-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 20 Jul 2019 13:32:35 +0200 Source: exim4 Binary: exim4-base exim4-config exim4-daemon-light exim4 exim4-daemon-heavy eximon4 exim4-dbg exim4-daemon-light-dbg exim4-daemon-heavy-dbg exim4-dev Architecture: amd64 Version: 4.89-2+deb9u5 Distribution: stretch-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Andreas Metzler Description: exim4 - metapackage to ease Exim MTA (v4) installation exim4-base - support files for all Exim MTA (v4) packages exim4-config - configuration for the Exim MTA (v4) exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-heavy-dbg - debugging symbols for the Exim MTA "heavy" daemon exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-daemon-light-dbg - debugging symbols for the Exim MTA "light" daemon exim4-dbg - debugging symbols for the Exim MTA (utilities) exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.89-2+deb9u5) stretch-security; urgency=high . * Fix remote command execution vulnerability related to "${sort}"-expansion. CVE-2019-13917 OVE-20190718-0006 Checksums-Sha1: f63a7e5c303163283ff3cf0bd6528b9ef9fcf1ce 1093226 exim4-base_4.89-2+deb9u5_amd64.deb 29d25cebd9f71a80e8380c138af4fc93876c4f27 2082124 exim4-daemon-heavy-dbg_4.89-2+deb9u5_amd64.deb e05fc061561a1e4f10dc305e1e343de6a4fc35ec 592806 exim4-daemon-heavy_4.89-2+deb9u5_amd64.deb a3162d14f76ed81e03f8b517bb4d38918606285f 1788864 exim4-daemon-light-dbg_4.89-2+deb9u5_amd64.deb f468b7cbb365952edf0dc5cb7725d5aa1338e53b 542370 exim4-daemon-light_4.89-2+deb9u5_amd64.deb f63646d85424d1aa035d85efb98fe89589bc567d 616672 exim4-dbg_4.89-2+deb9u5_amd64.deb ae1b0a92d3d866a5084202671a5b26cd5c021219 99110 exim4-dev_4.89-2+deb9u5_amd64.deb e9b3059c994d5fd08c81fddc54f3339448d09d2a 10490 exim4_4.89-2+deb9u5_amd64.buildinfo 223600f840eca3a6e9099be9ec024bb619797117 129342 eximon4_4.89-2+deb9u5_amd64.deb Checksums-Sha256: abcf9e9154de1b02dabf62b067a7de2d5b2f7acaccf38ce316cf25cd46c49496 1093226 exim4-base_4.89-2+deb9u5_amd64.deb 09d773f0a48afdf933655ec564d5a1457ea5c376a90bbe77d664e428be16f681 2082124 exim4-daemon-heavy-dbg_4.89-2+deb9u5_amd64.deb 045e641f9ec96573f08d4d24a0d70465af004391783d33ee19a9dd81336dc15e 592806 exim4-daemon-heavy_4.89-2+deb9u5_amd64.deb c22a52c8d2759eacb1df56679d206463e81c2b4e680aa296bf5caf29970e4885 1788864 exim4-daemon-light-dbg_4.89-2+deb9u5_amd64.deb 51f3c1782151e1058ec5540ce11b69749c6cd088e23dfd8b478456f62efbb423 542370 exim4-daemon-light_4.89-2+deb9u5_amd64.deb 90d82301cd6f79cd1141e34c3be686838ed20539cd3132dd4f02235163973524 616672 exim4-dbg_4.89-2+deb9u5_amd64.deb c6c74878fbce6c13afc6222cf94ae7d2169854668446887d101744dcd6924b93 99110 exim4-dev_4.89-2+deb9u5_amd64.deb 16ba0e9e46bc297637c31d18f6a918263a1d2cb33bfd89dc03b5b7b1920d5d88 10490 exim4_4.89-2+deb9u5_amd64.buildinfo 1fac55208dadd88463f14e8cae870a6f9654641492b4582b2ec1e3e44392f832 129342 eximon4_4.89-2+deb9u5_amd64.deb Files: 20b6690a8414fa4508aedb5125db8a1f 1093226 mail standard exim4-base_4.89-2+deb9u5_amd64.deb c0b4f5f9ebd847745abf06e0ac871e89 2082124 debug extra exim4-daemon-heavy-dbg_4.89-2+deb9u5_amd64.deb b25c1fb57300301149a91ef344cb4517 592806 mail optional exim4-daemon-heavy_4.89-2+deb9u5_amd64.deb eff8d27368ecf3b1d1411701d332f366 1788864 debug extra exim4-daemon-light-dbg_4.89-2+deb9u5_amd64.deb f6a19a65ce8dd11ca34e67252a325816 542370 mail standard exim4-daemon-light_4.89-2+deb9u5_amd64.deb b2d2e2ab64fa4308d797e35cdd87267f 616672 debug extra exim4-dbg_4.89-2+deb9u5_amd64.deb 01533502d502eac95a4bd3a345e948fb 99110 mail extra exim4-dev_4.89-2+deb9u5_amd64.deb e993c25b741f252752fd2ff97727f10f 10490 mail standard exim4_4.89-2+deb9u5_amd64.buildinfo 8cf83eb3293f33379f213c83b0eef4de 129342 mail optional eximon4_4.89-2+deb9u5_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEc1Y9tvYCx8z2wuljZWBroU7DAFMFAl00UEEACgkQZWBroU7D AFPdOw/+LP3aM4eFMorHbrY9fQama3dPGz+oshyFmUqfyW1dpIeU+pA5Cf5wAIFV SofaXYIiz1iNwRMtwDRK+AZP6stZ3yiesug3Dy6lIIwT4/aSsvFWPjj9/yJaFc3+ vFxj75ujX3obCWUzTmg2YT0i+Vbgg+rpG0aUxIW9A/zJsqPAxChhig452+PHxZO3 Tkftqb9nQLLN/edz1B9dpyA378UBiL0v4jf0cEkfr0bK56Q8/gRgvES+bQgP4ifJ sCgwQC+jB5IKmbpTJo3fgx5o8sTv7JXDlFsAfHhe+YZa8Yn+uMBL9PFGMLi/hrtC fGkcSxCL09+mMbmckL7pZM7hX0/v0bB9JPqWrg0ldjn7iYWSytzgyNK8umtiy2Yw fCOQmg1Fm7m47nGQcxk8f5Jd7xaZoNA05UMD+zRVwt0jxnkzSXOogL77UKn3sDg3 T3Arn/xPsJA2bJ0a4WrmDmME7B9KjC/jEo+Z8J3zGXO7ZiWnzvJxgf/HyydAuuZN PuXGnRuEdsOIwtcqGA2aVulJJkVnlCQ5UMQZOaYNPUHmBCMzIxszVUCxXjS846Ue oHFW0HzDMgAM6xgMcJpkaA6evlkfsQrOTQMJoMIgVPYcMQ2wrCBCaCCSE7DZT7Ix M+kVZSAwH1eRZDNNXEBcJlDHPiaC23X4/Th/+dg75RBeYVHjAvg= =V+dI -----END PGP SIGNATURE-----