buildroot/package/exim, branch 2018.02

exim: add upstream security fix

2018-02-20T08:04:53+00:00

Fixes the following security issue: CVE-2018-6789: Meh Chang discovered a buffer overflow flaw in a utility function used in the SMTP listener of Exim, a mail transport agent. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code via a specially crafted message. Dropped ChangeLog hunk and adjusted file path of upstream commit so it applies to tarball. Signed-off-by: Peter Korsgaard

package/exim: change tarball compression to xz

2017-12-08T22:49:18+00:00

Signed-off-by: Jerzy Grzegorek Signed-off-by: Peter Korsgaard

package/exim: security bump to version 4.89.1

2017-11-29T20:42:06+00:00

Fixes CVE-2017-16943 & CVE-2017-16944: https://lists.exim.org/lurker/message/20171128.215505.79ea8efa.en.html Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

exim: fix help text format

2017-05-30T21:20:02+00:00

Warning reported by check-package. Signed-off-by: Luca Ceresoli Cc: Bernd Kuhls Signed-off-by: Thomas Petazzoni

boot, linux, package: use SPDX short identifier for GPLv2/GPLv2+

2017-04-01T13:16:38+00:00

We want to use SPDX identifier for license strings as much as possible. SPDX short identifier for GPLv2/GPLv2+ is GPL-2.0/GPL-2.0+. This change is done by using following command. find . -name "*.mk" | xargs sed -ri '/LICENSE( )?[\+:]?=/s/\/GPL-2.0/g' Signed-off-by: Rahul Bedarkar Signed-off-by: Thomas Petazzoni

package/exim: bump version to 4.89

2017-03-12T13:19:50+00:00

Rebased patch #0003, added uClibc compatibility patch. Signed-off-by: Bernd Kuhls Signed-off-by: Thomas Petazzoni

exim: security bump to 4.87.1

2016-12-27T09:34:36+00:00

No features are added or removed. This release contains just a fix for CVE-2016-9963 - Fix CVE-2016-9963 - Info leak from DKIM. When signing DKIM, if either LMTP or PRDR was used for delivery, the key could appear in logs. Additionally, if the experimental feature "DSN_INFO" was used, it could appear in DSN messages (and be sent offsite). Signed-off-by: Peter Korsgaard

Replace (e)glibc by glibc

2016-06-28T20:19:22+00:00

Following the removal of eglibc support, this commit replaces all occurences of "(e)glibc" by just "glibc". Most of the occurences are in package Config.in comments. In addition, when the form "an (e)glibc ..." was used, it is replaced by "a glibc ...". [Peter: add new efi* packages, s/uclibc/uClibc as suggested by Romain, systemd / liquid-dsp tweaks as suggested by Yann] Signed-off-by: Thomas Petazzoni Reviewed-by: Romain Naour Acked-by: "Yann E. MORIN" Signed-off-by: Peter Korsgaard

package/exim: bump version to 4.87

2016-04-08T20:09:03+00:00

Signed-off-by: Bernd Kuhls Signed-off-by: Peter Korsgaard

exim: security bump to version 4.86.2

2016-03-03T14:06:37+00:00

Fixes: CVE-2016-1531 - All installations having Exim set-uid root and using 'perl_startup' are vulnerable to a local privilege escalation. Any user who can start an instance of Exim (and this is normally *any* user) can gain root privileges. If you do not use 'perl_startup' you *should* be safe. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard