Debian Patches

Status for exim4/4.94.2-7+deb11u4

Patch Description Author Forwarded Bugs Origin Last update
75_13-lf_sqlperform.patch [PATCH 13/23] lf_sqlperform "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-01
75_14-rf_get_transport.patch [PATCH 14/23] rf_get_transport "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-02
75_15-deliver.patch [PATCH 15/23] deliver "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-03
75_16-smtp_out.patch [PATCH 16/23] smtp_out "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-01
75_17-smtp.patch [PATCH 17/23] smtp "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-01
75_18-update-doc.patch [PATCH 18/23] update doc "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-03
75_20-Set-mainlog_name-and-rejectlog_name-unconditionally.patch [PATCH 20/23] Set mainlog_name and rejectlog_name unconditionally.
(cherry picked from commit 3f06b9b4c7244b169d50bce216c1f54b4dfe7efb)
"Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-12
75_21-tidy-log.c.patch [PATCH 21/23] tidy log.c
(cherry picked from commit 0327b6460eec64da6b0c1543c7e9b3d0f8cb9294)
"Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-12
75_22-Silence-compiler.patch [PATCH 22/23] Silence compiler "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-23
75_23-Do-not-close-the-main-_log-if-we-do-not-see-a-chance.patch [PATCH 23/23] Do not close the (main)_log, if we do not see a chance to open it again.

The process doing local deliveries runs as an unprivileged user. If this
process needs to log failures or warnings (as caused by the
is_tainting2() function), it can't re-open the main_log and just exits.
"Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-23
75_24-Silence-the-compiler.patch [PATCH 1/4] Silence the compiler "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-25
75_26-Disable-taintchecks-for-mkdir-this-isn-t-part-of-4.9.patch [PATCH 3/4] Disable taintchecks for mkdir, this isn't part of 4.94 "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-25
75_27_Fix-logging-with-empty-element-in-log_file_path-Bug-.patch [PATCH 3/4] Fix logging with empty element in log_file_path (Bug 2733) Jeremy Harris <jgh146exb@wizmail.org> no 2021-05-15
75_28_Fix-logging-with-build-time-config-and-empty-element.patch [PATCH 4/4] Fix logging with build-time config and empty elements (Closes 2733) "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-05-15
75_29-Auths-fix-possible-OOB-write-in-external-authenticat.patch [PATCH 1/4] Auths: fix possible OOB write in external authenticator. Bug 2999 Jeremy Harris <jgh146exb@wizmail.org> no 2023-05-11
75_30-Auths-use-uschar-more-in-spa-authenticator.patch [PATCH 2/4] Auths: use uschar more in spa authenticator Jeremy Harris <jgh146exb@wizmail.org> no 2023-05-11
75_31-Auths-fix-possible-OOB-write-in-SPA-authenticator.-B.patch [PATCH 3/4] Auths: fix possible OOB write in SPA authenticator. Bug 3000 Jeremy Harris <jgh146exb@wizmail.org> no 2023-05-11
75_32-Auths-fix-possible-OOB-read-in-SPA-authenticator.-Bu.patch [PATCH 4/4] Auths: fix possible OOB read in SPA authenticator. Bug 3001 Jeremy Harris <jgh146exb@wizmail.org> no 2023-05-11
78_01-Command-line-option-for-no-notifier-socket.-Bug-2616.patch [PATCH] Command-line option for no notifier socket. Bug 2616 Jeremy Harris <jgh146exb@wizmail.org> no 2020-07-10
79_CVE-2023-51766_4.97.1-release.diff Fix smtp-smuggling (CVE-2023-51766) Pull upstream changes from 4.97.1 security release. Jeremy Harris <jgh146exb@wizmail.org> no debian upstream 2023-12-31
80_01-Fix-MIME-parsing-of-filenames-specified-using-multip.patch [PATCH 1/2] Fix MIME parsing of filenames specified using multiple parameters. Bug 3099 Jeremy Harris <jgh146exb@wizmail.org> no 2024-07-01
80_02-MIME-support-RFC-2331-for-name-.-Bug-3099.patch [PATCH 2/2] MIME: support RFC 2331 for name=. Bug 3099 Jeremy Harris <jgh146exb@wizmail.org> no 2024-07-02
80_03-Compiler-quietening.patch [PATCH] Compiler quietening Jeremy Harris <jgh146exb@wizmail.org> no 2024-07-03
90_localscan_dlopen.dpatch Allow one to use and switch between different local_scan functions without recompiling exim.
http://marc.merlins.org/linux/exim/files/sa-exim-current/ Original patch from
David Woodhouse, modified first by Derrick 'dman' Hudson and then by Marc
MERLIN for SA-Exim and minor/major API version tracking
David Woodhouse, Derrick 'dman' Hudson, Marc MERLIN yes other, http://marc.merlins.org/linux/exim/files/sa-exim-current/ 2019-10-20
CVE-2021-38371.patch CVE-2021-38371 Markus Koschany <apo@debian.org> no debian https://git.exim.org/exim.git/commit/1b9ab35f323121aabf029f0496c7227818efad14 2024-10-03
CVE-2022-3559.patch CVE-2022-3559 Markus Koschany <apo@debian.org> no https://git.exim.org/exim.git/commit/4e9ed49f8f12eb331b29bd5b6dc3693c520fddc2 2024-10-03
CVE-2023-42117.patch CVE-2023-42117 Markus Koschany <apo@debian.org> no https://git.exim.org/exim.git/commit/654056e44fc93a0ee7c09d1228933e8af6862206 2024-10-03
CVE-2023-42119.patch CVE-2023-42119 Markus Koschany <apo@debian.org> no https://git.exim.org/exim.git/commitdiff/f6b1f8e7d642 2024-10-03
CVE-2022-3559_fixes.patch CVE-2022-3559_fixes Markus Koschany <apo@debian.org> no https://git.exim.org/exim.git/commit/32da6327e434e986a18b75a84f2d8c687ba14619 2024-10-03
31_eximmanpage.dpatch We ship the binary as exim4 instead of exim, fix manpage accordingly.
Andreas Metzler <ametzler@bebt.de>
Marc Haber <mh+debian-packages@zugschlus.de>, not-needed 2019-10-17
32_exim4.dpatch Accommodate source for installing exim as exim4. Andreas Metzler <ametzler@debian.org> not-needed vendor 2018-12-12
33_eximon.binary.dpatch We move eximon.bin out of $PATH to /usr/libexec/. Let it be found there. Andreas Piesk not-needed 2020-03-21
34_eximstatsmanpage.dpatch Add note about installing perl-modules on Debian to generated manpage Andreas Metzler <ametzler@debian.org> not-needed vendor 2013-09-28
35_install.dpatch Exim's installation scripts install the binary as exim-<version> - disable this feature. Andreas Metzler <ametzler@debian.org> not-needed vendor 2016-09-25
60_convert4r4.dpatch Add a warning message to convert4r4 Marc Haber <mh+debian-packages@zugschlus.de> not-needed vendor 2013-09-28
67_unnecessaryCopt.diff Stop using exim's -C option in utility scripts (exiwhat et al.) since this breaks with ALT_CONFIG_PREFIX. Andreas Metzler <ametzler@bebt.de> yes 2018-12-31
70_remove_exim-users_references.dpatch Point Debian users to Debian specific ML. Marc Haber <mh+debian-packages@zugschlus.de> not-needed 2018-12-31
73_01-Fix-DANE-SNI-handling-Bug-2265.patch [PATCH] Fix DANE + SNI handling (Bug 2265)
Broken in d8e99d6047e709b35eabb1395c2046100d1a1dda
Thanks to JGH and Wolfgang Breyha for contributions.
"Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-05-03
73_02-Fix-ipv6norm.patch [PATCH 2/2] Fix ${ipv6norm:}
(cherry picked from commit 8b4b6ac90766b11fa74fa3001778b49456adbe42)
Jeremy Harris <jgh146exb@wizmail.org> no 2021-05-04
73_03-Named-Queues-fix-immediate-delivery.-Bug-2743.patch [PATCH 3/3] Named Queues: fix immediate-delivery. Bug 2743
(cherry picked from commit 159cf206c97f876b07829d92db2217689745c1e8)
Jeremy Harris <jgh146exb@wizmail.org> no 2021-05-12
73_04-Fix-host_name_lookup-Close-2747.patch [PATCH 4/4] Fix host_name_lookup (Close 2747)
Thanks to Nico R for providing a reproducing configuration.

