[ubuntu/bionic-proposed] exim4 4.89-9ubuntu2 (Accepted)

[Marc Deslauriers]

exim4 (4.89-9ubuntu2) bionic; urgency=medium

  * SECURITY UPDATE: remote code execution via use-after-free
    - debian/patches/CVE-2017-16943.patch: avoid release of store if there
      have been later allocations in src/receive.c.
    - CVE-2017-16943

Date: Mon, 27 Nov 2017 07:35:53 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/exim4/4.89-9ubuntu2
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Nov 2017 07:35:53 -0500
Source: exim4
Binary: exim4-base exim4-config exim4-daemon-light exim4 exim4-daemon-heavy eximon4 exim4-dev
Architecture: source
Version: 4.89-9ubuntu2
Distribution: bionic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
 exim4      - metapackage to ease Exim MTA (v4) installation
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-config - configuration for the Exim MTA (v4)
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Changes:
 exim4 (4.89-9ubuntu2) bionic; urgency=medium
 .
   * SECURITY UPDATE: remote code execution via use-after-free
     - debian/patches/CVE-2017-16943.patch: avoid release of store if there
       have been later allocations in src/receive.c.
     - CVE-2017-16943
Checksums-Sha1:
 03c6315ab1c4a8e6cdc308cc31eada29b639d4c4 2715 exim4_4.89-9ubuntu2.dsc
 9cee444e6bdc53fbd68ae228f4ab1fd48cc2468e 471420 exim4_4.89-9ubuntu2.debian.tar.xz
 1206eaa58b927c27b28012f3dab0a62a6126beb7 9277 exim4_4.89-9ubuntu2_source.buildinfo
Checksums-Sha256:
 36d991ea9a5e4db9d47c87e53bfe4f32d66999f310ce882fda21a527dadb34a2 2715 exim4_4.89-9ubuntu2.dsc
 7712251209725d94660b2400cd474c6a2373ebba7480ea7b9798b7cc73aff698 471420 exim4_4.89-9ubuntu2.debian.tar.xz
 d405559a00c1aa5ead488551f56f7d4aaf69b1c5abe2d71e6fb1e24dc899f46d 9277 exim4_4.89-9ubuntu2_source.buildinfo
Files:
 3bf1c975b72a4a1794ed1be0455467e7 2715 mail standard exim4_4.89-9ubuntu2.dsc
 03490540fdcb511ca659c6b8b60e0098 471420 mail standard exim4_4.89-9ubuntu2.debian.tar.xz
 4db37b9d1ae9475d6d594a738ae6ebbc 9277 mail standard exim4_4.89-9ubuntu2_source.buildinfo
Original-Maintainer: Exim4 Maintainers <pkg-exim4-maintainers at lists.alioth.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=x+J4
-----END PGP SIGNATURE-----