diff options
author | Andreas Metzler <ametzler@bebt.de> | 2014-04-06 08:49:31 +0200 |
---|---|---|
committer | Andreas Metzler <ametzler@bebt.de> | 2014-04-06 08:49:31 +0200 |
commit | 741bdecec7efeaca47bf505185dd55adb4fb2aaa (patch) | |
tree | da13009b2fb952d2f78ce36c83179033a33fa19a | |
parent | d03370f79a6a592d56e9d68874e0a61b1ab0a85a (diff) | |
download | exim4-741bdecec7efeaca47bf505185dd55adb4fb2aaa.tar.gz |
Bump exim4-base's dep on exim4-config to >= 4.82.4.82-7
4.82 deprecated $tls_bits, $tls_certificate_verified, $tls_cipher,
$tls_peerdn, $tls_sni and introduced tls_in_*/tls_out_* variants of these
variables which describe the respective status of the current incoming or
outgoing TLS connection. The rationale for this is that a single exim
process can now use both an incoming (message reception) and outgoing
TLS connection (callout or cutthrough delivery) concurrently. With this
change the "old" variables were mapped to tls_in_*, i.e. they expand to
empty values on outgoing connections. (This is not yet documented.)
Outgoing tls-connections can therefore not be detected by nonempty
$tls_cipher anymore. exim4-config << 4.82 used this mechanism to prevent
sending of plaintext AUTH information on unencrypted connections. Force a
lockstep upgrade of exim4-config by bumping the version of exim4-base's
dependency on exim4-config to >= 4.82.
Closes: #742901, #736081
-rw-r--r-- | debian/changelog | 20 | ||||
-rw-r--r-- | debian/control | 2 |
2 files changed, 19 insertions, 3 deletions
diff --git a/debian/changelog b/debian/changelog index c3fe7ae..2a4798f 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,10 +1,26 @@ -exim4 (4.82-6) UNRELEASED; urgency=medium +exim4 (4.82-7) unstable; urgency=high [ Martin Pitt ] * debian/tests/control: Add missing python test dependency, as debian/tests/security calls python. Closes: #740092 - -- Andreas Metzler <ametzler@debian.org> Tue, 25 Feb 2014 19:14:21 +0100 + [ Andreas Metzler ] + * 4.82 deprecated $tls_bits, $tls_certificate_verified, $tls_cipher, + $tls_peerdn, $tls_sni and introduced tls_in_*/tls_out_* variants of these + variables which describe the respective status of the current incoming or + outgoing TLS connection. The rationale for this is that a single exim + process can now use both an incoming (message reception) and outgoing + TLS connection (callout or cutthrough delivery) concurrently. With this + change the "old" variables were mapped to tls_in_*, i.e. they expand to + empty values on outgoing connections. (This is not yet documented.) + Outgoing tls-connections can therefore not be detected by nonempty + $tls_cipher anymore. exim4-config << 4.82 used this mechanism to prevent + sending of plaintext AUTH information on unencrypted connections. Force a + lockstep upgrade of exim4-config by bumping the version of exim4-base's + dependency on exim4-config to >= 4.82. + Closes: #742901, #736081 + + -- Andreas Metzler <ametzler@debian.org> Sun, 06 Apr 2014 08:32:11 +0200 exim4 (4.82-5) unstable; urgency=medium diff --git a/debian/control b/debian/control index d2958f2..9fd2007 100644 --- a/debian/control +++ b/debian/control @@ -23,7 +23,7 @@ Breaks: exim4-daemon-light (<<${Upstream-Version}), exim4-daemon-custom (<<${Upstream-Version}) Conflicts: exim, exim-tls Replaces: exim, exim-tls, exim4-daemon-light, exim4-daemon-heavy, exim4-daemon-custom -Depends: ${shlibs:Depends}, ${misc:Depends}, cron | fcron, exim4-config (>=4.30) | exim4-config-2, adduser, netbase, lsb-base (>= 3.0-6) +Depends: ${shlibs:Depends}, ${misc:Depends}, cron | fcron, exim4-config (>=4.82) | exim4-config-2, adduser, netbase, lsb-base (>= 3.0-6) # psmisc just for exiwhat. Recommends: psmisc, mailx, perl-modules Suggests: mail-reader, eximon4, exim4-doc-html|exim4-doc-info, |