-for-missing-spool.patch from
        upstream git, exim was keeping logfiles open after after a "too many
        connections" event. Closes: #796524, #476958 (Thanks to Andreas Pflug for
        chasing this.)
      * When saving the berkeley DB version at build-time pass -P option to cpp,
        to prevent linebreaks.
    
    exim4 (4.86-2) unstable; urgency=high
    
      * Update exim4-config Breaks, PRDR support is was moved from being
        Experimental into the mainline with 4.83.
        Closes: #794320
    
    exim4 (4.86-1) unstable; urgency=medium
    
      * New upstream version, identical to RC5 (except for the version string).
    
    exim4 (4.86~RC5-1) unstable; urgency=medium
    
      * New upstream version.
        + Drop 75_Bump-LOCAL_SCAN_ABI_VERSION.patch.
    
     -- Artur Rona <email address hidden>  Thu, 17 Sep 2015 13:18:20 +0100
  • exim4 (4.86~RC4-2ubuntu1) wily; urgency=low
    
      * Merge from Debian unstable. (LP: #1166671) Remaining changes:
        - debian/control, debian/patches/fix_smtp_banner.patch:
          + Show Ubuntu distribution in SMTP banner.
          + Build-Depends on lsb-release.
    
    exim4 (4.86~RC4-2) unstable; urgency=medium
    
      * Drop libmysqlclient15-dev alternative build-dependency. Closes: #790463
      * Update list of upstream gpg-keys (0x4D1E900E14C1CC04 Phil Pennock,
        0x85AB833FDDC03262 Nigel Metheringham, 0xFFC0F14C84C71B6E Tony Finch,
        0xC4F4F94804D29EBA Todd Lyons, 0xBCE58C8CE41F32DF Jeremy Harris,
        0x63762CDA67E2F359 David Woodhouse, 0xAD5EDBB793EC57E4 Graeme Fowler),
        transition from debian/upstream-signing-key.pgp to
        debian/upstream/signing-key.asc.
      * Pull 75_Bump-LOCAL_SCAN_ABI_VERSION.patch from upstream GIT and update
        exim4-localscanapi-x.y provides to 2.0. A binNMU of sa-exim will then
        properly fix the issue. Closes: #790616
    
    exim4 (4.86~RC4-1) unstable; urgency=medium
    
      * unexport/undefine TZ in debian/rules for reproducible build. It would be
        used as default value for TIMEZONE_DEFAULT.
      * New upstream version.
        + Unfuzz 31_eximmanpage.dpatch.
    
    exim4 (4.86~RC3-2) unstable; urgency=medium
    
      * Upload to unstable.
    
    exim4 (4.86~RC3-1) experimental; urgency=medium
    
      * Don't provide default-mta on Ubuntu and Ubuntu-derivatives. See LP-bug
        1166671.
      * New upstream version.
    
    exim4 (4.86~RC2-1) experimental; urgency=medium
    
      * Drop nowadays unneeded XS-Testsuite: autopkgtest in debian/control
        (Thanks, lintian).
      * New upstream version:
        +Drop included patches.
         (-72_0001-Guard-routing-against-a-null-deref.-Bug-1639.patch,
         72_0002-Spamd-add-missing-initialiser.-Rspamd-mode-was-incor.patch,
         72_0003-DSN-fix-null-deref-when-bounce-is-due-to-conn-timeou.patch,
         72_0004-Content-scan-Use-ETIMEDOUT-not-ETIME-as-having-bette.patch)
      * Sync Debian config with upstream default config:
        + Set prdr_enable.
        + Add +smtp_protocol_error +smtp_syntax_error +tls_certificate_verified to
          log_selector option value.
    
    exim4 (4.86~RC1-3) experimental; urgency=medium
    
      * Get time and date of latest debian/changelog entry and patch exim(on) to
        use these instead of __DATE__ and __TIME__.
      * Pull 72_0004-Content-scan-Use-ETIMEDOUT-not-ETIME-as-having-bette.patch
        from GIT to fix FTBFS on kfreebsd.
    
