-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 29 Sep 2023 22:38:02 +0200 Source: exim4 Binary: exim4 exim4-config Architecture: all Version: 4.96-15+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Salvatore Bonaccorso Description: exim4 - metapackage to ease Exim MTA (v4) installation exim4-config - configuration for the Exim MTA (v4) Changes: exim4 (4.96-15+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Address external and SPA authenticator vulnerabilities (CVE-2023-42114, CVE-2023-42115, CVE-2023-42116) - Auths: fix possible OOB write in external authenticator (CVE-2023-42115) - Auths: use uschar more in spa authenticator - Auths: fix possible OOB write in SPA authenticator (CVE-2023-42116) - Auths: fix possible OOB read in SPA authenticator (CVE-2023-42114) Checksums-Sha1: 9c126c760f15d0e60600b9233dac5b635b7dc7c0 254992 exim4-config_4.96-15+deb12u2_all.deb 1a5168de36e0a3b080e5789be40fdb0d62a38273 8769 exim4_4.96-15+deb12u2_all-buildd.buildinfo 866fd4af3e17ee341b702dc9699adc2997957850 7192 exim4_4.96-15+deb12u2_all.deb Checksums-Sha256: 75bdeb1d16795275186a12e098842d6a6bf827d1d1569a4399f6d78b72476c48 254992 exim4-config_4.96-15+deb12u2_all.deb ef206994a6a8a0af39b0e18a88ecb148ed35289536432722100a1214224bbd6c 8769 exim4_4.96-15+deb12u2_all-buildd.buildinfo 552d8a42142c812d88d2e0cb7d1c19216527d37800a470aa4b9f31ecff997b85 7192 exim4_4.96-15+deb12u2_all.deb Files: 82bc9739d69392e0964b5b823bbec4fb 254992 mail optional exim4-config_4.96-15+deb12u2_all.deb 9853bb8ebd73d172074e899f2d85dd74 8769 mail standard exim4_4.96-15+deb12u2_all-buildd.buildinfo 4db88945bdafba5b2da56673f2c48174 7192 mail optional exim4_4.96-15+deb12u2_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEzW1K1578DQd6MDTQEbLkkg2OS0oFAmUZyGEACgkQEbLkkg2O S0rMzxAAiucCAuHsIjErnZpGbbcc7/mAZnQAKPKgOZv7IEnnce2B3TEi3lW9xFZ1 6mnSfVbT4vyQNsDFerkvQG0ZT9QdtU5KkWecFKuRG37CuSIo3fR8/4aVL47alX6Q I+uo86cMtjGfh0CgRSQtzZygoHEMCqRR7CWvTBYgYlJ0iH9BwTGeYjvYT62jmCsI vn3pCo7RAJGdWRagsZ0Orh/lZheAubDSaZl1f/2MSkm0dVJ9V4aYtXOLJKCisEJ0 RzzyDsCc8RmtJR8IadQ/knIiksYOEY9o9mybTjwqXtxG0I0xrzwy0ObI3o/GO/Yf 88KqgxxbwtaA2WHnrtsB+CW5g9sGc2lkAv8vuK9j0G5rF06W9O6R5PtXtFNvXhK/ BZfn//8m+48s3c6BRi2BcoXwko/zlC7lw1WvSXAWhY85TSXKkRDklk+XcahT40+V fI+msCGPqQ+fItGSuJhM0mpbLMr07Rrd8kS4zUcvX/AcmtHYiJXc+jBwdOYDRtAz yu85Nb+6R7Q12wiBCd/bGz7jYrHOPsHMaXtrKksnTLxiSwy/Tb1tdiO23tXjmT2G 4O1D+9M2RoZbxI7A97+WmTZ5WRoHKDqxq5gMR0LEuoQrHa8ctuj+uK0sPUsH+nsQ 0k9mQSsUuAfWsn/ok3/KXJe5bGyPkQho3Ltn/M1CaZ9eNN3Irio= =g8bZ -----END PGP SIGNATURE-----