Re: [embargoed security update] mail/exim -> 4.94.2

ping: the disclosure will take place today (2021-05-04 13:30 UTC)

On 5/2/21 10:49 AM, Renaud Allard wrote:
> Hi,
>
> There was a problem in exim 4.94.1, so there is now 4.94.2 which solves
> the issue. Embargo dates are the same.
>
> Best Regards
>
> On 28/04/2021 08:53, Renaud Allard wrote:
>> Hello,
>>
>> Here is an diff to update exim to 4.94.1. This is a very important
>> security update.
>>
>> Unfortunately, this update is embargoed so that "distro" package
>> maintainers have the time to publish the packages. This means the
>> source tar.gz is not available before 2021-05-04 13:30 UTC. I don't
>> know how we could provide packages for -stable before the tar is
>> published. I can build them for 6.8, but I can't sign them or build
>> for 6.9 yet.
>>
>> It solves the following CVE:
>>
>> - CVE-2020-28007
>> - CVE-2020-28008
>> - CVE-2020-28009
>> - CVE-2020-28010
>> - CVE-2020-28011
>> - CVE-2020-28012
>> - CVE-2020-28013
>> - CVE-2020-28014
>> - CVE-2020-28015
>> - CVE-2020-28016
>> - CVE-2020-28017
>> - CVE-2020-28018
>> - CVE-2020-28019
>> - CVE-2020-28020
>> - CVE-2020-28021
>> - CVE-2020-28022
>> - CVE-2020-28023
>> - CVE-2020-28024
>> - CVE-2020-28025
>> - CVE-2020-28026
>> - CVE-2021-27216
>>
>> Best Regards