-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 29 Sep 2023 22:38:02 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: armel Version: 4.96-15+deb12u2 Distribution: bookworm-security Urgency: high Maintainer: arm Build Daemon (arm-arm-03) Changed-By: Salvatore Bonaccorso Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.96-15+deb12u2) bookworm-security; urgency=high . * Non-maintainer upload by the Security Team. * Address external and SPA authenticator vulnerabilities (CVE-2023-42114, CVE-2023-42115, CVE-2023-42116) - Auths: fix possible OOB write in external authenticator (CVE-2023-42115) - Auths: use uschar more in spa authenticator - Auths: fix possible OOB write in SPA authenticator (CVE-2023-42116) - Auths: fix possible OOB read in SPA authenticator (CVE-2023-42114) Checksums-Sha1: 54c22c72e0dd6265cff1e8c7346f92b23776538b 127340 exim4-base-dbgsym_4.96-15+deb12u2_armel.deb 12aea037d00a7ddad48e462bca71c8721c26fa56 1111288 exim4-base_4.96-15+deb12u2_armel.deb 4407e515cbd244ea9e37fdf6f4c1d9366701f065 1565140 exim4-daemon-heavy-dbgsym_4.96-15+deb12u2_armel.deb 03c16d290c5d1314298afdaf019f91d091fb03a4 598588 exim4-daemon-heavy_4.96-15+deb12u2_armel.deb bec9da1e8734cc498a585d4c19f5e3f230d60dc1 1371744 exim4-daemon-light-dbgsym_4.96-15+deb12u2_armel.deb 087f7aadc9fbdef9e254b0a1541be1d3834806fd 543732 exim4-daemon-light_4.96-15+deb12u2_armel.deb 8fd2b55e0aa0fd9eafe9eea105c12645d6b80c71 37732 exim4-dev_4.96-15+deb12u2_armel.deb 4f239d1a2c3b1702c0ebc06bef2d69af8853b74b 10868 exim4_4.96-15+deb12u2_armel-buildd.buildinfo 58ccf50f741b5c85b182691ca77e7b85e6991935 135048 eximon4-dbgsym_4.96-15+deb12u2_armel.deb d75f77a4ed3084b5f1ef8757949d5cbaf93fe6dc 69600 eximon4_4.96-15+deb12u2_armel.deb Checksums-Sha256: f271ca084f4c40eb49c0c0e5d69ea58a7c59deef93bf795a6a6371278e53c07f 127340 exim4-base-dbgsym_4.96-15+deb12u2_armel.deb 47591a36bdadd42440b853aace4e8171e4d4d18b1334309cd8763ae374779fdf 1111288 exim4-base_4.96-15+deb12u2_armel.deb d1bdd8d3046ab246e0672d8dbbb922a38fadee2ac16b4e51f568147468287f5f 1565140 exim4-daemon-heavy-dbgsym_4.96-15+deb12u2_armel.deb 605deb4435e8d48392dbd472b28e9b5d1f82f8269db386288f816f123b7cf972 598588 exim4-daemon-heavy_4.96-15+deb12u2_armel.deb 3a9f2620da2bf1f50f4b13c1e24e6136ebf6d1c11e087e4f6c3f31144bce00f7 1371744 exim4-daemon-light-dbgsym_4.96-15+deb12u2_armel.deb cccaaad50b56f8a08279386df190701e3deb12bb587641f6466fa27e03012383 543732 exim4-daemon-light_4.96-15+deb12u2_armel.deb 80d9355528af31fd3b4074a4faf14742d8114cf0ac0adebdf589a5db38269554 37732 exim4-dev_4.96-15+deb12u2_armel.deb 75e26f74d92b59b971300d4ecaf00bef6ecf4068087d41d3a7a8fdc9be5019a0 10868 exim4_4.96-15+deb12u2_armel-buildd.buildinfo a679c36e2d2485fe87adc7e2760ddda104007d1495524c741b2e0770e9ee5c50 135048 eximon4-dbgsym_4.96-15+deb12u2_armel.deb 52aa9b264f20891bd982bf355e96a9bb47881b9807ad5451322ef3c9761c0a7b 69600 eximon4_4.96-15+deb12u2_armel.deb Files: b8a7efe27bc954555825a29081a4edcd 127340 debug optional exim4-base-dbgsym_4.96-15+deb12u2_armel.deb b6402319e91cfb2be1450bf2f4711a13 1111288 mail optional exim4-base_4.96-15+deb12u2_armel.deb b5db10280cea7de11478b55cd732e7f4 1565140 debug optional exim4-daemon-heavy-dbgsym_4.96-15+deb12u2_armel.deb 3f0203b82b0dfb833ce92f48473dd1d9 598588 mail optional exim4-daemon-heavy_4.96-15+deb12u2_armel.deb 1f7ddcf22572d29c1df50346cbac8d89 1371744 debug optional exim4-daemon-light-dbgsym_4.96-15+deb12u2_armel.deb c296a6a0ce955001457accf553345b9a 543732 mail optional exim4-daemon-light_4.96-15+deb12u2_armel.deb f125df5972a610ea5db27c10f636e2e2 37732 mail optional exim4-dev_4.96-15+deb12u2_armel.deb 7af45752a74ee3e2b7bc8c099bef83de 10868 mail standard exim4_4.96-15+deb12u2_armel-buildd.buildinfo cef486a7bffb683b5f7f5fa8fc2104fc 135048 debug optional eximon4-dbgsym_4.96-15+deb12u2_armel.deb 636c6717f92697d78b259059486027bf 69600 mail optional eximon4_4.96-15+deb12u2_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEExwLooY4pOBEnRvQOhwvc65q7iiUFAmUZyQEACgkQhwvc65q7 iiWZIQ/8DSbyGKdT98hoK+65hXW7pXXz6ye8IC4asxzMgkUbx8SMnmWMzU3KHgHE KJc2GqEZvfmR/SW7FbDBI9ww2yV/UF/mUezVY8ouR/GRjd/CRFSuManNQiaG14TU I6LX6RPouK8gCwJkCE9XKk7t7etNLZlNeTu95fT1qqtxjR2i3/j9MPItGe0/I6aJ KekwCOtc3El1XE7LQbnAIeU5mFHzumkRwVAyZO2zZMdwmSlJ+Z7x+qAqH7xw1vPq xYztT/UCZFJBaPla9bkIR4ZtMDK6u8nckNmHeDcU2XP7emkadFECdRALv0bA8C/y iV9HekkyOWxH6dp6+veggjQ5Xp7qNw26LC1wmgSz8ttz5LS9w3ZduXGylU4QkKrh DM1fW4Ec6Xn1NuMx/C9oSlmPTjXEd7c1EBB6lyANaEdwpfELWZYj3FPNsmap+5r5 gFEZv9EWcXadSmXYgebunQtqK0XjMzmrhbBaoxZLwcMelGbbY+euFVJNWj3dWoD7 +ZNOvNH4o3Axg9StVSIuUwMAlofI4jI1gp3gyht/QYLsq832YjLOhf/FbU8lQ+NQ bTEljJdF7RjWD2cEeZA0IjbqxL6H8/TTZDvG/HpeBoJgJywTtYEFN4FtUuvNsLia rjUvAs+7R2vLKvjYMN5a+o2ytuvLyex1G8gi7hYYSgRFtdI5P8w= =l0Zf -----END PGP SIGNATURE-----