public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/exim] epel8: New version
@ 2026-06-01 15:01
0 siblings, 0 replies; only message in thread
From: @ 2026-06-01 15:01 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/exim
Branch : epel8
Commit : 0bb555a2eb144d89ddb71ba885d7a71d8578f1b1
Author : Jaroslav Škarvada <jskarvad@redhat.com>
Date : 2026-06-01T17:01:40+02:00
Stats : +295/-290 in 6 file(s)
URL : https://src.fedoraproject.org/rpms/exim/c/0bb555a2eb144d89ddb71ba885d7a71d8578f1b1?branch=epel8
Log:
New version
Resolves: rhbz#2483300
Resolves: CVE-2026-48840
---
diff --git a/exim-4.98.2-dlopen-localscan.patch b/exim-4.98.2-dlopen-localscan.patch
deleted file mode 100644
index 21ca340..0000000
--- a/exim-4.98.2-dlopen-localscan.patch
+++ /dev/null
@@ -1,270 +0,0 @@
-diff --git a/src/EDITME b/src/EDITME
-index 9e4e818..473010b 100644
---- a/src/EDITME
-+++ b/src/EDITME
-@@ -918,6 +918,21 @@ HAVE_ICONV=yes
- # *** WARNING *** WARNING *** WARNING *** WARNING *** WARNING ***
-
-
-+#------------------------------------------------------------------------------
-+# On systems which support dynamic loading of shared libraries, Exim can
-+# load a local_scan function specified in its config file instead of having
-+# to be recompiled with the desired local_scan function. For a full
-+# description of the API to this function, see the Exim specification.
-+
-+DLOPEN_LOCAL_SCAN=yes
-+HAVE_LOCAL_SCAN=yes
-+
-+# If you set DLOPEN_LOCAL_SCAN, then you need to include -rdynamic in the
-+# linker flags. Without it, the loaded .so won't be able to access any
-+# functions from exim.
-+
-+LFLAGS=-rdynamic -ldl -pie
-+
- #------------------------------------------------------------------------------
- # The default distribution of Exim contains only the plain text form of the
- # documentation. Other forms are available separately. If you want to install
-diff --git a/src/config.h.defaults b/src/config.h.defaults
-index 13b203e..70be51d 100644
---- a/src/config.h.defaults
-+++ b/src/config.h.defaults
-@@ -33,6 +33,8 @@ Do not put spaces between # and the 'define'.
-
- #define AUTH_VARS 4
-
-+#define DLOPEN_LOCAL_SCAN
-+
- #define BIN_DIRECTORY
-
- #define CONFIGURE_FILE
-diff --git a/src/globals.c b/src/globals.c
-index c50b7a4..50d1d13 100644
---- a/src/globals.c
-+++ b/src/globals.c
-@@ -152,6 +152,10 @@ time_t tls_watch_trigger_time = (time_t)0;
- uschar *tls_advertise_hosts = NULL;
- #endif
-
-+#ifdef DLOPEN_LOCAL_SCAN
-+uschar *local_scan_path = NULL;
-+#endif
-+
- #ifndef DISABLE_PRDR
- /* Per Recipient Data Response variables */
- BOOL prdr_enable = FALSE;
-diff --git a/src/globals.h b/src/globals.h
-index dc9d384..d4eba50 100644
---- a/src/globals.h
-+++ b/src/globals.h
-@@ -150,6 +150,11 @@ extern uschar *tls_verify_hosts; /* Mandatory client verification */
- extern int tls_watch_fd; /* for inotify of creds files */
- extern time_t tls_watch_trigger_time; /* non-0: triggered */
- #endif
-+
-+#ifdef DLOPEN_LOCAL_SCAN
-+extern uschar *local_scan_path; /* Path to local_scan() library */
-+#endif
-+
- extern uschar *tls_advertise_hosts; /* host for which TLS is advertised */
-
- extern uschar *dsn_envid; /* DSN envid string */
-diff --git a/src/local_scan.c b/src/local_scan.c
-index da44cb7..5af46c6 100644
---- a/src/local_scan.c
-+++ b/src/local_scan.c
-@@ -7,59 +7,134 @@
- /* See the file NOTICE for conditions of use and distribution. */
- /* SPDX-License-Identifier: GPL-2.0-or-later */
-
-+#include <local_scan.h>
-
--/******************************************************************************
--This file contains a template local_scan() function that just returns ACCEPT.
