GNU bug report logs - #72075
[PATCH] gnu: exim: Update to 4.98.

Previous Next

Package: guix-patches;

Reported by: Wilko Meyer <w <at> wmeyer.eu>

Date: Fri, 12 Jul 2024 12:12:01 UTC

Severity: normal

Tags: patch

Done: Zheng Junjie <zhengjunjie <at> iscas.ac.cn>

Bug is archived. No further changes may be made.

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 72075 in the body.
You can then email your comments to 72075 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to guix-patches <at> gnu.org:
bug#72075; Package guix-patches. (Fri, 12 Jul 2024 12:12:01 GMT) Full text and rfc822 format available.

Acknowledgement sent to Wilko Meyer <w <at> wmeyer.eu>:
New bug report received and forwarded. Copy sent to guix-patches <at> gnu.org. (Fri, 12 Jul 2024 12:12:02 GMT) Full text and rfc822 format available.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Wilko Meyer <w <at> wmeyer.eu>
To: guix-patches <at> gnu.org
Cc: Wilko Meyer <w <at> wmeyer.eu>
Subject: [PATCH] gnu: exim: Update to 4.98.
Date: Fri, 12 Jul 2024 14:08:02 +0200
Fixes CVE-2024-39929.

* gnu/packages/mail.scm (exim): Update to 4.98.

Change-Id: Iec780a9a718e256688aa531da2ce0b3183c3c7a4
---
Hi Guix,

There's been a recent security-related release for exim. Builds
successfully on my machine:

(~/devel/guix) λ ./pre-inst-env guix build exim
/gnu/store/awjx8k4kp24n8g2mhbx5kw3c32dbyas5-exim-4.98


 gnu/packages/mail.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm
index b7b06c1d99..9319077192 100644
--- a/gnu/packages/mail.scm
+++ b/gnu/packages/mail.scm
@@ -1975,7 +1975,7 @@ (define-public msmtp
 (define-public exim
   (package
     (name "exim")
-    (version "4.97.1")
+    (version "4.98")
     (source
      (origin
        (method url-fetch)
@@ -1989,7 +1989,7 @@ (define-public exim
                     (string-append "https://ftp.exim.org/pub/exim/exim4/old/"
                                    file-name))))
        (sha256
-        (base32 "1afzxyffjqm2xm5v6b731hbfm1fi4q35ja45a29kaycsa1bj0y5x"))))
+        (base32 "1xsjb2hqasxsqsmrcv98c2dvfgcsiy0j0g229fx974lzfy511g0f"))))
     (build-system gnu-build-system)
     (arguments
      (list #:phases

base-commit: 2d6a3799fcda5c017f653c6e96b91964b07a7ee0
-- 
2.41.0





Reply sent to Zheng Junjie <zhengjunjie <at> iscas.ac.cn>:
You have taken responsibility. (Thu, 18 Jul 2024 10:36:02 GMT) Full text and rfc822 format available.

Notification sent to Wilko Meyer <w <at> wmeyer.eu>:
bug acknowledged by developer. (Thu, 18 Jul 2024 10:36:02 GMT) Full text and rfc822 format available.

Message #10 received at 72075-done <at> debbugs.gnu.org (full text, mbox):

From: Zheng Junjie <zhengjunjie <at> iscas.ac.cn>
To: Wilko Meyer <w <at> wmeyer.eu>
Cc: 72075-done <at> debbugs.gnu.org
Subject: Re: [bug#72075] [PATCH] gnu: exim: Update to 4.98.
Date: Thu, 18 Jul 2024 18:35:27 +0800
[Message part 1 (text/plain, inline)]
Wilko Meyer <w <at> wmeyer.eu> writes:

> Fixes CVE-2024-39929.
>
> * gnu/packages/mail.scm (exim): Update to 4.98.
>
> Change-Id: Iec780a9a718e256688aa531da2ce0b3183c3c7a4
> ---
> Hi Guix,
>
> There's been a recent security-related release for exim. Builds
> successfully on my machine:
>
> (~/devel/guix) λ ./pre-inst-env guix build exim
> /gnu/store/awjx8k4kp24n8g2mhbx5kw3c32dbyas5-exim-4.98
>
>
>  gnu/packages/mail.scm | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm
> index b7b06c1d99..9319077192 100644
> --- a/gnu/packages/mail.scm
> +++ b/gnu/packages/mail.scm
> @@ -1975,7 +1975,7 @@ (define-public msmtp
>  (define-public exim
>    (package
>      (name "exim")
> -    (version "4.97.1")
> +    (version "4.98")
>      (source
>       (origin
>         (method url-fetch)
> @@ -1989,7 +1989,7 @@ (define-public exim
>                      (string-append "https://ftp.exim.org/pub/exim/exim4/old/"
>                                     file-name))))
>         (sha256
> -        (base32 "1afzxyffjqm2xm5v6b731hbfm1fi4q35ja45a29kaycsa1bj0y5x"))))
> +        (base32 "1xsjb2hqasxsqsmrcv98c2dvfgcsiy0j0g229fx974lzfy511g0f"))))
>      (build-system gnu-build-system)
>      (arguments
>       (list #:phases
>
> base-commit: 2d6a3799fcda5c017f653c6e96b91964b07a7ee0

push, see https://git.savannah.gnu.org/cgit/guix.git/commit/?id=504973cb6713d29e6630e031bab1e39d67bc4920
[signature.asc (application/pgp-signature, inline)]

bug archived. Request was from Debbugs Internal Request <help-debbugs <at> gnu.org> to internal_control <at> debbugs.gnu.org. (Thu, 15 Aug 2024 11:24:14 GMT) Full text and rfc822 format available.

This bug report was last modified 81 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.