Your message dated Mon, 19 Jul 2021 11:49:44 +0000
with message-id <[email protected]>
and subject line Bug#985997: fixed in exim4 4.95~RC0-1
has caused the Debian Bug report #985997,
regarding exim4: possible formatting bug: exim4 creates file with %s in file
name
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
985997: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985997
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: exim4
Version: 4.92-8+deb10u5
Severity: minor
Dear Maintainer,
After installing Debian 10.9, I've noticed this denial (due to my own
"WIP" AppArmor profile applied):
```
type=AVC msg=audit(1616860912.170:123): apparmor="DENIED"
operation="mknod" profile="exim4" name="/var/spool/exim4/%s.X0JzJon"
pid=3530 comm="exim4" requested_mask="c" denied_mask="c" fsuid=106
ouid=106
```
I've noticed that file has `%s` in it's file name. It seems like a
formatting bug.
After allowing this write (and also writing
`/var/spool/exim4/gnutls-params-2048` later), exim4 seems to work
normally.
%s.X0JzJon generated file has "-----BEGIN DH PARAMETERS-----" in it's
%first line.
-- Package-specific info:
Exim version 4.92 #3 built 18-Mar-2021 08:10:15
Copyright (c) University of Cambridge, 1995 - 2018
(c) The Exim Maintainers and contributors in ACKNOWLEDGMENTS file, 2007 - 2018
Berkeley DB: Berkeley DB 5.3.28: (September 9, 2013)
Support for: crypteq iconv() IPv6 PAM Perl Expand_dlfunc GnuTLS
move_frozen_messages Content_Scanning DANE DKIM DNSSEC Event OCSP PRDR PROXY
SOCKS TCP_Fast_Open
Lookups (built-in): lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmjz
dbmnz dnsdb dsearch ldap ldapdn ldapm mysql nis nis0 passwd pgsql sqlite
Authenticators: cram_md5 cyrus_sasl dovecot plaintext spa tls
Routers: accept dnslookup ipliteral iplookup manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore/mbx autoreply lmtp pipe smtp
Malware: f-protd f-prot6d drweb fsecure sophie clamd avast sock cmdline
Fixed never_users: 0
Configure owner: 0:0
Size of off_t: 8
Configuration file search path is
/etc/exim4/exim4.conf:/var/lib/exim4/config.autogenerated
Configuration file is /var/lib/exim4/config.autogenerated
-- System Information:
Debian Release: 10.9
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: armhf (armv7l)
Kernel: Linux 4.19.0-16-armmp-lpae (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages exim4 depends on:
ii debconf [debconf-2.0] 1.5.71
ii exim4-base 4.92-8+deb10u5
ii exim4-daemon-heavy 4.92-8+deb10u5
exim4 recommends no packages.
exim4 suggests no packages.
-- debconf information excluded
--- End Message ---
--- Begin Message ---
Source: exim4
Source-Version: 4.95~RC0-1
Done: Andreas Metzler <[email protected]>
We believe that the bug you reported is fixed in the latest version of
exim4, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Metzler <[email protected]> (supplier of updated exim4 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 19 Jul 2021 13:10:00 +0200
Source: exim4
Architecture: source
Version: 4.95~RC0-1
Distribution: experimental
Urgency: low
Maintainer: Exim4 Maintainers <[email protected]>
Changed-By: Andreas Metzler <[email protected]>
Closes: 528344 702358 985997
Changes:
exim4 (4.95~RC0-1) experimental; urgency=low
.
* New upstream version.
+ Point watchfile to test subdirectory.
+ Drop superfluous patches.
+ Unfuzz 90_localscan_dlopen.dpatch
+ Unfuzz debian/EDITME.*
+ Fixup debian/minimaltest for new upstream.
+ New upstream default configuration does not abuse message_size_limit
option to reject overlong lines, there is a new main configuration
option - message_linelength_limit - which is set to 998 by default.
Mirror this change, now the IGNORE_SMTP_LINE_LENGTH_LIMIT only affects
the data ACL.
+ JH/48 Use a less bogus-looking filename for a temporary used for
DH-parameters for GnuTLS. Previously the name started "%s" which,
while not a bug, looked as if it might be one.
Closes: #985997
* Enable native SRS support. Closes: #702358
* Enable external SPF support in -heavy. Closes: #528344
* Cherrypick 75_04-Remove-the-must-helo-check-from-the-example-config.patch
from upstream git master. Drops checking for EHLO/HELO-received in ACL
since the new main config option hosts_require_helo defaults to '*'.
Adapt Debian configuration to mirror this.
* Drop versioned Breaks added in 4.94.2-6, they are superfluous due to
bumped upstream version.
* 77_01-Revert-GnuTLS-when-library-too-old-for-system-CA-bun.patch. Fix
regression (tls_verify_certificates defaulting to unset instead of
"system" for GnuTLS) by reverting respive upstream commit.
Checksums-Sha1:
d073af0956cf37b2554dddad36aaf148a3e42168 2928 exim4_4.95~RC0-1.dsc
fd0d337b04e5eda78a2c95f28e611f5302cd26f5 1862392 exim4_4.95~RC0.orig.tar.xz
0654e29780d479f286b9b0865404c592c327243d 488 exim4_4.95~RC0.orig.tar.xz.asc
e7027d73e71106c1d3610668b967d109721c018c 466068 exim4_4.95~RC0-1.debian.tar.xz
Checksums-Sha256:
45e13401951e418d5f4f7e4ff062fffe3a25340865f30a6aa0f687e4c83849bd 2928
exim4_4.95~RC0-1.dsc
558ff4307eec3b2d259c5d29c3b6ae50f7939971ef7a50615147d9c560782867 1862392
exim4_4.95~RC0.orig.tar.xz
9b9edd4a755a471239297e14870d9d394be6ff16d3688d8150e0654a08b732be 488
exim4_4.95~RC0.orig.tar.xz.asc
ae886397ab9b3637b9cdb64c14f6ed358091a2f25915634055e2641fab09df33 466068
exim4_4.95~RC0-1.debian.tar.xz
Files:
f5b53f8e32a34bdafdbfacd39f78e9b5 2928 mail standard exim4_4.95~RC0-1.dsc
15290185ea7fa95714fe04a18ff3ccae 1862392 mail standard
exim4_4.95~RC0.orig.tar.xz
fb3ad14622a8a86cb1c17c7ee3b9d6d0 488 mail standard
exim4_4.95~RC0.orig.tar.xz.asc
451b5b13029ed22da721e268032384f2 466068 mail standard
exim4_4.95~RC0-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=t8iF
-----END PGP SIGNATURE-----
--- End Message ---
