-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 20 Jul 2019 13:35:58 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: i386 Version: 4.92-8+deb10u1 Distribution: buster-security Urgency: high Maintainer: i386 Build Daemon (x86-grnet-01) Changed-By: Andreas Metzler Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.92-8+deb10u1) buster-security; urgency=high . * Fix remote command execution vulnerability related to "${sort}"-expansion. CVE-2019-13917 OVE-20190718-0006 Checksums-Sha1: e496fbb9f5b6005317628c1c4d2d6da7ec890163 283520 exim4-base-dbgsym_4.92-8+deb10u1_i386.deb ff316822c60a9d97ce26ab2036efcb309ec06831 1135480 exim4-base_4.92-8+deb10u1_i386.deb ecf283ae86b25889dda0fe4ea8a700d6ba140de5 2243456 exim4-daemon-heavy-dbgsym_4.92-8+deb10u1_i386.deb ccb677a6986978332b04c5733c61d3f37104b886 656364 exim4-daemon-heavy_4.92-8+deb10u1_i386.deb bf62c650a73b77d198dabb5a03021bd3f6ddc77d 1914076 exim4-daemon-light-dbgsym_4.92-8+deb10u1_i386.deb 2c83af6bc235c4d58ca3072db3ea027184bec032 601544 exim4-daemon-light_4.92-8+deb10u1_i386.deb fecff3a74548c8b85a31b37713cea8f6e7ebb89e 106044 exim4-dev_4.92-8+deb10u1_i386.deb 15578d01892a035be559e43b649785c9ca64b099 10056 exim4_4.92-8+deb10u1_i386.buildinfo 2305a367368d33c65c5bbafdc9ecfd0ca48bc0d6 305012 eximon4-dbgsym_4.92-8+deb10u1_i386.deb 16235e10572e778e139bfac87bbced06878a833a 138448 eximon4_4.92-8+deb10u1_i386.deb Checksums-Sha256: e5da8bfdf181b0fe6b9c154961a71d04c8ddc88610cebb27138d0ebd7d131e82 283520 exim4-base-dbgsym_4.92-8+deb10u1_i386.deb 4a8d12add92038f7ebc1ec5376652b2d981e2c3240d881c3bebabfadb520f75d 1135480 exim4-base_4.92-8+deb10u1_i386.deb f74d9b7e95f39ff0a8cc14d1af5500c08f6264620147774786e7e9df70630ad1 2243456 exim4-daemon-heavy-dbgsym_4.92-8+deb10u1_i386.deb 8523f28629232043f23ae24c83ae96a29c7685168eb9f182a56d8b0a3abe892d 656364 exim4-daemon-heavy_4.92-8+deb10u1_i386.deb 69718c722b2d6fb50026c91397d57c79d26a8e316daf04d2f209633e88db0438 1914076 exim4-daemon-light-dbgsym_4.92-8+deb10u1_i386.deb 45f06e3ff573be7de91b59e22da6344ecd67564b6e4b128e5911ac23a0e2c9a0 601544 exim4-daemon-light_4.92-8+deb10u1_i386.deb 0931b92bc40fdec4d2c112bc769d0c448bc52436dd193b080994cab622df19c4 106044 exim4-dev_4.92-8+deb10u1_i386.deb fe0de47ab75cf8f2cc515daa8aded490bfb149a36fa87c4c2b2682fa99749006 10056 exim4_4.92-8+deb10u1_i386.buildinfo 0e97739a2886f28948030b7edae0e9f98c46699381e6a69caf9d2c171af8a4c2 305012 eximon4-dbgsym_4.92-8+deb10u1_i386.deb 4cde82b89be53b3b70be02fed4c6433473c5525c577794edd1e56a5b46b07e57 138448 eximon4_4.92-8+deb10u1_i386.deb Files: b3624546126a285211fc06c536585f22 283520 debug optional exim4-base-dbgsym_4.92-8+deb10u1_i386.deb ab583dfed1632270bacd31641bdf92b5 1135480 mail optional exim4-base_4.92-8+deb10u1_i386.deb 4d0d06801e20246befd596090b478573 2243456 debug optional exim4-daemon-heavy-dbgsym_4.92-8+deb10u1_i386.deb a21cbe2a888c6cc8df2cc3b471448787 656364 mail optional exim4-daemon-heavy_4.92-8+deb10u1_i386.deb b03fe9ed5c1a0d8850e65a148e281a16 1914076 debug optional exim4-daemon-light-dbgsym_4.92-8+deb10u1_i386.deb 07e8217902a8ea310a3cc00b3174bafb 601544 mail optional exim4-daemon-light_4.92-8+deb10u1_i386.deb 0877baeb74a5ac59988bff093cd648a5 106044 mail optional exim4-dev_4.92-8+deb10u1_i386.deb 06705e8e6ab4dc210f898efdeecf0851 10056 mail standard exim4_4.92-8+deb10u1_i386.buildinfo f96d8b28d17b90a067d8c1d2a82b2436 305012 debug optional eximon4-dbgsym_4.92-8+deb10u1_i386.deb bf8fc9d70365269d591558b142b33193 138448 mail optional eximon4_4.92-8+deb10u1_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE56RkdImmGnu/qTMEtnmMmMOJfQ0FAl00OUEACgkQtnmMmMOJ fQ029Q//SjWZBIArTcxltnejCwov0hN9Yoj26MmLTa/uNICgRYdZPvUKwCwgfPt3 NSQglfE71Q8dplJZQx955R6QIEC+2HZEmxvoVv1sfNgSqYHLJUTZZIVZDkBEl+42 gMdDV0gcOIfuTkMnDdogS/6GovSDt3Xy8XxzPZQ09pASLSHWSil7SB2grsHDHQzR mouY8g8qaft18esSPZrPcEV7nRZX3mV4yP+F+hcOMcZLazRRXRTyv9bxNQYC24Ei Dzns4vbdVOh9LTxbC7sDwl8Y33DPdjxf8GC/Ak2sC0cwfM01JrrYJOCKz6CTynmf qrY10pmURWCvrR6rD4UKY0B/e5XdNThmqvTlyg1zGbOC64R0obPTQq09slWEop++ uQLhss/hZomTUiY+GoJ8S/2cIyIjDjfNx/nCO0JXExtb6bwywunMGfOIbDxRIQL9 LFZ0PNLVvviUjKo94B8PgooP15ZvLCefeaKsLM8AikqZicmGWfxL/QdR24Ue0bOG 9G+p6rKlC3TUZ5mDyoxMioYk6hv3qM5ekrqIJFWCyAQshODCnidpnpbkgBXVlaIa B3Yez5oklMEDKBVD/2Hvr571cbn7MbQyOgpXIYc1VuALwmp21ae/oFrHMWLPzgyF sf+CBv4DSRkZRENzhWYS7EkH4VHZlKIgtd4IQjR56wrDJ1RDgmI= =sssC -----END PGP SIGNATURE-----