[Bug 713855] Re: Merge exim4 4.74-1 (main) from Debian experimental (main)

2011-02-09 Thread Launchpad Bug Tracker
This bug was fixed in the package exim4 - 4.74-1ubuntu1

---
exim4 (4.74-1ubuntu1) natty; urgency=low

  * Merge from debian experimental.  Remaining changes: (LP: #713855)
- debian/patches/71_exiq_grep_error_on_messages_without_size.patch:
  + Improve handling of broken messages when "exim4 -bp" (mailq)
reports lines without size info. (Closes: #528625)
- debian/control: Don't declare a Provides: default-mta; in Ubuntu,
  we want postfix to be the default.
- debian/{control,rules}: Add and enable hardened build for PIE.
  (Closes: #542726)
  * Update 71_exiq_grep_error_on_messages_without_size.patch to get way
which upstream has fixed it. Probably it can be dropped with next
upstream release.
  * This upload fixes CVE: (LP: #708023)
- CVE-2011-0017

exim4 (4.74-1) experimental; urgency=low

  * 4.74 release, should build on hurd again.
  * Fix some lintian --pedantic issues: copyright-refers-to-symlink-license
maintainer-script-without-set-e debian-control-has-unusual-field-spacing

exim4 (4.74~rc2-1) experimental; urgency=low

  * In spf example use spf-tools-perl's spfquery instead of the one from
libmail-spf-query-perl. Do not try to use unimplemented best-guess
support. Update Suggests accordingly. Closes: #608336
  * Add headers in ACL by using the add_header modifier instead of "message".
(This modifier has been available since 4.61.) Closes: #609308
  * New upstream version.
+ includes the fix for CVE-2011-0017
+ If a non-debug daemon was invoked with a non-whitelisted macro, then
  logs from after attempting delivery would be silently lost, including
  for successful delivery.  This log-loss bug was introduced in 4.73
  as part of the security lockdown. Closes: #610611
+ Update some patches.
 -- Artur RonaWed, 09 Feb 2011 21:31:35 +0100

** Changed in: exim4 (Ubuntu)
   Status: Fix Committed => Fix Released

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2011-0017

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to exim4 in ubuntu.
https://bugs.launchpad.net/bugs/713855

Title:
  Merge exim4 4.74-1 (main) from Debian experimental (main)

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 713855] Re: Merge exim4 4.74-1 (main) from Debian experimental (main)

2011-02-09 Thread Kees Cook
Thanks! I've uploaded this merge now.

** Changed in: exim4 (Ubuntu)
   Status: Incomplete => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to exim4 in ubuntu.
https://bugs.launchpad.net/bugs/713855

Title:
  Merge exim4 4.74-1 (main) from Debian experimental (main)

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 713855] Re: Merge exim4 4.74-1 (main) from Debian experimental (main)

2011-02-09 Thread Artur Rona
I know about new way created by upstream, but I submitted debdiff before
upstream patch. I wanted get it by merging next upstream release, but
that's right, we can get it right now and drop with merging next
upstream release. However, I updated everything and fresh debdiff is in
attachments.

** Patch removed: "debian-ubuntu.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/exim4/+bug/713855/+attachment/1832999/+files/debian-ubuntu.debdiff

** Patch added: "debian-ubuntu.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/exim4/+bug/713855/+attachment/1840408/+files/debian-ubuntu.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to exim4 in ubuntu.
https://bugs.launchpad.net/bugs/713855

Title:
  Merge exim4 4.74-1 (main) from Debian experimental (main)

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 713855] Re: Merge exim4 4.74-1 (main) from Debian experimental (main)

2011-02-09 Thread Kees Cook
This looks pretty good. Can you change
71_exiq_grep_error_on_messages_without_size.patch to use the upstream
fix (from that report), drop the "From" (this should have been Author:
with Daniel van Eeden) and add an Origin: line, and finally mention the
debian bug # in the changelog?  Thanks!


** Changed in: exim4 (Ubuntu)
   Status: Confirmed => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to exim4 in ubuntu.
https://bugs.launchpad.net/bugs/713855

Title:
  Merge exim4 4.74-1 (main) from Debian experimental (main)

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 713855] Re: Merge exim4 4.74-1 (main) from Debian experimental (main)

2011-02-06 Thread Brian Murray
** Tags added: patch

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to exim4 in ubuntu.
https://bugs.launchpad.net/bugs/713855

Title:
  Merge exim4 4.74-1 (main) from Debian experimental (main)

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 713855] Re: Merge exim4 4.74-1 (main) from Debian experimental (main)

2011-02-05 Thread Artur Rona
Want to be sponsored by Kees Cook!

** Changed in: exim4 (Ubuntu)
   Importance: Undecided => Medium

** Changed in: exim4 (Ubuntu)
   Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to exim4 in ubuntu.
https://bugs.launchpad.net/bugs/713855

Title:
  Merge exim4 4.74-1 (main) from Debian experimental (main)

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs


[Bug 713855] Re: Merge exim4 4.74-1 (main) from Debian experimental (main)

2011-02-05 Thread Artur Rona

** Patch added: "debian-ubuntu.debdiff"
   
https://bugs.launchpad.net/ubuntu/+source/exim4/+bug/713855/+attachment/1832999/+files/debian-ubuntu.debdiff

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to exim4 in ubuntu.
https://bugs.launchpad.net/bugs/713855

Title:
  Merge exim4 4.74-1 (main) from Debian experimental (main)

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs