Skip to contentSkip to conversation

package/exim: security bump to version 4.92.2

PATCH New Peter Korsgaard 2 participants 3 messages Sep 6, 2019 – Sep 17, 2019

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 package/exim: security bump to version 4.92.2

Fixes CVE-2019-15846: Local or remote attacker can execute programs with root privileges

For details, see the advisory:
https://exim.org/static/doc/security/CVE-2019-15846.txt

---
 package/exim/exim.hash | 2 +-
 package/exim/exim.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)
package/exim/exim.hash +1 -1
index a75156a312..0d11683c00 100644
@@ -1,3 +1,3 @@
 # Locally calculated after checking pgp signature
-sha256 2c64a871dd7ac464c14df8eb0dcf5cf766b46fff5af0316aaa4bf0268dde24b4  exim-4.92.1.tar.xz
+sha256 01d7ae481d03ff408f8e54fd9b250324ea5ddabc83b1db32917c7f27a096a654  exim-4.92.2.tar.xz
 sha256 49240db527b7e55b312a46fc59794fde5dd006422e422257f4f057bfd27b3c8f  LICENCE
package/exim/exim.mk +1 -1
index 577f22b366..b6a8566ce7 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-EXIM_VERSION = 4.92.1
+EXIM_VERSION = 4.92.2
 EXIM_SOURCE = exim-$(EXIM_VERSION).tar.xz
 EXIM_SITE = https://ftp.exim.org/pub/exim/exim4
 EXIM_LICENSE = GPL-2.0+
Signature · 1 line
2.11.0
#1 lore raw

PATCH 1/1 package/exim: security bump to version 4.92.2

Quoted 11 lines · On Fri, 6 Sep 2019 13:34:46 +0200 Peter Korsgaard <[email protected]> wrote:

Fixes CVE-2019-15846: Local or remote attacker can execute programs with root privileges

For details, see the advisory:
https://exim.org/static/doc/security/CVE-2019-15846.txt

---
 package/exim/exim.hash | 2 +-
 package/exim/exim.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

Applied to master, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
#2 lore raw

PATCH 1/1 package/exim: security bump to version 4.92.2

In reply to Peter Korsgaard
Quoted 9 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Peter" == Peter Korsgaard <[email protected]> writes:

Fixes CVE-2019-15846: Local or remote attacker can execute programs with root privileges

For details, see the advisory:
https://exim.org/static/doc/security/CVE-2019-15846.txt

Committed to 2019.02.x, 2019.05.x and 2019.08.x, thanks.

Signature · 1 line
Bye, Peter Korsgaard