Security update: Exim 4.90.1 released (CVE-2018-6789)

--===============0674907676==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="46ob7bvkedqzrzyi"
Content-Disposition: inline


--46ob7bvkedqzrzyi
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

We released Exim 4.90.1 just now.
---------------------------------

This is mainly a security release to fix CVE-2018-6789, a buffer
overflow in base64d(). Please update your systems to 4.90.1.  The
reporter of the bug claims to have a working exploit.  See
http://exim.org/static/doc/security/CVE-2018-6789.txt for the timeline.

This release contains some other important bug fixes since 4.90, but no
additional features. Please see the ChangeLog
ftp://ftp.exim.org/pub/exim/exim4/ChangeLog

The Distros should have built packages already.

The sources can be obtained directly from the Git repos

    git://git.exim.org/exim.git     tag: exim-4_90_1
    git://git.exim.org/exim.git     tag: exim-4_90_1

The tag is signed with my GPG key=C2=B9.

Alternativly you may fetch the tarballs from the mirrors listed
on=20
    https://www.exim.org/mirmon/ftp_mirrors.html

or directly from

      ftp://ftp.exim.org/pub/exim/exim4/
    https://ftp.exim.org/pub/exim/exim4/

The tarballs are signed with my GPG key=C2=B9. Next to the tarballs you will
find a sha512sum.txt, in case you are happy with simple integrity check
only.

=C2=B9) If you get a "key expired" message, please refresh my key from
the public keyservers.

Thank you for using Exim.

    Best regards from Dresden/Germany
    Viele Gr=C3=BC=C3=9Fe aus Dresden
    Heiko Schlittermann
--=20
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -
 ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -

--46ob7bvkedqzrzyi
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAABCgAdFiEE0L/WueylaUpvFJ3Or0zGdqa2wUIFAlp/NSwACgkQr0zGdqa2
wULtawf+OorOQmlG/KJfVVZzmyPTx1CUUtyZuI/IgrEinu+kd8mscZmAeFRmfF2j
YjHpsHTKkfMBu8ak4ixV5fzg8qNIozu/QUZLCHeqojOJ7VUDi7CQKJRGbVB/YHB6
m0LHq8eP+mDX+/cyWKfitfBf07PPjcBvvqtjRfpAjXa2b7XXCJd+qrvBfPAqqppm
G+a4DrJPUpPp4X3fsGNPukGn/3RDE5LDrbnnHpXYKmR36b7uTSkvTd5pWQfe0cc7
xRuEo8QlzR6P4LnmkLjCQKNTROADrqRUSDCd/Dmg4cdjPfKFQBVJv9RF/+bnWkWp
h4E07DZNXVqF8Z/BMR09rZsSaMaxLA==
=dWBo
-----END PGP SIGNATURE-----

--46ob7bvkedqzrzyi--


--===============0674907676==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-announce Exim details at http://www.exim.org/ ##

--===============0674907676==--