-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 29 Sep 2023 23:23:04 +0200
Source: exim4
Architecture: source
Version: 4.94.2-7+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Exim4 Maintainers <pkg-exim4-maintainers@lists.alioth.debian.org>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
 exim4 (4.94.2-7+deb11u1) bullseye-security; urgency=high
 .
   * Non-maintainer upload by the Security Team.
   * Address external and SPA authenticator vulnerabilities (CVE-2023-42114,
     CVE-2023-42115, CVE-2023-42116)
     - Auths: fix possible OOB write in external authenticator (CVE-2023-42115)
     - Auths: use uschar more in spa authenticator
     - Auths: fix possible OOB write in SPA authenticator (CVE-2023-42116)
     - Auths: fix possible OOB read in SPA authenticator (CVE-2023-42114)
Checksums-Sha1: 
 9a2630371a3ccce2090b9f1f364d45f666fc7a49 3082 exim4_4.94.2-7+deb11u1.dsc
 4854541833583d82c6e667d3dde566d41162eec3 1838076 exim4_4.94.2.orig.tar.xz
 a042b2dcaee770d7a5c54c8434b27cf10a902aa3 488 exim4_4.94.2.orig.tar.xz.asc
 bd867fcbb1e185a2871d7be6c4200db6a8f67d98 485668 exim4_4.94.2-7+deb11u1.debian.tar.xz
Checksums-Sha256: 
 22aeb5aafaad44b4c7d3027b4a09a0b3a1521c5a5ae9214c653bdae5e43a2308 3082 exim4_4.94.2-7+deb11u1.dsc
 051861fc89f06205162f12129fb7ebfe473383bb6194bf8642952bfd50329274 1838076 exim4_4.94.2.orig.tar.xz
 5546fb401d778bc8c8df35d9584612d10a4a896cde5f130c119f98297a18df73 488 exim4_4.94.2.orig.tar.xz.asc
 76d391806924abaf1e8c046dea35b1c0485a5ecbfff843dd544e1a34d175ec6a 485668 exim4_4.94.2-7+deb11u1.debian.tar.xz
Files: 
 8db04c3c49b57f8f4d2d107969ed6435 3082 mail standard exim4_4.94.2-7+deb11u1.dsc
 4fbf1ebb36f0f43bb94ed0848eb13256 1838076 mail standard exim4_4.94.2.orig.tar.xz
 ceddf936e03226c4364c4c59e7461788 488 mail standard exim4_4.94.2.orig.tar.xz.asc
 78ee1429c8182f6be9ddc53fe3770ae2 485668 mail standard exim4_4.94.2-7+deb11u1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=yXBA
-----END PGP SIGNATURE-----