[Security] Exim 4.76 Release

interfasys

interfasys

Verified User
Joined
Oct 31, 2003
Messages
2,100
Location
Switzerland
Exim release 4.76 is now available from the primary ftp site:
* ftp://ftp.exim.org/pub/exim/exim4/exim-4.76.tar.gz
* ftp://ftp.exim.org/pub/exim/exim4/exim-4.76.tar.bz2
_________________________________________________________________

This is a SECURITY release: Exim versions 4.70 up to and including 4.75
contained a security hole (format string attack) permitting remote
execution of arbitrary code as the Exim run-time user. This is
CVE-2011-1764. There is also another, lesser security issue. Both lie
in the DKIM code and mitigation techniques are described below.

Note that as part of our work to improve Exim and protect against future
security issues, some changes were made to the code to pass gcc with
many more warnings enabled, and in some cases to compile with Clang.
Although feedback so far has been positive, there remains a chance that
these changes will cause compilation problems on lesser-tested
platforms; please raise any issues encountered on the exim-users
mailing-list.
 
Hello,

Updated in custombuild.
If you're using a files mirror, please allow 24 hours for the rsync to propogate the new files.

John
 
I just tried to update Exim but got these errors after doing a make:

Code: 
[root@s03 exim-4.76]# make

>>> Creating links to source files...
>>> New Makefile & lookups/Makefile.predynamic installed
>>> Use "make makefile" if you need to force rebuilding of the makefile

make[1]: Entering directory `/root/exim-4.76/build-Linux-i386'
/bin/sh ../scripts/Configure-os.h
/bin/sh ../scripts/Configure-os.c
gcc buildconfig.c
/bin/sh ../scripts/Configure-config.h "make"
make[2]: Entering directory `/root/exim-4.76/build-Linux-i386'
make[2]: `buildconfig' is up to date.
make[2]: Leaving directory `/root/exim-4.76/build-Linux-i386'
Building configuration file config.h
>>> config.h built

>>> exicyclog script built
>>> exinext script built
>>> exiwhat script built
>>> exigrep script built
>>> eximstats script built
>>> exipick script built
>>> exiqgrep script built
>>> exiqsumm script built
>>> transport-filter.pl script built
>>> convert4r3 script built
>>> convert4r4 script built
>>> exim_checkaccess script built

gcc exim_dbmbuild.c
In file included from exim.h:438,
                 from exim_dbmbuild.c:33:
dbstuff.h:103:16: error: db.h: No such file or directory
In file included from exim.h:438,
                 from exim_dbmbuild.c:33:
dbstuff.h:540: error: expected specifier-qualifier-list before âDBâ
exim_dbmbuild.c: In function âmainâ:
exim_dbmbuild.c:150: error: âDBâ undeclared (first use in this function)
exim_dbmbuild.c:150: error: (Each undeclared identifier is reported only once
exim_dbmbuild.c:150: error: for each function it appears in.)
exim_dbmbuild.c:150: error: âdâ undeclared (first use in this function)
exim_dbmbuild.c:151: error: âDBTâ undeclared (first use in this function)
exim_dbmbuild.c:151: error: expected â;â before âkeyâ
exim_dbmbuild.c:213: error: âDB_HASHâ undeclared (first use in this function)
exim_dbmbuild.c:295: error: âcontentâ undeclared (first use in this function)
exim_dbmbuild.c:298: error: âkeyâ undeclared (first use in this function)
exim_dbmbuild.c:298: error: âR_NOOVERWRITEâ undeclared (first use in this function)
make[1]: *** [exim_dbmbuild.o] Error 1
make[1]: Leaving directory `/root/exim-4.76/build-Linux-i386'
make: *** [all] Error 2
[root@s03 exim-4.76]#

Does anyone know how to solve this?

EDIT: problem solved after doing: yum install db4-devel cyrus-sasl-devel
 
Last edited:
HTML: 
Can confirm working on FreeBSD

work on FreeBSD 5.x ?

thank you
 
You must log in or register to reply here.
Back
Top