Bug 274501 - mail/exim: update 4.96.1 -> 4.96.2
Summary: mail/exim: update 4.96.1 -> 4.96.2
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Dima Panov
URL: https://lists.exim.org/lurker/message...
Keywords:
Depends on:
Blocks:
 
Reported: 2023-10-15 18:35 UTC by Kurt Jaeger
Modified: 2023-10-15 19:04 UTC (History)
1 user (show)

See Also:
bugzilla: maintainer-feedback? (fluffy)
pi: merge-quarterly+

Attachments
patch (1.09 KB, patch)
2023-10-15 18:35 UTC, Kurt Jaeger 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Kurt Jaeger freebsd_committer freebsd_triage 2023-10-15 18:35:27 UTC 
Created attachment 245647 [details]
patch

testbuilds are fine, test-run on current is OK.
Comment 1 Kurt Jaeger freebsd_committer freebsd_triage 2023-10-15 18:37:17 UTC 
This update fixes 2 more bugs reported: 

ZDI-23-1471 | ZDI-CAN-17554 | CVE-2023-42117 | Exim Bug 3031

ZDI-23-1473 | ZDI-CAN-17643 | CVE-2023-42119 | Exim Bug 3033
Comment 2 commit-hook freebsd_committer freebsd_triage 2023-10-15 19:02:09 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=bc760839a1f583cbaf6d1c4109fc8257e33082fe

commit bc760839a1f583cbaf6d1c4109fc8257e33082fe
Author:     Kurt Jaeger <pi@FreeBSD.org>
AuthorDate: 2023-10-15 18:58:21 +0000
Commit:     Dima Panov <fluffy@FreeBSD.org>
CommitDate: 2023-10-15 18:58:21 +0000

    mail/exim: security update 4.96.1 -> 4.96.2 (+)

    PR:             274501
    MFH:            2023Q4
    Security:       CVE-2023-42117, CVE-2023-42119
    Release notes:  https://exim.org/static/doc/security/CVE-2023-zdi.txt

 mail/exim/Makefile | 2 +-
 mail/exim/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 3 commit-hook freebsd_committer freebsd_triage 2023-10-15 19:03:10 UTC 
A commit in branch 2023Q4 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=871ee7b5068ae2d47aba8066d10cebb43f4a9ea2

commit 871ee7b5068ae2d47aba8066d10cebb43f4a9ea2
Author:     Kurt Jaeger <pi@FreeBSD.org>
AuthorDate: 2023-10-15 18:58:21 +0000
Commit:     Dima Panov <fluffy@FreeBSD.org>
CommitDate: 2023-10-15 19:02:29 +0000

    mail/exim: security update 4.96.1 -> 4.96.2 (+)

    PR:             274501
    MFH:            2023Q4
    Security:       CVE-2023-42117, CVE-2023-42119
    Release notes:  https://exim.org/static/doc/security/CVE-2023-zdi.txt

    (cherry picked from commit bc760839a1f583cbaf6d1c4109fc8257e33082fe)

 mail/exim/Makefile | 2 +-
 mail/exim/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 4 Dima Panov freebsd_committer freebsd_triage 2023-10-15 19:04:26 UTC 
Landed, thanks!