-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 20 Jul 2019 13:35:58 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: amd64 Version: 4.92-8+deb10u1 Distribution: buster-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Andreas Metzler Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.92-8+deb10u1) buster-security; urgency=high . * Fix remote command execution vulnerability related to "${sort}"-expansion. CVE-2019-13917 OVE-20190718-0006 Checksums-Sha1: ce19ec6bcb5d02b65d8e1e23d8e4e8736e5d1b80 292448 exim4-base-dbgsym_4.92-8+deb10u1_amd64.deb c4e8d5db30819fd4299fbd07fd571d1bd0b8429d 1134760 exim4-base_4.92-8+deb10u1_amd64.deb 739c98f85bb61261fa8942a6b51b3919aa21902e 2434224 exim4-daemon-heavy-dbgsym_4.92-8+deb10u1_amd64.deb c153584aeaa370badab001f564d747ae95467b15 634164 exim4-daemon-heavy_4.92-8+deb10u1_amd64.deb f200f5db594cba23d56534e0da075fad66f64b24 2083436 exim4-daemon-light-dbgsym_4.92-8+deb10u1_amd64.deb efd134c695041405cd3e38a787606391e270969b 580648 exim4-daemon-light_4.92-8+deb10u1_amd64.deb 2aff8e34d743d8a42c7487b28cdb5835febf92bd 106040 exim4-dev_4.92-8+deb10u1_amd64.deb 254f4c9194db1abfdc8cee2a20f48e13717b966a 10117 exim4_4.92-8+deb10u1_amd64.buildinfo 7024f66be00dd2301058f73cb7ae5998b023b0e9 314940 eximon4-dbgsym_4.92-8+deb10u1_amd64.deb 79fcada116f0b33e37f113b3a746e9fad8e19fb9 136692 eximon4_4.92-8+deb10u1_amd64.deb Checksums-Sha256: 11d064678bcd7733d169c0c93e7eac81a625cbe528fcabf9f3bf4b482262c55d 292448 exim4-base-dbgsym_4.92-8+deb10u1_amd64.deb f86840e881375c8e81be12334648a7424b878dbe85b556e3bc3147fc3fc538d9 1134760 exim4-base_4.92-8+deb10u1_amd64.deb 3079f32f11112aa905f69146003cbf517bed7cc87b5a1be55c9784d4684ff77f 2434224 exim4-daemon-heavy-dbgsym_4.92-8+deb10u1_amd64.deb 5b9683ff1691d6a3b1a891c454c2fa9364e16988cc1402b9c3ffa2c5a75a8d2f 634164 exim4-daemon-heavy_4.92-8+deb10u1_amd64.deb 36aadc56e2fa88a9a40b1f27ac8d008616a9f691e2dd5ad2d39376a8bf46104a 2083436 exim4-daemon-light-dbgsym_4.92-8+deb10u1_amd64.deb bfc2257fdbccfdd13b12448a7576325af47f0669f16022cc4260f690680b4c03 580648 exim4-daemon-light_4.92-8+deb10u1_amd64.deb 689178ced377fec9407e9dd82b46b8526db961d2687b71b846aed23c1f0cb6f0 106040 exim4-dev_4.92-8+deb10u1_amd64.deb 5c1dcb435659f64d9907079633c3596b0cfc99ada6bfa6f6b2d041f3faa59668 10117 exim4_4.92-8+deb10u1_amd64.buildinfo 90a1733f892c3906ef89d7acae421faadad60207e6fe33cd4de8cf8ad2dd626e 314940 eximon4-dbgsym_4.92-8+deb10u1_amd64.deb 902ed819f4f7624b2e79f00bb8cacaeb8ba8a1b09ccedb5d8fd86ade16eddf55 136692 eximon4_4.92-8+deb10u1_amd64.deb Files: aee80bb6cef3fbd5f13096a376d0a5c6 292448 debug optional exim4-base-dbgsym_4.92-8+deb10u1_amd64.deb 5b38ab5edb1a628a5768428a7cc65a87 1134760 mail optional exim4-base_4.92-8+deb10u1_amd64.deb 356e2de1d61a43494539b6d1cbeb6968 2434224 debug optional exim4-daemon-heavy-dbgsym_4.92-8+deb10u1_amd64.deb 80a767d356cd0648fff2830bb0dc7bf2 634164 mail optional exim4-daemon-heavy_4.92-8+deb10u1_amd64.deb d088df3ad2bd2234f52107f95cb28b3a 2083436 debug optional exim4-daemon-light-dbgsym_4.92-8+deb10u1_amd64.deb 43088f7a5e0504c637c07568157934e3 580648 mail optional exim4-daemon-light_4.92-8+deb10u1_amd64.deb c52b898da1bfa45e945b1b708211153b 106040 mail optional exim4-dev_4.92-8+deb10u1_amd64.deb cd3902e4a6c5abcded60cf65e17c54e9 10117 mail standard exim4_4.92-8+deb10u1_amd64.buildinfo 6e4ef562dbb57199683a0c948a78d705 314940 debug optional eximon4-dbgsym_4.92-8+deb10u1_amd64.deb 25d383800bd73528c3cf3274c24ee86e 136692 mail optional eximon4_4.92-8+deb10u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc1Y9tvYCx8z2wuljZWBroU7DAFMFAl00OXYACgkQZWBroU7D AFOn7w/7BXSUbt3mbc1c7zWMfrlWun5dUJCLc652HeSISC7j6lNXet6OZeBSdDea 1xvTmD0FhnVUMTGDY1DQCNgwQb1O7UxXSx73Pae7DTNjBH/ebnw/cYTrEoKW7HtM I3JBAGmUKMqDiFhglmhEv7S/WG3OTI5dRdhXrBdV6X8yI5ukMpo2CrHRYIi192gF YGrSEbIPQopQM4vT3mGf48IMAraBOypdnE6aYITe1RlgH3G6USGvHN5peYkuOuEf kZEYikJG68N5BLHNqjFq3xsSxA3+5z3LfJOw49OYwufagGg8x76+BcDbwYo8wa5b RCMDpZqL4lUavw+yy/N7fI1VlxH8c2JM/MCF0MT36J3Y8KfgkyPpXYlutvLkUhM7 tLm+btsFlX9kJdE9cBR3AfnOv34a9P4vWWYvCqnFjxc1QP1vJhZ7OBVve+c6AaPZ TOb37PdKg9p1yvUwdEhnc7kIM4J0jDFEbuJoTlXjAHtU28tk39+YGDV6lcwt9ag/ o/NxMrq7ZbYZY0Symguo9ZoZ2R8cyphkilGlnOBXAdFi2L3sPLOIv4YKr2yoHxOp ihNkJfJzD6aiev90vtbr4wXMN/Iv6dKQD/YCYUWFPe1uSkk4BRUaE52TAaTQ4lhy 70s04+GAlCUDhixXW7dQaZv/vk1bJoyRkw616dV8kotg2PAXnr0= =eRJ3 -----END PGP SIGNATURE-----