[ubuntu/plucky-proposed] exim4 4.98-4ubuntu1 (Accepted)

[Simon Quigley]

exim4 (4.98-4ubuntu1) plucky; urgency=medium

  * Merge with Debian Unstable. Remaining changes:
    - Show Ubuntu distribution in SMTP banner
      + d/p/fix_smtp_banner.patch: Show Ubuntu distribution
        in SMTP banner.
      + d/control: Build-Depends on lsb-release to detect Distribution.
    - Disable external SPF support to avoid Build-Depends on libspf2-dev
      (only available in universe). SPF can still be implemented via
      spf-tools-perl, as documented in exim4.conf.template. This reverts
      Vcs-Git commit 494f1fe, first released in 4.95~RC0-1.
      (LP #1952738)
      + d/control: drop Build-Depends on libspf2-dev.
      + d/EDITME.exim4-heavy.diff: disable support for libspf2.
      + d/d/c/a/30_exim4-config_check_rcpt: restore SPF logic based
        on spfquery.mail-spf-perl from spf-tools-perl, but without
        the previously supported helo detection.

exim4 (4.98-4) unstable; urgency=high

  * Cherry-pick patches from upstream git master:
    + 79_Dovecot-fix-protocol-sequence-for-version-2.4.0.patch (Compliance
      with upcoming dovecot v1.3 auth protocol)
  * Use default 550 message in lowuid_aliases router ("Unrouteable address"
    instead of "no mail to system accounts") to avoid disclosing information on
    installed packages. Closes: #1092910
  * 81_Squashed-from-fix-cve-2025-26794-fixes-CVE-26794.patch: Upgrade to
    4.98.1, fixing CVE-2025-26794. This is a SQL injection for the
    (Sqlite-)hints database with ETRN. Debian binaries do not yet use sqlite
    for the hints DB so this just only affects users building their own
    binaries from sources and switching to sqlite-hints-DB.

Date: Tue, 04 Mar 2025 20:37:23 -0600
Changed-By: Simon Quigley <tsimonq2 at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/exim4/4.98-4ubuntu1
-------------- next part --------------
Format: 1.8
Date: Tue, 04 Mar 2025 20:37:23 -0600
Source: exim4
Built-For-Profiles: noudeb
Architecture: source
Version: 4.98-4ubuntu1
Distribution: plucky
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Simon Quigley <tsimonq2 at ubuntu.com>
Closes: 1092910
Changes:
 exim4 (4.98-4ubuntu1) plucky; urgency=medium
 .
   * Merge with Debian Unstable. Remaining changes:
     - Show Ubuntu distribution in SMTP banner
       + d/p/fix_smtp_banner.patch: Show Ubuntu distribution
         in SMTP banner.
       + d/control: Build-Depends on lsb-release to detect Distribution.
     - Disable external SPF support to avoid Build-Depends on libspf2-dev
       (only available in universe). SPF can still be implemented via
       spf-tools-perl, as documented in exim4.conf.template. This reverts
       Vcs-Git commit 494f1fe, first released in 4.95~RC0-1.
       (LP #1952738)
       + d/control: drop Build-Depends on libspf2-dev.
       + d/EDITME.exim4-heavy.diff: disable support for libspf2.
       + d/d/c/a/30_exim4-config_check_rcpt: restore SPF logic based
         on spfquery.mail-spf-perl from spf-tools-perl, but without
         the previously supported helo detection.
 .
 exim4 (4.98-4) unstable; urgency=high
 .
   * Cherry-pick patches from upstream git master:
     + 79_Dovecot-fix-protocol-sequence-for-version-2.4.0.patch (Compliance
       with upcoming dovecot v1.3 auth protocol)
   * Use default 550 message in lowuid_aliases router ("Unrouteable address"
     instead of "no mail to system accounts") to avoid disclosing information on
     installed packages. Closes: #1092910
   * 81_Squashed-from-fix-cve-2025-26794-fixes-CVE-26794.patch: Upgrade to
     4.98.1, fixing CVE-2025-26794. This is a SQL injection for the
     (Sqlite-)hints database with ETRN. Debian binaries do not yet use sqlite
     for the hints DB so this just only affects users building their own
     binaries from sources and switching to sqlite-hints-DB.
Checksums-Sha1:
 ae726778c681afb977ef0da2e85147502f0617d9 2984 exim4_4.98-4ubuntu1.dsc
 a42927dacc81ff14831f5417c9ec451d56fb3f11 491284 exim4_4.98-4ubuntu1.debian.tar.xz
 2bee7ac861442b3bb81a90f8798b53bb05028ccc 9951 exim4_4.98-4ubuntu1_source.buildinfo
Checksums-Sha256:
 1b67fd328488f9f278c541cc0f05f516f6b3b8747510e9eba0f2fd4a784da4b9 2984 exim4_4.98-4ubuntu1.dsc
 8876e4e5c1badbef352c2c4ad6f0cf925815586ac093745326606230a2b66067 491284 exim4_4.98-4ubuntu1.debian.tar.xz
 e3672c8c7e1d8add05c282827480ac8d1a30aa73fac9bf4bfbe55d2c7c739f72 9951 exim4_4.98-4ubuntu1_source.buildinfo
Files:
 6efc0659cc9ac66ee04bbbb45ee4aacc 2984 mail standard exim4_4.98-4ubuntu1.dsc
 fc8459926f34b0f021275c506713c40f 491284 mail standard exim4_4.98-4ubuntu1.debian.tar.xz
 803baaf23bc9158f5b143c4cfca9fa35 9951 mail standard exim4_4.98-4ubuntu1_source.buildinfo
Original-Maintainer: Exim4 Maintainers <pkg-exim4-maintainers at lists.alioth.debian.org>