[ubuntu/quantal] exim4 4.80-3ubuntu1 (Accepted)
Clint Byrum
clint at ubuntu.com
Thu Jun 14 23:55:39 UTC 2012
exim4 (4.80-3ubuntu1) quantal; urgency=low
* Merge from Debian unstable. Remaining changes:
- debian/control: Don't declare a Provides: default-mta; in Ubuntu,
we want postfix to be the default.
exim4 (4.80-3) unstable; urgency=low
* Pull 75_openssl_sni.diff from upstream. - Segfault caused by NULL
dereference if Exim is built using OpenSSL, tls_sni is used and a
forced expansion failure is configured.
* Pull 76_tls_dh_min_bits.diff (and the corresponding doc change
77_docsfortls_dh_min_bits.diff) from upstream. Adds a new SMTP transport
option tls_dh_min_bits for setting the minimal size of DH parameters.
* Add macro TLS_DH_MIN_BITS for setting the tls_dh_min_bits smtp transport
option. Closes: #676563
* [lintian] Stop shipping empty directory /usr/share/exim4 in exim4-base.
exim4 (4.80-2) unstable; urgency=low
* [Brown paper bag] actually target unstable in changelog.
exim4 (4.80-1) experimental; urgency=low
* New upstream version, identical to rc7.
* Add a missing piece of documentation to update-exim4.conf.8. DCreadhost
is not only used for rewriting, in satellite setup it is also
the host where local mail is delivered to. (Thanks, Regid Ichira).
Closes: #675712
exim4 (4.80~rc7-1) experimental; urgency=low
* New upstream version.
* Let debian/EDITME.openssl.exim4-light.diff apply again.
exim4 (4.80~rc6-1) experimental; urgency=low
* Ship newly available GnuTLS-FAQ.txt in exim4-base.
* Upstream's handling of GnuTLS DH parameters has changed, hardcoded
parameters (from RFCs are used by default. See
/usr/share/doc/exim4-base/README.UPDATING* for details. Stop shipping
/usr/share/exim4/exim4_refresh_gnutls-params /usr/share/exim4/timeout.pl
and /var/spool/exim4/gnutls-params-2236.
exim4 (4.80~rc5-1) experimental; urgency=low
* New upstream version.
exim4 (4.80~rc4-1) experimental; urgency=low
* New upstream version.
+ Unfuzz 50_localscan_dlopen.dpatch
+ Drop 80_revert_stringformatprintf.diff, superseded upstream.
+ Default DH param size switched to 2236 for NSS compat. Update
generation script and shipped parameters.
exim4 (4.80~rc2-1) experimental; urgency=low
* Fix typo in retry/30_exim4-config (s/frequenzy/frequency/) (Thanks, Regid
Ichira). Closes: #646338
* dpkg-buildflags supersedes hardening-wrapper. set
DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow,+pie to use features enabled
by hardening-wrapper by default. Make sure to always set -Wall.
* List mapppings between debconf choices ("mail sent by smarthost; no local
mail" et al.) and corresponding values of the DC_eximconfig_configtype
macro in update-exim4.conf(8). Closes: #651883
* README.Debian.*: Correct documentation of the lowuid_aliases router. - The
macro is named FIRST_USER_ACCOUNT_UID instead of FIRST_USER_UID. (Thanks,
Yubao Liu) Closes: #653058
* add more verbose help to /etc/default/exim4. Closes: #653272
* Updated French debconf templates translation. (thanks for proofreading,
debian-l10n-french!) Closes: #668475
* Fix typo usualy in update-exim4.conf.8.
* Add source lintian override (debian/source/lintian-overrides) for
binaries-have-file-conflict exim4-daemon-heavy-dbg exim4-daemon-light-dbg.
*-daemon-dbg depends on the respective -daemon, and the daemon-packages
conflict with each other.
* New upstream version:
+ Unfuzz patches
+ Update 66_enlarge-dh-parameters-size.dpatch. This is now a noop if built
against gnutls >= 2.12.
+ Default DH param size is 2432, update generation script and shipped
parameters.
+ Unfuzz/update */EDITME/*. Update debian/example.conf.md5.