--If you want to implement your own version, you should copy this file to, say
--Local/local_scan.c, and edit the copy. To use your version instead of the
--default, you must set
-+#ifdef DLOPEN_LOCAL_SCAN
-+extern uschar *local_scan_path; /* Path to local_scan() library */
-+#endif
-
--HAVE_LOCAL_SCAN=yes
--LOCAL_SCAN_SOURCE=Local/local_scan.c
--
--in your Local/Makefile. This makes it easy to copy your version for use with
--subsequent Exim releases.
--
--For a full description of the API to this function, see the Exim specification.
--******************************************************************************/
--
--
--/* This is the only Exim header that you should include. The effect of
--including any other Exim header is not defined, and may change from release to
--release. Use only the documented interface! */
--
--#include "local_scan.h"
--
--
--/* This is a "do-nothing" version of a local_scan() function. The arguments
--are:
--
-- fd The file descriptor of the open -D file, which contains the
-- body of the message. The file is open for reading and
-- writing, but modifying it is dangerous and not recommended.
--
-- return_text A pointer to an unsigned char* variable which you can set in
-- order to return a text string. It is initialized to NULL.
--
--The return values of this function are:
--
-- LOCAL_SCAN_ACCEPT
-- The message is to be accepted. The return_text argument is
-- saved in $local_scan_data.
--
-- LOCAL_SCAN_REJECT
-- The message is to be rejected. The returned text is used
-- in the rejection message.
--
-- LOCAL_SCAN_TEMPREJECT
-- This specifies a temporary rejection. The returned text
-- is used in the rejection message.
--*/
-+#ifdef DLOPEN_LOCAL_SCAN
-+#include <dlfcn.h>
-+#include <stdlib.h>
-+static int (*local_scan_fn)(int fd, uschar **return_text) = NULL;
-+static int load_local_scan_library(void);
-+#endif
-
- int
- local_scan(int fd, uschar **return_text)
- {
--return LOCAL_SCAN_ACCEPT;
-+#ifdef DLOPEN_LOCAL_SCAN
-+/* local_scan_path is defined AND not the empty string */
-+if (local_scan_path && *local_scan_path)
-+ {
-+ if (!local_scan_fn)
-+ {
-+ if (!load_local_scan_library())
-+ {
-+ char *base_msg , *error_msg , *final_msg ;
-+ int final_length = -1 ;
-+
-+ base_msg=US"Local configuration error - local_scan() library failure\n";
-+ error_msg = dlerror() ;
-+
-+ final_length = strlen(base_msg) + strlen(error_msg) + 1 ;
-+ final_msg = (char*)malloc( final_length*sizeof(char) ) ;
-+ *final_msg = '\0' ;
-+
-+ strcat( final_msg , base_msg ) ;
-+ strcat( final_msg , error_msg ) ;
-+
-+ *return_text = final_msg ;
-+ return LOCAL_SCAN_TEMPREJECT;
-+ }
-+ }
-+ return local_scan_fn(fd, return_text);
-+ }
-+else
-+#endif
-+ return LOCAL_SCAN_ACCEPT;
-+ }
-+
-+#ifdef DLOPEN_LOCAL_SCAN
-+
-+static int load_local_scan_library(void)
-+{
-+/* No point in keeping local_scan_lib since we'll never dlclose() anyway */
-+void *local_scan_lib = NULL;
-+int (*local_scan_version_fn)(void);
-+int vers_maj;
-+int vers_min;
-+
-+local_scan_lib = dlopen(local_scan_path, RTLD_NOW);
-+if (!local_scan_lib)
-+ {
-+ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() library open failed - "
-+ "message temporarily rejected");
-+ return FALSE;
-+ }
-+
-+local_scan_version_fn = dlsym(local_scan_lib, "local_scan_version_major");
-+if (!local_scan_version_fn)
-+ {
-+ dlclose(local_scan_lib);
-+ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() library doesn't contain "
-+ "local_scan_version_major() function - message temporarily rejected");
-+ return FALSE;
-+ }
-+
-+/* The major number is increased when the ABI is changed in a non
-+ backward compatible way. */
-+vers_maj = local_scan_version_fn();
-+
-+local_scan_version_fn = dlsym(local_scan_lib, "local_scan_version_minor");
