Your message dated Wed, 20 Dec 2006 16:32:04 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#403605: fixed in exim4 4.63-12
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Package: exim4-config
Version: 4.63-11
Severity: grave
Justification: email was bounced, thus lost to me
I have a wildcard MX *.wurtel.net, and that's filled in
/etc/exim4/update-exim4.conf.conf accordingly:
dc_other_hostnames='wurtel.net : *.wurtel.net : ...'
However, I noticed once that instead of *.wurtel.net, the generated
config file had db.wurtel.net. At the time I passed that off as an
error on my part, as when running update-exim4.conf again it was
correct.
Today I again noticed in the exim logs that a lot of mail was being
bounced due to "relay not permitted". Again I saw db.wurtel.net instead
of *.wurtel.net, and now I was sure I hadn't made any mistake.
Upon investigation it appeared that if a file exists in the current
directory that matches *.wurtel.net when update-exim4.conf is run, the
filename is filled into the config file, hence corrupting it :-(
update-exim4.conf echoes the value of dc_other_hostnames without any
quoting!
I could imagine that this might even be used to bypass security if a
malicious user could get an admin to run update-exim4.conf in a
directory with specially prepared filenames.
I recommend that a fix is included in the version that's to go into
etch.
Paul Slootman
--- End Message ---
--- Begin Message ---
Source: exim4
Source-Version: 4.63-12
We believe that the bug you reported is fixed in the latest version of
exim4, which is due to be installed in the Debian FTP archive:
exim4-base_4.63-12_i386.deb
to pool/main/e/exim4/exim4-base_4.63-12_i386.deb
exim4-config_4.63-12_all.deb
to pool/main/e/exim4/exim4-config_4.63-12_all.deb
exim4-daemon-heavy-dbg_4.63-12_i386.deb
to pool/main/e/exim4/exim4-daemon-heavy-dbg_4.63-12_i386.deb
exim4-daemon-heavy_4.63-12_i386.deb
to pool/main/e/exim4/exim4-daemon-heavy_4.63-12_i386.deb
exim4-daemon-light-dbg_4.63-12_i386.deb
to pool/main/e/exim4/exim4-daemon-light-dbg_4.63-12_i386.deb
exim4-daemon-light_4.63-12_i386.deb
to pool/main/e/exim4/exim4-daemon-light_4.63-12_i386.deb
exim4-dbg_4.63-12_i386.deb
to pool/main/e/exim4/exim4-dbg_4.63-12_i386.deb
exim4_4.63-12.diff.gz
to pool/main/e/exim4/exim4_4.63-12.diff.gz
exim4_4.63-12.dsc
to pool/main/e/exim4/exim4_4.63-12.dsc
exim4_4.63-12_all.deb
to pool/main/e/exim4/exim4_4.63-12_all.deb
eximon4_4.63-12_i386.deb
to pool/main/e/exim4/eximon4_4.63-12_i386.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Marc Haber <[EMAIL PROTECTED]> (supplier of updated exim4 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 20 Dec 2006 14:23:57 +0100
Source: exim4
Binary: exim4-daemon-light-dbg exim4-daemon-custom exim4-daemon-heavy exim4-dbg
exim4-daemon-heavy-dbg exim4-config exim4-daemon-custom-dbg eximon4 exim4-base
exim4 exim4-daemon-light
Architecture: source i386 all
Version: 4.63-12
Distribution: unstable
Urgency: low
Maintainer: Exim4 Maintainers <[EMAIL PROTECTED]>
Changed-By: Marc Haber <[EMAIL PROTECTED]>
Description:
exim4 - metapackage to ease exim MTA (v4) installation
exim4-base - support files for all exim MTA (v4) packages
exim4-config - configuration for the exim MTA (v4)
exim4-daemon-heavy - exim MTA (v4) daemon with extended features, including
exiscan-ac
exim4-daemon-heavy-dbg - debugging symbols for the exim MTA (v4) packages
exim4-daemon-light - lightweight exim MTA (v4) daemon
exim4-daemon-light-dbg - debugging symbols for the exim MTA (v4) packages
exim4-dbg - debugging symbols for the exim MTA (v4) packages
eximon4 - monitor application for the exim MTA (v4) (X11 interface)
Closes: 402541 403199 403605
Changes:
exim4 (4.63-12) unstable; urgency=low
.
* exim4-base.postinst: Redirect command -v's stdout to /dev/null
* update-exim4.conf: add lots of quoting to increase robustness.
Thanks to Paul Slootman. Closes: #403605
* Debconf templates translation updates and new translations:
- Esperanto
- Norwegian Nynorsk (HÃ¥vard Korsvoll).
- Punjabi (A.S. Alam).
- Malayalam (Praveen A). Closes: #402541
- Italian (typos corrected by Davide Viti). Closes: #403199
- see Last-Translator for rewards)
Files:
c326082d232df0989ca2427907edea4c 1160 mail standard exim4_4.63-12.dsc
41e5651d144a4b23ba7617a869af9571 537686 mail standard exim4_4.63-12.diff.gz
6d75cc052481042fed779660e4c1b8d2 933466 mail standard
exim4-base_4.63-12_i386.deb
da1b00d327af7bb23f17d49d8e74cd51 91880 mail optional eximon4_4.63-12_i386.deb
903ccc964dd4c63006f905b7eafe3638 412462 mail standard
exim4-daemon-light_4.63-12_i386.deb
7dd17ffefda18e912e04373c0c79746b 465746 mail optional
exim4-daemon-heavy_4.63-12_i386.deb
d2e5f0c02c8897c8f4a188bd7388d841 616406 mail extra
exim4-daemon-light-dbg_4.63-12_i386.deb
cfec0f8332b85db1ed469fde86652850 696856 mail extra
exim4-daemon-heavy-dbg_4.63-12_i386.deb
007bc1c7aec57003d2b522375b4aa2a5 240836 mail extra exim4-dbg_4.63-12_i386.deb
0bb9ead0493e453d97ae5aa6ff278daa 320666 mail standard
exim4-config_4.63-12_all.deb
27c50e2033313359b7bb9969ece9d07d 2078 mail standard exim4_4.63-12_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
iD8DBQFFiUOYgZalRGu6PIQRArjcAJ9ht882gfo6qHUIDWc/ripNUTtd/ACeP01T
XWMqMYWWN11DizunnCEgu/o=
=AUbL
-----END PGP SIGNATURE-----
--- End Message ---