+ 80_revert_stringformatprintf.diff. Do not mark string_format() as
PRINTF_FUNCTION(3,4) to allow compilation with -Wformat
-Werror=format-security
+ Sets accept_8bitmime = true by default. Closes: #445013
+ Uses GnuTLS priority string for configuration. (See NEWS.Debian)
Closes: #624041
exim4 (4.77-1) unstable; urgency=low
* Fix typo in exim4-config_files.5. (Thanks, Regid Ichira) Closes: #645283
* New upstream stable release. (No major changes compared to rc4)
* Upload to unstable.
exim4 (4.77~rc4-1) experimental; urgency=low
* New upstream release candidate.
+ drop patches included in this release.
(80_gnutls_certificate_verify_peers2.diff 80_gnutls_initrc.diff
80_TLS1.2-and-TLS1.1-support.diff)
+ New expansion conditions, "inlist", "inlisti".
+ Exim no longer performs string expansion on the second string of
the match_* expansion conditions: "match_address", "match_domain",
"match_ip" & "match_local_part". Named lists can still be used. The
previous behavior made it too easy to create (remotely) vulnerable
configurations. A more detailed rationale and explanation can be found
on
https://lists.exim.org/lurker/message/20111003.122326.fbcf32b7.en.html
+ doc/pcrepattern.txt is not shipped anymore as part of the exim tarball
(and therefore the Debian package suite.)
* Make use of /usr/share/dpkg/buildflags.mk if available.
* Change build system to build each binary variant in a separate copy of
the source tree instead of re-using the copy and moving away the results
after build. The old approach stopped working since upstream added a
dependency on make all to make install. - As we were changing parts of
tree (Local/Makefile) after the build this caused an (incorrect) rebuild
on make install.
exim4 (4.76-4) experimental; urgency=low
* 80_TLS1.2-and-TLS1.1-support.diff (pulled from upstream GIT gnutls_fixes
branch): Enable TLS1.2 and TLS1.1
* 80_gnutls_certificate_verify_peers2.diff, 80_gnutls_initrc.diff (pulled
from upstream GIT gnutls_fixes branch): Use
gnutls_certificate_verify_peers2() instead of
gnutls_certificate_verify_peers(). The deprecated function was dropped in
GnuTLS 3.x. Closes: #624082
Date: Thu, 14 Jun 2012 15:28:08 -0700
Changed-By: Clint Byrum <clint at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/quantal/+source/exim4/4.80-3ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Thu, 14 Jun 2012 15:28:08 -0700
Source: exim4
Binary: exim4-base exim4-config exim4-daemon-light exim4 exim4-daemon-heavy exim4-daemon-custom eximon4 exim4-dbg exim4-daemon-light-dbg exim4-daemon-heavy-dbg exim4-daemon-custom-dbg exim4-dev
Architecture: source
Version: 4.80-3ubuntu1
Distribution: quantal
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Clint Byrum <clint at ubuntu.com>
Description:
exim4 - metapackage to ease Exim MTA (v4) installation
exim4-base - support files for all Exim MTA (v4) packages
exim4-config - configuration for the Exim MTA (v4)
exim4-daemon-custom - custom Exim MTA (v4) daemon with locally set features
exim4-daemon-custom-dbg - debugging symbols for the Exim MTA (v4) packages
exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
exim4-daemon-heavy-dbg - debugging symbols for the Exim MTA "heavy" daemon
exim4-daemon-light - lightweight Exim MTA (v4) daemon
exim4-daemon-light-dbg - debugging symbols for the Exim MTA "light" daemon
exim4-dbg - debugging symbols for the Exim MTA (utilities)
exim4-dev - header files for the Exim MTA (v4) packages
eximon4 - monitor application for the Exim MTA (v4) (X11 interface)
Closes: 445013 624041 624082 645283 646338 651883 653058 653272 668475 675712 676563
Changes:
exim4 (4.80-3ubuntu1) quantal; urgency=low
.
* Merge from Debian unstable. Remaining changes:
- debian/control: Don't declare a Provides: default-mta; in Ubuntu,
we want postfix to be the default.
.
exim4 (4.80-3) unstable; urgency=low
.
* Pull 75_openssl_sni.diff from upstream. - Segfault caused by NULL
dereference if Exim is built using OpenSSL, tls_sni is used and a
forced expansion failure is configured.
* Pull 76_tls_dh_min_bits.diff (and the corresponding doc change
77_docsfortls_dh_min_bits.diff) from upstream. Adds a new SMTP transport
option tls_dh_min_bits for setting the minimal size of DH parameters.
* Add macro TLS_DH_MIN_BITS for setting the tls_dh_min_bits smtp transport
option. Closes: #676563
* [lintian] Stop shipping empty directory /usr/share/exim4 in exim4-base.
.
exim4 (4.80-2) unstable; urgency=low
.
* [Brown paper bag] actually target unstable in changelog.
.
exim4 (4.80-1) experimental; urgency=low
.
* New upstream version, identical to rc7.
* Add a missing piece of documentation to update-exim4.conf.8. DCreadhost
is not only used for rewriting, in satellite setup it is also
the host where local mail is delivered to. (Thanks, Regid Ichira).
Closes: #675712
.
exim4 (4.80~rc7-1) experimental; urgency=low
.
* New upstream version.
* Let debian/EDITME.openssl.exim4-light.diff apply again.
.
exim4 (4.80~rc6-1) experimental; urgency=low
.
* Ship newly available GnuTLS-FAQ.txt in exim4-base.
* Upstream's handling of GnuTLS DH parameters has changed, hardcoded
parameters (from RFCs are used by default. See
/usr/share/doc/exim4-base/README.UPDATING* for details. Stop shipping
/usr/share/exim4/exim4_refresh_gnutls-params /usr/share/exim4/timeout.pl
and /var/spool/exim4/gnutls-params-2236.
.
exim4 (4.80~rc5-1) experimental; urgency=low
.
* New upstream version.
.
exim4 (4.80~rc4-1) experimental; urgency=low
.
* New upstream version.
+ Unfuzz 50_localscan_dlopen.dpatch
+ Drop 80_revert_stringformatprintf.diff, superseded upstream.
+ Default DH param size switched to 2236 for NSS compat. Update
generation script and shipped parameters.
.
exim4 (4.80~rc2-1) experimental; urgency=low
.
* Fix typo in retry/30_exim4-config (s/frequenzy/frequency/) (Thanks, Regid
Ichira). Closes: #646338
* dpkg-buildflags supersedes hardening-wrapper. set
DEB_BUILD_MAINT_OPTIONS := hardening=+bindnow,+pie to use features enabled
by hardening-wrapper by default. Make sure to always set -Wall.
* List mapppings between debconf choices ("mail sent by smarthost; no local
mail" et al.) and corresponding values of the DC_eximconfig_configtype
macro in update-exim4.conf(8). Closes: #651883
* README.Debian.*: Correct documentation of the lowuid_aliases router. - The
macro is named FIRST_USER_ACCOUNT_UID instead of FIRST_USER_UID. (Thanks,
Yubao Liu) Closes: #653058
* add more verbose help to /etc/default/exim4. Closes: #653272
* Updated French debconf templates translation. (thanks for proofreading,
debian-l10n-french!) Closes: #668475
* Fix typo usualy in update-exim4.conf.8.
* Add source lintian override (debian/source/lintian-overrides) for
binaries-have-file-conflict exim4-daemon-heavy-dbg exim4-daemon-light-dbg.
*-daemon-dbg depends on the respective -daemon, and the daemon-packages
conflict with each other.
* New upstream version:
+ Unfuzz patches
+ Update 66_enlarge-dh-parameters-size.dpatch. This is now a noop if built
against gnutls >= 2.12.
+ Default DH param size is 2432, update generation script and shipped
parameters.
+ Unfuzz/update */EDITME/*. Update debian/example.conf.md5.
+ 80_revert_stringformatprintf.diff. Do not mark string_format() as
PRINTF_FUNCTION(3,4) to allow compilation with -Wformat
-Werror=format-security
+ Sets accept_8bitmime = true by default. Closes: #445013
+ Uses GnuTLS priority string for configuration. (See NEWS.Debian)
Closes: #624041
.
exim4 (4.77-1) unstable; urgency=low
.
* Fix typo in exim4-config_files.5. (Thanks, Regid Ichira) Closes: #645283
* New upstream stable release. (No major changes compared to rc4)
* Upload to unstable.
.
exim4 (4.77~rc4-1) experimental; urgency=low
.
* New upstream release candidate.
+ drop patches included in this release.
(80_gnutls_certificate_verify_peers2.diff 80_gnutls_initrc.diff
80_TLS1.2-and-TLS1.1-support.diff)
+ New expansion conditions, "inlist", "inlisti".
+ Exim no longer performs string expansion on the second string of
the match_* expansion conditions: "match_address", "match_domain",
"match_ip" & "match_local_part". Named lists can still be used. The
previous behavior made it too easy to create (remotely) vulnerable
configurations. A more detailed rationale and explanation can be found
on
https://lists.exim.org/lurker/message/20111003.122326.fbcf32b7.en.html
+ doc/pcrepattern.txt is not shipped anymore as part of the exim tarball
(and therefore the Debian package suite.)
* Make use of /usr/share/dpkg/buildflags.mk if available.
* Change build system to build each binary variant in a separate copy of
the source tree instead of re-using the copy and moving away the results
after build. The old approach stopped working since upstream added a
dependency on make all to make install. - As we were changing parts of
tree (Local/Makefile) after the build this caused an (incorrect) rebuild
on make install.
.
exim4 (4.76-4) experimental; urgency=low
.
* 80_TLS1.2-and-TLS1.1-support.diff (pulled from upstream GIT gnutls_fixes
branch): Enable TLS1.2 and TLS1.1
* 80_gnutls_certificate_verify_peers2.diff, 80_gnutls_initrc.diff (pulled
from upstream GIT gnutls_fixes branch): Use
gnutls_certificate_verify_peers2() instead of
gnutls_certificate_verify_peers(). The deprecated function was dropped in
GnuTLS 3.x. Closes: #624082
Checksums-Sha1:
70551c76ac93975135214d46cb93155438e87ef8 2556 exim4_4.80-3ubuntu1.dsc
ba9b78b9dfab48f45409ab7c1c94ad085347899d 1649827 exim4_4.80.orig.tar.bz2
2437b72172681c2ad7f94559603f1ebab104185b 575902 exim4_4.80-3ubuntu1.debian.tar.gz
Checksums-Sha256:
75c15b02ae1871a4e561462be2edb77f2d9be3a0cd37f23e6a6dbb526952ee7d 2556 exim4_4.80-3ubuntu1.dsc
787b6defd37fa75311737bcfc42e9e2b2cc62c5d027eed35bb7d800b2d9a0984 1649827 exim4_4.80.orig.tar.bz2
52801b95e4d7a9060735fa2bf24451d86d214b6093cd7cf96c4978721f1a283a 575902 exim4_4.80-3ubuntu1.debian.tar.gz
Files:
282f961b239249ea3d45c00daac8b3bf 2556 mail standard exim4_4.80-3ubuntu1.dsc
de93a242e9e148de28d67056e5c1b34f 1649827 mail standard exim4_4.80.orig.tar.bz2
ab6e4cd09932fe33610d6f8b088cd503 575902 mail standard exim4_4.80-3ubuntu1.debian.tar.gz
Original-Maintainer: Exim4 Maintainers <pkg-exim4-maintainers at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
iQEcBAEBAgAGBQJP2nlmAAoJEFOMB2b0vLOOlKAH/A4KEh5uswK2qVb6gymq40Zc
S2QPCc8gW/Z7NnrOKqGC6oh37zwKZvR06LXN/gS4BtNfnVcc3ObHhPuAIa24fKYQ
Arc4uja58dEUU5bV5AvffDXgHxmIlphmdHivtkHEi1c9vcHFChD1nAZIyRNS4KyG
X1Ea4693Yl41ZIxugYH6TuqIiyfsYdidlViCOXmQ2NLk2wSYVjM6vQQBIo82xCpZ
xbl4zf3e+ewO/RllFTciaKQpunt0WBq3WIV7WkS1neFJkWRwOiUqK7oKtYAmydgo
DaQRde3iIXb1EdOROduJoqh7Xxws98oQM3f6q/GU1mLwwmkSrY6/YIroUDOEJxE=
=fcAT
-----END PGP SIGNATURE-----
More information about the Quantal-changes
mailing list