-+if (!local_scan_version_fn)
-+ {
-+ dlclose(local_scan_lib);
-+ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() library doesn't contain "
-+ "local_scan_version_minor() function - message temporarily rejected");
-+ return FALSE;
-+ }
-+
-+/* The minor number is increased each time a new feature is added (in a
-+ way that doesn't break backward compatibility) -- Marc */
-+vers_min = local_scan_version_fn();
-+
-+
-+if (vers_maj != LOCAL_SCAN_ABI_VERSION_MAJOR)
-+ {
-+ dlclose(local_scan_lib);
-+ local_scan_lib = NULL;
-+ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() has an incompatible major"
-+ "version number, you need to recompile your module for this version"
-+ "of exim (The module was compiled for version %d.%d and this exim provides"
-+ "ABI version %d.%d)", vers_maj, vers_min, LOCAL_SCAN_ABI_VERSION_MAJOR,
-+ LOCAL_SCAN_ABI_VERSION_MINOR);
-+ return FALSE;
-+ }
-+else if (vers_min > LOCAL_SCAN_ABI_VERSION_MINOR)
-+ {
-+ dlclose(local_scan_lib);
-+ local_scan_lib = NULL;
-+ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() has an incompatible minor"
-+ "version number, you need to recompile your module for this version"
-+ "of exim (The module was compiled for version %d.%d and this exim provides"
-+ "ABI version %d.%d)", vers_maj, vers_min, LOCAL_SCAN_ABI_VERSION_MAJOR,
-+ LOCAL_SCAN_ABI_VERSION_MINOR);
-+ return FALSE;
-+ }
-+
-+local_scan_fn = dlsym(local_scan_lib, "local_scan");
-+if (!local_scan_fn)
-+ {
-+ dlclose(local_scan_lib);
-+ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() library doesn't contain "
-+ "local_scan() function - message temporarily rejected");
-+ return FALSE;
-+ }
-+
-+return TRUE;
- }
-
-+#endif /* DLOPEN_LOCAL_SCAN */
-+
- /* End of local_scan.c */
-diff --git a/src/readconf.c b/src/readconf.c
-index 940c5d4..c2ddcf2 100644
---- a/src/readconf.c
-+++ b/src/readconf.c
-@@ -219,6 +219,9 @@ static optionlist optionlist_config[] = {
- { "local_from_prefix", opt_stringptr, {&local_from_prefix} },
- { "local_from_suffix", opt_stringptr, {&local_from_suffix} },
- { "local_interfaces", opt_stringptr, {&local_interfaces} },
-+#ifdef DLOPEN_LOCAL_SCAN
-+ { "local_scan_path", opt_stringptr, &local_scan_path },
-+#endif
- #ifdef HAVE_LOCAL_SCAN
- { "local_scan_timeout", opt_time, {&local_scan_timeout} },
- #endif
diff --git a/exim-4.98.2-no-gsasl.patch b/exim-4.98.2-no-gsasl.patch
deleted file mode 100644
index 8ba9e1e..0000000
--- a/exim-4.98.2-no-gsasl.patch
+++ /dev/null
@@ -1,15 +0,0 @@
-diff --git a/src/EDITME b/src/EDITME
-index 473010b..1976437 100644
---- a/src/EDITME
-+++ b/src/EDITME
-@@ -804,8 +804,8 @@ AUTH_CRAM_MD5=yes
- AUTH_CYRUS_SASL=yes
- AUTH_DOVECOT=yes
- # AUTH_EXTERNAL=yes
--AUTH_GSASL=yes
--AUTH_GSASL_PC=libgsasl
-+# AUTH_GSASL=yes
-+# AUTH_GSASL_PC=libgsasl
- # AUTH_HEIMDAL_GSSAPI=yes
- # AUTH_HEIMDAL_GSSAPI_PC=heimdal-gssapi
- # AUTH_HEIMDAL_GSSAPI_PC=heimdal-gssapi heimdal-krb5
diff --git a/exim-4.99.4-dlopen-localscan.patch b/exim-4.99.4-dlopen-localscan.patch
new file mode 100644
index 0000000..9bc0a6d
--- /dev/null
+++ b/exim-4.99.4-dlopen-localscan.patch
@@ -0,0 +1,270 @@
+diff --git a/src/EDITME b/src/EDITME
+index 8a6e82b..3277503 100644
+--- a/src/EDITME
++++ b/src/EDITME
+@@ -1006,6 +1006,21 @@ EXTRALIBS_EXIM+=-lpam -ldl -export-dynamic -rdynamic
+ # *** WARNING *** WARNING *** WARNING *** WARNING *** WARNING ***
+
+
++#------------------------------------------------------------------------------
++# On systems which support dynamic loading of shared libraries, Exim can
++# load a local_scan function specified in its config file instead of having
++# to be recompiled with the desired local_scan function. For a full
++# description of the API to this function, see the Exim specification.
++
++DLOPEN_LOCAL_SCAN=yes
++HAVE_LOCAL_SCAN=yes
++
++# If you set DLOPEN_LOCAL_SCAN, then you need to include -rdynamic in the
++# linker flags. Without it, the loaded .so won't be able to access any
++# functions from exim.
++
++LFLAGS=-rdynamic -ldl -pie
++
+ #------------------------------------------------------------------------------
+ # The default distribution of Exim contains only the plain text form of the
+ # documentation. Other forms are available separately. If you want to install
+diff --git a/src/config.h.defaults b/src/config.h.defaults
+index ebf67ad..e37455c 100644
+--- a/src/config.h.defaults
++++ b/src/config.h.defaults
+@@ -33,6 +33,8 @@ Do not put spaces between # and the 'define'.
+
+ #define AUTH_VARS 4
+
++#define DLOPEN_LOCAL_SCAN
++
+ #define BIN_DIRECTORY
+
+ #define CONFIGURE_FILE
+diff --git a/src/globals.c b/src/globals.c
+index 3eda976..4c4c831 100644
+--- a/src/globals.c
++++ b/src/globals.c
+@@ -156,6 +156,10 @@ time_t tls_watch_trigger_time = (time_t)0;
+ uschar *tls_advertise_hosts = NULL;
+ #endif
+
++#ifdef DLOPEN_LOCAL_SCAN
++uschar *local_scan_path = NULL;
++#endif
++
+ #ifndef DISABLE_PRDR
+ /* Per Recipient Data Response variables */
+ BOOL prdr_enable = FALSE;
+diff --git a/src/globals.h b/src/globals.h
+index cb6b91c..8a0b35b 100644
+--- a/src/globals.h
++++ b/src/globals.h
+@@ -157,6 +157,11 @@ extern uschar *tls_verify_hosts; /* Mandatory client verification */
+ extern int tls_watch_fd; /* for inotify of creds files */
+ extern time_t tls_watch_trigger_time; /* non-0: triggered */
+ #endif
++
++#ifdef DLOPEN_LOCAL_SCAN
++extern uschar *local_scan_path; /* Path to local_scan() library */
++#endif
++
+ extern uschar *tls_advertise_hosts; /* host for which TLS is advertised */
+
+ extern uschar *dsn_envid; /* DSN envid string */
+diff --git a/src/local_scan.c b/src/local_scan.c
+index da44cb7..5af46c6 100644
+--- a/src/local_scan.c
++++ b/src/local_scan.c
+@@ -7,59 +7,134 @@
+ /* See the file NOTICE for conditions of use and distribution. */
+ /* SPDX-License-Identifier: GPL-2.0-or-later */
+
++#include <local_scan.h>
+
+-/******************************************************************************
+-This file contains a template local_scan() function that just returns ACCEPT.
+-If you want to implement your own version, you should copy this file to, say
+-Local/local_scan.c, and edit the copy. To use your version instead of the
+-default, you must set
++#ifdef DLOPEN_LOCAL_SCAN
++extern uschar *local_scan_path; /* Path to local_scan() library */
++#endif
+
+-HAVE_LOCAL_SCAN=yes
+-LOCAL_SCAN_SOURCE=Local/local_scan.c
+-
+-in your Local/Makefile. This makes it easy to copy your version for use with
+-subsequent Exim releases.
+-
+-For a full description of the API to this function, see the Exim specification.
+-******************************************************************************/
+-
+-
+-/* This is the only Exim header that you should include. The effect of
+-including any other Exim header is not defined, and may change from release to
+-release. Use only the documented interface! */
+-
+-#include "local_scan.h"
+-
+-
+-/* This is a "do-nothing" version of a local_scan() function. The arguments
+-are:
+-
+- fd The file descriptor of the open -D file, which contains the
+- body of the message. The file is open for reading and
+- writing, but modifying it is dangerous and not recommended.
+-
+- return_text A pointer to an unsigned char* variable which you can set in
+- order to return a text string. It is initialized to NULL.
+-
+-The return values of this function are:
+-
+- LOCAL_SCAN_ACCEPT
+- The message is to be accepted. The return_text argument is
+- saved in $local_scan_data.
+-
+- LOCAL_SCAN_REJECT
+- The message is to be rejected. The returned text is used
+- in the rejection message.
+-
+- LOCAL_SCAN_TEMPREJECT
+- This specifies a temporary rejection. The returned text
+- is used in the rejection message.