    exim4 (4.86~RC1-2) experimental; urgency=medium
    
      * Pull three post-release fixes from upstream GIT. (null pointer
        derefencing, and spam scanning defaulting to rspam mode)
        + 72_0001-Guard-routing-against-a-null-deref.-Bug-1639.patch
        + 72_0002-Spamd-add-missing-initialiser.-Rspamd-mode-was-incor.patch
        + 72_0003-DSN-fix-null-deref-when-bounce-is-due-to-conn-timeou.patch
    
    exim4 (4.86~RC1-1) experimental; urgency=medium
    
      * New upstream release.
        + Drop 84_Fix-truncation-of-items-in-headers_remove-lists-this.patch,
          refresh patches.
        + Update EDITME*, enable AUTH_TLS for -heavy.
        + Sync Debian config with upstream default config, rfc1413 calls are now
          disabled by default.
        + Uses MIME format bounce messages (RFC 3461). Closes: #230284,#400741
        + The spamd_address main option now supports an optional timeout value per
          server (tmo=timespec), it defaults two 2 minutes. Closes:  #297915
        + spamd_address also accepts hostnames and IPv6 addresses. Closes: #751687
        + log reason for defer, on a hostlist dns-lookup temporary error.
          Closes: #670035
    
    exim4 (4.85-3) unstable; urgency=medium
    
      * Upload to unstable.
    
    exim4 (4.85-2) experimental; urgency=medium
    
      * Merge from unstable 4.84-8.
        + Tighten dependency of exim4 on exim4-base to (>= ${source:Version}) and
          (<< ${source:Version}.1), at least source version, but not the next
          sourceful upload. Closes: #777246
        + Pull 84_Fix-truncation-of-items-in-headers_remove-lists-this.patch from
          upstream GIT which fixes breakage of string-expansion in headers_remove
          commands. (Thanks Gordon Dickens, for the pointer.) -
          83_Remove-limit-on-remove_headers-item-size.-Bug-1533.patch not added
          here since it already part of 4.85.
    
    exim4 (4.85-1) experimental; urgency=medium
    
      * exim4-config_files.5: Escape dots in regex. (Thanks, ael)
      * New upstream version.
    
    exim4 (4.85~RC4-1) experimental; urgency=medium
    
      * update-exim4.conf:
        + Drop unused variable UPEX4C_internal_tmp.
        + Use tempfile(1) if the generated file will not be written to
          /var/lib/exim4/.
        + Add --check option.
      * init-script: On restart use update-exim4.conf --check before stopping the
        daemon. (This is a no-op with systemd since its sysv compat layer
        translates "foo restart" into "foo stop" "foo start" instead of using the
        init scripts restart target.)
      * Handle _RC in watchfile with uversionmangle.
      * New upstream version.
        + Stop repacking source, rfcs have been dropped.
    
    exim4 (4.85~RC3+dfsg-1) experimental; urgency=medium
    
      * New upstream version.
    
    exim4 (4.85~RC2+dfsg-1) experimental; urgency=medium
    
      * New upstream version.
      * Unfuzz patches: 50_localscan_dlopen.dpatch 67_unnecessaryCopt.diff
        70_remove_exim-users_references.dpatch.
    
    exim4 (4.85~RC1+dfsg-1) experimental; urgency=medium
    
      * Unset message_prefix/message_sufix in maildrop_pipe transport. Maildrop
        neither expects a mbox-style From nor an empty line add the end. (Thanks,
        Edward Betts) Closes: #769396
      * Change the init script's restart order from { regenerate_config; stop;
        start ; } to { stop; regenerate_config; start ; }. (Thanks, Jakub Warmuz)
        Closes: #768874
      * New upstream version.
        + Unfuzz 66_enlarge-dh-parameters-size.dpatch
        + Drop 80_mime_empty_charset.diff.
      * Remove rfc from upstream source and repack it.
    
     -- Artur Rona <email address hidden>  Mon, 06 Jul 2015 12:09:36 +0200
  • exim4 (4.84-8ubuntu1) vivid; urgency=low
    
      * Merge from Debian unstable. (LP: #1434300) Remaining changes:
        - debian/control, debian/patches/fix_smtp_banner.patch:
          + Show Ubuntu distribution in SMTP banner.
          + Build-Depends on lsb-release.
        - debian/control:
          + Don't provide default-mta; in Ubuntu,
            we want postfix to be the default.
    
    exim4 (4.84-8) unstable; urgency=medium
    
      * Pull 83_Remove-limit-on-remove_headers-item-size.-Bug-1533.patch and
        84_Fix-truncation-of-items-in-headers_remove-lists-this.patch from
        upstream GIT which fix breakage of string-expansion in headers_remove
        commands. (Thanks Gordon Dickens, for the pointer.)
    
    exim4 (4.84-7) unstable; urgency=medium
    
      * Tighten dependency of exim4 on exim4-base to (>= ${source:Version}) and
        (<< ${source:Version}.1), at least source version, but not the next
        sourceful upload. Closes: #777246
     -- Artur Rona <email address hidden>   Thu, 19 Mar 2015 00:15:40 +0100