host_lookup = *
message_size_limit = ${if def:sender_host_name {32M}{32M}}
acl_smtp_connect = acl_smtp_connect
acl_smtp_rcpt = acl_smtp_rcpt

begin acl
acl_smtp_connect:
warn ratelimit = 256 / 1m / per_conn
accept

acl_smtp_rcpt:
accept hosts = 127.0.0.*

begin routers
null:
driver = accept
transport = null

begin transports
null:
driver = appendfile
file = /dev/null

Tested with

swaks -f mailbox@example.org -t mailbox@example.org --pipe 'exim -bh 127.0.0.1 -C /opt/exim/etc/exim-bug.conf'

The IP must have a PTR to "localhost." to reproduce it.
"Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-05-16
73_05-Fix-tainted-message-for-fakereject.patch [PATCH 5/5] Fix tainted message for fakereject
(cherry picked from commit a9ac2d7fc219e41a353abf1f599258b9b9d21b7e)
Jeremy Harris <jgh146exb@wizmail.org> no 2021-07-07
75_01-Introduce-main-config-option-allow_insecure_tainted_.patch [PATCH 01/23] Introduce main config option allow_insecure_tainted_data

This option is deprecated already now.
"Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-01
75_02-search.patch [PATCH 02/23] search "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-01
75_03-dbstuff.patch [PATCH 03/23] dbstuff "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-03-28
75_04-acl.patch [PATCH 04/23] acl "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-05-01
75_05-parse.patch [PATCH 05/23] parse "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-03-28
75_06-rda.patch [PATCH 06/23] rda "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-03-28
75_07-appendfile.patch [PATCH 07/23] appendfile "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-03-28
75_08-autoreply.patch [PATCH 08/23] autoreply "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-03-28
75_09-pipe.patch [PATCH 09/23] pipe "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-02
75_10-deliver.patch [PATCH 10/23] deliver "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-03-31
75_11-directory.patch [PATCH 11/23] directory "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-01
75_12-expand.patch [PATCH 12/23] expand "Heiko Schlittermann (HS12-RIPE)" <hs@schlittermann.de> no 2021-04-01

All known versions for source package 'exim4'

Links