Bug#288918: Security patch

[Klaus Ethgen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Package: exim4
Version: 4.34-9
Severity: critical

Two security holes are reported and should be fixed:
http://www.exim.org/mail-archives/exim-announce/2005/msg00000.html

- -- Package-specific info:
Exim version 4.34 #1 built 07-Dec-2004 13:59:38
Copyright (c) University of Cambridge 2004
Berkeley DB: Sleepycat Software: Berkeley DB 3.2.9: (May 26, 2004)
Support for: iconv() IPv6 GnuTLS
Lookups: lsearch wildlsearch nwildlsearch iplsearch cdb dbm dbmnz dsearch nis nis0 passwd
Authenticators: cram_md5 plaintext
Routers: accept dnslookup ipliteral manualroute queryprogram redirect
Transports: appendfile/maildir/mailstore autoreply lmtp pipe smtp
Fixed never_users: 0
Configuration file is /var/lib/exim4/config.autogenerated

- -- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (800, 'unstable'), (700, 'testing')
Architecture: i386 (i686)
Kernel: Linux 2.6.10
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1) (ignored: LC_ALL set to de_DE)

Versions of packages exim4 depends on:
ii  exim4-base                    4.34-9     EXperimental Internal Mailer -- a 
ii  exim4-daemon-light            4.34-9     Lightweight version of the Exim (v

- -- no debconf information
- -- 
Klaus Ethgen                            http://www.ethgen.de/
pub  2048R/D1A4EDE5 2000-02-26 Klaus Ethgen <Klaus@Ethgen.de>
Fingerprint: D7 67 71 C4 99 A6 D4 FE  EA 40 30 57 3C 88 26 2B
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (GNU/Linux)

iQEVAwUBQd0Y8J+OKpjRpO3lAQLQSwf7B/4Cr1sOXIU7pDC3whhfPbIjlJXwZ0nZ
OsIwtGYkRKedVg0zNK9BZ5NJrAj7etctcQ+9jlPdxQLrM2vBkaOe4L6xgc0YBOyn
/Cp/AiVtM4oiiMNqpEAQRpBwWY74r7JhE4CJlimnAJPTKzXMc0HTuy1yQgT70zIV
ScFXEDrLP2xYCmvBua8DT1ipSLdC8LPLkhquV9+imi2Vf8BfkZeSw33Qf1q80dBB
lkl/ggUjx2zHBgWSNYO3oFVFcaA8MR+3ud1PLVyAlot2laKMDfYNDfOH+eKPTcS+
NHO5v3IdJnodz7HFDwhQ9l+ARm+021+9cEVS6e7YHov/S0RtE6k0rg==
=gn+Z
-----END PGP SIGNATURE-----