Exim 4.87.1 released
Heiko Schlittermann <[email protected]> Sun, 25 Dec 2016 11:41:15 +0100
| Newsgroups | gmane.mail.exim.announce,gmane.mail.exim.user |
|---|---|
| Organization | schlittermann -- internet & unix support |
| Message-ID | <[email protected]> |
--===============0812214662==
Content-Type: multipart/signed; micalg=pgp-sha512;
protocol="application/pgp-signature"; boundary="9hshNW4m6zn79FF/"
Content-Disposition: inline
--9hshNW4m6zn79FF/
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
I've uploaded Exim 4.87.1 to:
ftp://ftp.exim.org/pub/exim/exim4/old/
git://git.exim.org/exim.git (tag exim-4_87_1)
Whilst this release is superseeded by 4.88 already, you're urged
to upgrade to 4.87.1, if 4.88 isn't an option for you yet.
No features are added or removed. This release contains
just a fix for CVE-2016-9963
- Fix CVE-2016-9963 - Info leak from DKIM. When signing DKIM, if
either LMTP or PRDR was used for delivery, the key could appear in
logs. Additionally, if the experimental feature "DSN_INFO" was used,
it could appear in DSN messages (and be sent offsite).
For details about the CVE please see
https://exim.org/static/doc/CVE-2016-9963.txt
The release files for 4.87.1 are signed with the PGP key 0xF69376CE,
which has a uid "Heiko Schlittermann (HS12-RIPE) <[email protected]>".
Please use your own discretion in assessing what trust paths you might
have to this uid.
In case on any problems please contact us on [email protected]
or on the IRC channel #exim at freenode.
Best regards from Dresden/Germany
Viele Gr=C3=BC=C3=9Fe aus Dresden
Heiko Schlittermann
--=20
SCHLITTERMANN.de ---------------------------- internet & unix support -
Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
gnupg encrypted messages are welcome --------------- key ID: F69376CE -
! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -
--9hshNW4m6zn79FF/
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBCgAGBQJYX6JLAAoJEGoXY4qgRQz1MWkH/i797H7ZWO43uGMQrq3Ejd0t
2T7Aw7n8avSgN0sYdthQksCnuFLm+a+iguKCd1oydpeiP15k9Ik6ar4StaLzjJe7
FCvZHMsT3YSjNrWOCafOt7jG/kYKhqcdZyaumXpfZd3eMjL+BUhCnqhaCtLI6R2g
ciqS74+ZSGyjXryByGt2Cd3DxImsBOIodJ7oQbosFz0Qq7X/qBylo4IwqfoEcPS/
hG1eZspLzZfENzJtKSGTjNWv1qZw88Dplgy2uhu5IPbItv3L5bFLKLYXEX5zvXU9
/PcK3atLqMNtRdG1or2lWnEXYAL4gi3pBWkKdw9cl8hMv9a39jEO7xMYaPU4ueY=
=lI2b
-----END PGP SIGNATURE-----
--9hshNW4m6zn79FF/--
--===============0812214662==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline
LS0gCiMjIExpc3QgZGV0YWlscyBhdCBodHRwczovL2xpc3RzLmV4aW0ub3JnL21haWxtYW4vbGlz
dGluZm8vZXhpbS1hbm5vdW5jZSBFeGltIGRldGFpbHMgYXQgaHR0cDovL3d3dy5leGltLm9yZy8g
IyMK
--===============0812214662==--