[ubuntu/natty] exim4 4.74-1ubuntu1 (Accepted)
Artur Rona
ari-tczew at ubuntu.com
Wed Feb 9 21:50:31 UTC 2011
exim4 (4.74-1ubuntu1) natty; urgency=low
* Merge from debian experimental. Remaining changes: (LP: #713855)
- debian/patches/71_exiq_grep_error_on_messages_without_size.patch:
+ Improve handling of broken messages when "exim4 -bp" (mailq)
reports lines without size info. (Closes: #528625)
- debian/control: Don't declare a Provides: default-mta; in Ubuntu,
we want postfix to be the default.
- debian/{control,rules}: Add and enable hardened build for PIE.
(Closes: #542726)
* Update 71_exiq_grep_error_on_messages_without_size.patch to get way
which upstream has fixed it. Probably it can be dropped with next
upstream release.
* This upload fixes CVE: (LP: #708023)
- CVE-2011-0017
exim4 (4.74-1) experimental; urgency=low
* 4.74 release, should build on hurd again.
* Fix some lintian --pedantic issues: copyright-refers-to-symlink-license
maintainer-script-without-set-e debian-control-has-unusual-field-spacing
exim4 (4.74~rc2-1) experimental; urgency=low
* In spf example use spf-tools-perl's spfquery instead of the one from
libmail-spf-query-perl. Do not try to use unimplemented best-guess
support. Update Suggests accordingly. Closes: #608336
* Add headers in ACL by using the add_header modifier instead of "message".
(This modifier has been available since 4.61.) Closes: #609308
* New upstream version.
+ includes the fix for CVE-2011-0017
+ If a non-debug daemon was invoked with a non-whitelisted macro, then
logs from after attempting delivery would be silently lost, including
for successful delivery. This log-loss bug was introduced in 4.73
as part of the security lockdown. Closes: #610611
+ Update some patches.
Date: Wed, 09 Feb 2011 21:31:35 +0100
Changed-By: Artur Rona <ari-tczew at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Kees Cook <kees at ubuntu.com>
https://launchpad.net/ubuntu/natty/+source/exim4/4.74-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 09 Feb 2011 21:31:35 +0100
Source: exim4
Binary: exim4-base exim4-config exim4-daemon-light exim4 exim4-daemon-heavy exim4-daemon-custom eximon4 exim4-dbg exim4-daemon-light-dbg exim4-daemon-heavy-dbg exim4-daemon-custom-dbg exim4-dev
Architecture: source
Version: 4.74-1ubuntu1
Distribution: natty
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Artur Rona <ari-tczew at ubuntu.com>
Description:
exim4 - metapackage to ease Exim MTA (v4) installation
exim4-base - support files for all Exim MTA (v4) packages
exim4-config - configuration for the Exim MTA (v4)
exim4-daemon-custom - custom Exim MTA (v4) daemon with locally set features
exim4-daemon-custom-dbg - debugging symbols for the Exim MTA (v4) packages
exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
exim4-daemon-heavy-dbg - debugging symbols for the Exim MTA (v4) packages
exim4-daemon-light - lightweight Exim MTA (v4) daemon
exim4-daemon-light-dbg - debugging symbols for the Exim MTA (v4) packages
exim4-dbg - debugging symbols for the Exim MTA (v4) packages
exim4-dev - header files for the Exim MTA (v4) packages
eximon4 - monitor application for the Exim MTA (v4) (X11 interface)
Closes: 528625 542726 608336 609308 610611
Launchpad-Bugs-Fixed: 708023 713855
Changes:
exim4 (4.74-1ubuntu1) natty; urgency=low
.
* Merge from debian experimental. Remaining changes: (LP: #713855)
- debian/patches/71_exiq_grep_error_on_messages_without_size.patch:
+ Improve handling of broken messages when "exim4 -bp" (mailq)
reports lines without size info. (Closes: #528625)
- debian/control: Don't declare a Provides: default-mta; in Ubuntu,
we want postfix to be the default.
- debian/{control,rules}: Add and enable hardened build for PIE.
(Closes: #542726)
* Update 71_exiq_grep_error_on_messages_without_size.patch to get way
which upstream has fixed it. Probably it can be dropped with next
upstream release.
* This upload fixes CVE: (LP: #708023)
- CVE-2011-0017
.
exim4 (4.74-1) experimental; urgency=low
.
* 4.74 release, should build on hurd again.
* Fix some lintian --pedantic issues: copyright-refers-to-symlink-license
maintainer-script-without-set-e debian-control-has-unusual-field-spacing
.
exim4 (4.74~rc2-1) experimental; urgency=low
.
* In spf example use spf-tools-perl's spfquery instead of the one from
libmail-spf-query-perl. Do not try to use unimplemented best-guess
support. Update Suggests accordingly. Closes: #608336
* Add headers in ACL by using the add_header modifier instead of "message".
(This modifier has been available since 4.61.) Closes: #609308
* New upstream version.
+ includes the fix for CVE-2011-0017
+ If a non-debug daemon was invoked with a non-whitelisted macro, then
logs from after attempting delivery would be silently lost, including
for successful delivery. This log-loss bug was introduced in 4.73
as part of the security lockdown. Closes: #610611
+ Update some patches.
Checksums-Sha1:
01956683bd2a2be69f6afaa35d44356fa95972e0 2536 exim4_4.74-1ubuntu1.dsc
6d927e8b1b7b72de8eb7b630eb2cf901f5935a1d 2052203 exim4_4.74.orig.tar.gz
f3049993c081be72190e324158c720720d9ad2b9 571581 exim4_4.74-1ubuntu1.debian.tar.gz
Checksums-Sha256:
c7f3771a9fd727824c418895a45a82533487a40652af5e903531d15b916b9080 2536 exim4_4.74-1ubuntu1.dsc
050137e83c93acb26bfec7d245eed91a9643084d21843b9d2d7d1533244858a1 2052203 exim4_4.74.orig.tar.gz
6df9009c47beaa3d3aa67b0cac073598e8041cde9d8c0d90b02a93e65914259b 571581 exim4_4.74-1ubuntu1.debian.tar.gz
Files:
c1817a04b01398e3564761ee9f18cc70 2536 mail standard exim4_4.74-1ubuntu1.dsc
09d7c26d033d67dc86093a26cbcd1ed6 2052203 mail standard exim4_4.74.orig.tar.gz
06f3444cb04c65566a6614d3129538a4 571581 mail standard exim4_4.74-1ubuntu1.debian.tar.gz
Original-Maintainer: Exim4 Maintainers <pkg-exim4-maintainers at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Kees Cook <kees at outflux.net>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=wh7R
-----END PGP SIGNATURE-----
More information about the Natty-changes
mailing list