-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 29 Sep 2023 22:38:02 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: armhf Version: 4.96-15+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Salvatore Bonaccorso Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.96-15+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Address external and SPA authenticator vulnerabilities (CVE-2023-42114, CVE-2023-42115, CVE-2023-42116) - Auths: fix possible OOB write in external authenticator (CVE-2023-42115) - Auths: use uschar more in spa authenticator - Auths: fix possible OOB write in SPA authenticator (CVE-2023-42116) - Auths: fix possible OOB read in SPA authenticator (CVE-2023-42114) Checksums-Sha1: 21525b26e471108db634aba495538ddc2a24ece8 128932 exim4-base-dbgsym_4.96-15+deb12u2_armhf.deb f81a6d9948c09dcfbfcb71c9908fe9a91e73f47b 1111536 exim4-base_4.96-15+deb12u2_armhf.deb 845e4b86a9728f3e02b1d9b867bfbf4944226374 1586244 exim4-daemon-heavy-dbgsym_4.96-15+deb12u2_armhf.deb 6e34674434d69600be30590dd4b68a585f0efb6e 611992 exim4-daemon-heavy_4.96-15+deb12u2_armhf.deb 73f0d7dbf0102f8ab5089ff81eb5eb64f352c40e 1387396 exim4-daemon-light-dbgsym_4.96-15+deb12u2_armhf.deb c14c39751f1a1c0898997e64be637d6b760474ed 556856 exim4-daemon-light_4.96-15+deb12u2_armhf.deb d150033db55f3419141e7de5388f0a6f9ff4d91a 37732 exim4-dev_4.96-15+deb12u2_armhf.deb 7bb1b2d123b1eca3eb91190792414f989e282f46 10870 exim4_4.96-15+deb12u2_armhf-buildd.buildinfo 5f4b320ef8c498412ba377e55b84ae2531030449 136136 eximon4-dbgsym_4.96-15+deb12u2_armhf.deb bf9c06613c8fb0073db5a8b3be3ed8d304ba838b 68816 eximon4_4.96-15+deb12u2_armhf.deb Checksums-Sha256: 370417e81aa62d2d2241695f67f9fe6a79c952e90f7851c8411725b066cf3760 128932 exim4-base-dbgsym_4.96-15+deb12u2_armhf.deb 5ce6d750c8840bd00b610cc72f354f85b8321e655d89128fc4273ca149ce3720 1111536 exim4-base_4.96-15+deb12u2_armhf.deb f5e4e882a359bd5d161ba80104adf2f2d45a6589a4a94935ad705ff2ad8dced8 1586244 exim4-daemon-heavy-dbgsym_4.96-15+deb12u2_armhf.deb 10c97a3e1fd314b00e9c9b5d5a04b4d5e6bc7b7f952923ff8b0be237c22824a2 611992 exim4-daemon-heavy_4.96-15+deb12u2_armhf.deb e10e4de6659969ee9a883b6608921381c8e8d47e31a67956a8d9528e695aac5c 1387396 exim4-daemon-light-dbgsym_4.96-15+deb12u2_armhf.deb cf3f47c8873abecfc70637942bccb18bd79400745547f73a329f2e0f54aecb7e 556856 exim4-daemon-light_4.96-15+deb12u2_armhf.deb 8c25d4c3eae7ecb9a63ed13f7ba8ad4a1bb15493ec2def3755e569145dd5962e 37732 exim4-dev_4.96-15+deb12u2_armhf.deb feba7f03569c6cd7a38d88dc5ddff964cedc367e36d7e0507aaf52d6662caa3d 10870 exim4_4.96-15+deb12u2_armhf-buildd.buildinfo f8490613be453af9b445fa676f7d98af0e7a56e43cf8600adafb56df85efacf5 136136 eximon4-dbgsym_4.96-15+deb12u2_armhf.deb 3b32067f2c33c3c30907eb3cdd60ba5d26c619a46939d993eb156ab5f39008b1 68816 eximon4_4.96-15+deb12u2_armhf.deb Files: fab95f9d2120454ab3382aadecd10756 128932 debug optional exim4-base-dbgsym_4.96-15+deb12u2_armhf.deb 0a08c8a43fbe6312b8189f72c0d01985 1111536 mail optional exim4-base_4.96-15+deb12u2_armhf.deb c495f9e75a4141fda5fa28463072a6d9 1586244 debug optional exim4-daemon-heavy-dbgsym_4.96-15+deb12u2_armhf.deb 2885de0089e65d7d5de490e1f912c78a 611992 mail optional exim4-daemon-heavy_4.96-15+deb12u2_armhf.deb 0b8fc70c41305bbdea80a77bc74d4a8b 1387396 debug optional exim4-daemon-light-dbgsym_4.96-15+deb12u2_armhf.deb 267935f15c53f3ba831ce28c3eb8a963 556856 mail optional exim4-daemon-light_4.96-15+deb12u2_armhf.deb d4fda2bdb7717a0afa9aa9f5d05f345e 37732 mail optional exim4-dev_4.96-15+deb12u2_armhf.deb 5d642a25918c3f141e3e231db041fef5 10870 mail standard exim4_4.96-15+deb12u2_armhf-buildd.buildinfo e2743ead378a3fc34fe5f01ce59ba90e 136136 debug optional eximon4-dbgsym_4.96-15+deb12u2_armhf.deb 80f63f46ce5b421d04f71d174a4c8b0c 68816 mail optional eximon4_4.96-15+deb12u2_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE85cWtWDyjeTR1DyXYfnSkVoQrNkFAmUZyTUACgkQYfnSkVoQ rNlZARAAq/Jy6pR+4CuAZavoogRRYHzPY3npXya0DTykSJcNRECcyib5sX0Wkoy8 RWgjYnP/Bs/NB1WAFbS+PPOdW/JpsYic8uDA5bXURtIzs8VxZ9COJFVw+65t2Tx+ 505nQSFgH2jWxyo5NfghtRzCW1EWQIjxUhcHqDMXLdXvcC5XKkPEaEFWWIaiaieT 7iXnxoPyX9TpM9ppgDahgJr85jXELt7ZWe1E2CkxXYzChbmeVye5CNfkaBqvaFaW pLSH1ms/gufbDlpWcoPQfjUz4VD1nLn01Op/xNmoY4xy0HWHkWofzPrbm4llMrA/ 32SqZB1I/699cZMhSGw4Dx5ptaOAkKvaTtctn98Jc9mjGvGYwoWqq4g0yZ0h9aDB OFhZoofKko5E5syNUegWTHXgHEilxUXKyG7fvhgb5d2+MRNQEHa9FrSyKfdcGbEi V4S9lGtsuozNsEVRR95feGj2U1BHLtIZgWXqrulY7wsQfmkLSy+UhHXlQEvIrPxo 05o1o6W6MFpaJREjxWMrS/AWjj68Y0o1Pr6BcOyyL4ulugDX0LI+xeTt8oSdofIi RazxU/i3LKtliII+xqdZLIt8WJRPQRt0zlHjLfn6eCEP83ieZCaeQ9PaxQ8+5Bhg MFwyGcLlh/obEz7nxy2DAK4wDDMsn5+afoB3TeJVZSVHXV7Goq4= =skfk -----END PGP SIGNATURE-----