+-*/
++#ifdef DLOPEN_LOCAL_SCAN
++#include <dlfcn.h>
++#include <stdlib.h>
++static int (*local_scan_fn)(int fd, uschar **return_text) = NULL;
++static int load_local_scan_library(void);
++#endif
+
+ int
+ local_scan(int fd, uschar **return_text)
+ {
+-return LOCAL_SCAN_ACCEPT;
++#ifdef DLOPEN_LOCAL_SCAN
++/* local_scan_path is defined AND not the empty string */
++if (local_scan_path && *local_scan_path)
++ {
++ if (!local_scan_fn)
++ {
++ if (!load_local_scan_library())
++ {
++ char *base_msg , *error_msg , *final_msg ;
++ int final_length = -1 ;
++
++ base_msg=US"Local configuration error - local_scan() library failure\n";
++ error_msg = dlerror() ;
++
++ final_length = strlen(base_msg) + strlen(error_msg) + 1 ;
++ final_msg = (char*)malloc( final_length*sizeof(char) ) ;
++ *final_msg = '\0' ;
++
++ strcat( final_msg , base_msg ) ;
++ strcat( final_msg , error_msg ) ;
++
++ *return_text = final_msg ;
++ return LOCAL_SCAN_TEMPREJECT;
++ }
++ }
++ return local_scan_fn(fd, return_text);
++ }
++else
++#endif
++ return LOCAL_SCAN_ACCEPT;
++ }
++
++#ifdef DLOPEN_LOCAL_SCAN
++
++static int load_local_scan_library(void)
++{
++/* No point in keeping local_scan_lib since we'll never dlclose() anyway */
++void *local_scan_lib = NULL;
++int (*local_scan_version_fn)(void);
++int vers_maj;
++int vers_min;
++
++local_scan_lib = dlopen(local_scan_path, RTLD_NOW);
++if (!local_scan_lib)
++ {
++ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() library open failed - "
++ "message temporarily rejected");
++ return FALSE;
++ }
++
++local_scan_version_fn = dlsym(local_scan_lib, "local_scan_version_major");
++if (!local_scan_version_fn)
++ {
++ dlclose(local_scan_lib);
++ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() library doesn't contain "
++ "local_scan_version_major() function - message temporarily rejected");
++ return FALSE;
++ }
++
++/* The major number is increased when the ABI is changed in a non
++ backward compatible way. */
++vers_maj = local_scan_version_fn();
++
++local_scan_version_fn = dlsym(local_scan_lib, "local_scan_version_minor");
++if (!local_scan_version_fn)
++ {
++ dlclose(local_scan_lib);
++ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() library doesn't contain "
++ "local_scan_version_minor() function - message temporarily rejected");
++ return FALSE;
++ }
++
++/* The minor number is increased each time a new feature is added (in a
++ way that doesn't break backward compatibility) -- Marc */
++vers_min = local_scan_version_fn();
++
++
++if (vers_maj != LOCAL_SCAN_ABI_VERSION_MAJOR)
++ {
++ dlclose(local_scan_lib);
++ local_scan_lib = NULL;
++ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() has an incompatible major"
++ "version number, you need to recompile your module for this version"
++ "of exim (The module was compiled for version %d.%d and this exim provides"
++ "ABI version %d.%d)", vers_maj, vers_min, LOCAL_SCAN_ABI_VERSION_MAJOR,
++ LOCAL_SCAN_ABI_VERSION_MINOR);
++ return FALSE;
++ }
++else if (vers_min > LOCAL_SCAN_ABI_VERSION_MINOR)
++ {
++ dlclose(local_scan_lib);
++ local_scan_lib = NULL;
++ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() has an incompatible minor"
++ "version number, you need to recompile your module for this version"
++ "of exim (The module was compiled for version %d.%d and this exim provides"
++ "ABI version %d.%d)", vers_maj, vers_min, LOCAL_SCAN_ABI_VERSION_MAJOR,
++ LOCAL_SCAN_ABI_VERSION_MINOR);
++ return FALSE;
++ }
++
++local_scan_fn = dlsym(local_scan_lib, "local_scan");
++if (!local_scan_fn)
++ {
++ dlclose(local_scan_lib);
++ log_write(0, LOG_MAIN|LOG_REJECT, "local_scan() library doesn't contain "
++ "local_scan() function - message temporarily rejected");
++ return FALSE;
++ }
++
++return TRUE;
+ }
+
++#endif /* DLOPEN_LOCAL_SCAN */
++
+ /* End of local_scan.c */
+diff --git a/src/readconf.c b/src/readconf.c
+index cec89f9..cf5337b 100644
+--- a/src/readconf.c
++++ b/src/readconf.c
+@@ -218,6 +218,9 @@ static optionlist optionlist_config[] = {
+ { "local_from_prefix", opt_stringptr, {&local_from_prefix} },
+ { "local_from_suffix", opt_stringptr, {&local_from_suffix} },
+ { "local_interfaces", opt_stringptr, {&local_interfaces} },
++#ifdef DLOPEN_LOCAL_SCAN
++ { "local_scan_path", opt_stringptr, &local_scan_path },
++#endif
+ #ifdef HAVE_LOCAL_SCAN
+ { "local_scan_timeout", opt_time, {&local_scan_timeout} },
+ #endif
diff --git a/exim-4.99.4-no-gsasl.patch b/exim-4.99.4-no-gsasl.patch
new file mode 100644
index 0000000..a9594e3
--- /dev/null
+++ b/exim-4.99.4-no-gsasl.patch
@@ -0,0 +1,15 @@
+diff --git a/src/EDITME b/src/EDITME
+index 3277503..adfcd4a 100644
+--- a/src/EDITME
++++ b/src/EDITME
+@@ -890,8 +890,8 @@ AUTH_CRAM_MD5=yes
+ AUTH_CYRUS_SASL=yes
+ AUTH_DOVECOT=yes
+ # AUTH_EXTERNAL=yes
+-AUTH_GSASL=yes
+-AUTH_GSASL_PC=libgsasl
++# AUTH_GSASL=yes
++# AUTH_GSASL_PC=libgsasl
+ # AUTH_HEIMDAL_GSSAPI=yes
+ # AUTH_HEIMDAL_GSSAPI_PC=heimdal-gssapi
+ # AUTH_HEIMDAL_GSSAPI_PC=heimdal-gssapi heimdal-krb5
diff --git a/exim.spec b/exim.spec
index 7477b9f..9c77e18 100644
--- a/exim.spec
+++ b/exim.spec
@@ -11,7 +11,7 @@
Summary: The exim mail transfer agent
Name: exim
-Version: 4.99.2
+Version: 4.99.4
Release: 1%{?dist}
License: GPLv2+
Url: https://www.exim.org/
@@ -44,9 +44,9 @@ Source26: clamd.exim.service
Patch0: exim-4.99-config.patch
Patch1: exim-4.94-libdir.patch
-Patch2: exim-4.98.2-dlopen-localscan.patch
+Patch2: exim-4.99.4-dlopen-localscan.patch
Patch3: exim-4.99-pic.patch
-Patch4: exim-4.98.2-no-gsasl.patch
+Patch4: exim-4.99.4-no-gsasl.patch
Requires: /etc/pki/tls/certs /etc/pki/tls/private
Requires: /etc/aliases
@@ -479,6 +479,11 @@ fi
%{_sysconfdir}/cron.daily/greylist-tidy.sh
%changelog
+* Mon Jun 01 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 4.99.4-1
+- New version
+ Resolves: rhbz#2483300
+ Resolves: CVE-2026-48840
+
* Thu Apr 30 2026 Jaroslav Škarvada <jskarvad@redhat.com> - 4.99.2-1
- New version
Resolves: rhbz#2463798
diff --git a/sources b/sources
index b56fb05..9ab3fe1 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (exim-4.99.2.tar.xz) = e5c80a77dca642c132dda82166c919ba9f553436038b734ef66ae41666b8c9f5818e2cd6080e4c7c8b52e866f7f89d271233fb183c7e405feb15536d507098a3
-SHA512 (exim-4.99.2.tar.xz.asc) = 888db21f75782e318c7f254c6bde0c64edc28a77f0a5eb674268e126eca62e10d4b0ed2f87aa04a6790a9dfc9a7f9978063b1aff58059d37142a064bb2b20533
+SHA512 (exim-4.99.4.tar.xz) = 30fa01a301f8f4fe0c069f3da9e5247f0e22b19f64119cb8cccaf10aada8280ce02061a4671d110ad29b08af9e23ba3c3e8c7483874c7b1c992d90b51681ca9a
+SHA512 (exim-4.99.4.tar.xz.asc) = f872dbbe0adfdbcbfb6d1764394647e2927a0670f41410f66d6f1c0baa1a5956ffd2a51efad7eafc938cbb840b533b8dc6ef453098d854213c16465d868c7a68
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-06-01 15:01 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-06-01 15:01 [rpms/exim] epel8: New version
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox