-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 01 Jan 2024 17:58:00 +0100
Source: exim4
Architecture: source
Version: 4.96-15+deb12u4
Distribution: bookworm-security
Urgency: high
Maintainer: Exim4 Maintainers <pkg-exim4-maintain...@lists.alioth.debian.org>
Changed-By: Andreas Metzler <ametz...@debian.org>
Closes: 1059387
Changes:
exim4 (4.96-15+deb12u4) bookworm-security; urgency=high
.
* 77_CVE-2023-51766_4.97.1-release.diff from 4,97.1 release: Refuse to
accept a line "dot, LF" as end-of-DATA unless operating in LF-only mode
(as detected from the first header line) to fix smtp-smuggling
(CVE-2023-51766). Closes: #1059387
Checksums-Sha1:
aba5d60e9e647b2d6061426d2f230b5e3dc1fc3f 2923 exim4_4.96-15+deb12u4.dsc
0930b997951cdb620ecf5dcc6665535a07de92de 507568
exim4_4.96-15+deb12u4.debian.tar.xz
Checksums-Sha256:
29e1d1614384cd3e1e2994f10804d4a60f27437799aecff0794c04eb2d360c1a 2923
exim4_4.96-15+deb12u4.dsc
a70c57cabdf201525212a31ca1dc0f7b11ad633977a364e6a7ee78a365b463bb 507568
exim4_4.96-15+deb12u4.debian.tar.xz
Files:
3491efd47bedd052f8421966b0081cb8 2923 mail standard exim4_4.96-15+deb12u4.dsc
a3b6b27a71decadcff2e372485ec58df 507568 mail standard
exim4_4.96-15+deb12u4.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=8Geu
-----END PGP SIGNATURE-----
