Accepted sa-exim 4.2.1-14+deb8u1 (source amd64) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 09 Jan 2020 13:39:06 +0100
Source: sa-exim
Binary: sa-exim
Architecture: source amd64
Version: 4.2.1-14+deb8u1
Distribution: jessie-security
Urgency: high
Maintainer: Magnus Holmgren <holmgren@debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
sa-exim - SpamAssassin filter for Exim
Changes:
sa-exim (4.2.1-14+deb8u1) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2019-19920:
It was found that sa-exim allows attackers to execute arbitrary code if
users are allowed to run custom rules. A similar issue was fixed in
spamassassin, CVE-2018-11805, which caused a functional regression in
sa-exim. This update restores the compatibility between spamassasin and
sa-exim. The security implications of sa-exim's greylisting function are
documented in /usr/share/doc/sa-exim/README.greylisting.gz.
Checksums-Sha1:
6c89fdc778bb1c959c73f41428ff44381e901a7b 1999 sa-exim_4.2.1-14+deb8u1.dsc
fc353ddf7a35876bd807182fa50a6786edfa494f 66884 sa-exim_4.2.1.orig.tar.gz
8cdcd3a224ba24b9641162f3c833520cd992c728 25380 sa-exim_4.2.1-14+deb8u1.debian.tar.xz
03dd44686ae60656fc23b918935a5603d9687c0e 71424 sa-exim_4.2.1-14+deb8u1_amd64.deb
Checksums-Sha256:
a6bd84e48ab753bdc2a01d5a9a5fbc2ed99e3d2fb5b7e86538bf69b6ab342c8a 1999 sa-exim_4.2.1-14+deb8u1.dsc
8cf52133eb2e97cf8e5dca4d4b318e641c7cebdaf92eecdf65d5562f004e4aab 66884 sa-exim_4.2.1.orig.tar.gz
3693e4d633069d64bb9403afe91e3ad533a2ebee2e87c6837001d8ee9c685d69 25380 sa-exim_4.2.1-14+deb8u1.debian.tar.xz
a7e7b6009a1edaacbf1deb3178f0d50c3b70b3353cc2219641bc4df5c2ef6f1b 71424 sa-exim_4.2.1-14+deb8u1_amd64.deb
Files:
1c0210b14b235686bbab6bbbcb36aaa1 1999 mail optional sa-exim_4.2.1-14+deb8u1.dsc
5fc371b5daeed7653b5abf904503f459 66884 mail optional sa-exim_4.2.1.orig.tar.gz
5337a38a1577971c4e4454d7d26bc2fa 25380 mail optional sa-exim_4.2.1-14+deb8u1.debian.tar.xz
42eea508006f63619df5738aa911b6a8 71424 mail optional sa-exim_4.2.1-14+deb8u1_amd64.deb
-----BEGIN PGP SIGNATURE-----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=UmyS
-----END PGP SIGNATURE-----
Reply to: