[Bug 609620] Re: Merge exim4 4.72-1 (main) from Debian unstable (main)

[Artur Rona]

** Patch added: "debian-ubuntu.debdiff"
   http://launchpadlibrarian.net/52458803/debian-ubuntu.debdiff

** Changed in: exim4 (Ubuntu)
       Status: New => Confirmed

-- 
Merge exim4 4.72-1 (main) from Debian unstable (main)
https://bugs.launchpad.net/bugs/609620
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is a direct subscriber.

Status in “exim4” package in Ubuntu: Confirmed

Bug description:
Binary package hint: exim4

 exim4  (4.72-1) unstable; urgency=low

   * New upstream release. (Identical to the git snapshot previously
     uploaded to experimental.)

 -- Andreas Metzler <ametzler at debian.org>  Thu, 03 Jun 2010 17:42:52 +0200
exim4 (4.72~20100529-1) experimental; urgency=low

   * Git snapshot 20100529.
     + Fix documentation for exipick -bpra. #574778
     + CVE-2010-2024: Protect against symlink attacks on MBX lockfile in /tmp.
       (Debian's default configuration does not use MBX format, but the
       exim4-daemon-heavy binary supports MBX.)
     + CVE-2010-2023 Prevent hardlink attack on mbox sticky mail directory.
       (Probably not relevant for Debian systems at all, since the mail spool
       is 2775 root:mail.)
     + Dovecot authenticator ignores unknown keywords, making it compatible
       with version 1.1 of Dovecot authentication protocol. (= dovecot 2.0).
     See Changelog for complete list.
    * Drop patches included upstream: 36_typoinexipick.diff
      20_PDKIM-Upgrade-PolarSSL.diff.

 -- Andreas Metzler <ametzler at debian.org>  Sun, 30 May 2010 14:01:52 +0200
exim4 (4.71-4) unstable; urgency=low

   * Drop unneeded lintian overrides.
     + description-contains-homepage
     + debian/source.lintian-overrides dbg-package-missing-depends exim4-dbg.
     + partially-translated-question
     + maintainer-script-needs-depends-on-update-inetd
     + possible-bashism-in-maintainer-script
     + binary-without-manpage
     + possible-debconf-note-abuse
     + changelog-not-compressed-with-max-compression
   * Lintian informational hints:
     + hyphen-used-as-minus-sign. debian/manpages/exim4-config_files.5
       debian/manpages/update-exim4.conf.8 debian/manpages/exiwhat.8
   * Use dh_lintian.
   * Fix sourcing of lsb-functions in init-script. Test for existence of
     /usr/lib/exim4/exim4 first. Unconditionally read /lib/lsb/init-functions.
     If they are not present the package's dependencies are not installed.
     Bump dependency on lsb-base to 3.0-6. (log_action_*)
   * Update reference to spec.txt in README.Debian. Closes: #568051
   * Invoke spfquery as spfquery.mail-spf-query-perl. There are three different
     implementations of spfquery in Debian, with incompatible commandline
     switches and different exit codes. Closes: #573956

 -- Andreas Metzler <ametzler at debian.org>  Thu, 25 Mar 2010 17:34:30 +0100