28006 2012-11-19 18:54:06 +0400 Conflicts between attempted installs of exim-common-4.76-alt2 and sendmail-common-1.7-alt3 2013-03-20 01:05:26 +0400 1 1 4 Development Sisyphus exim-common unstable all Linux CLOSED FIXED P3 normal --- 1 slchess nobody force ldv mike qa-sisyphus oldest_to_newest 135016 0 slchess 2012-11-19 18:54:06 +0400 apt-get install exim-light Reading Package Lists... Done Building Dependency Tree... Done The following extra packages will be installed: exim-common exim-control libspf2 libsqlite3 libsrs_alt sendmail-common The following NEW packages will be installed: exim-common exim-control exim-light libspf2 libsqlite3 libsrs_alt sendmail-common 0 upgraded, 7 newly installed, 0 removed and 0 not upgraded. Need to get 0B/1449kB of archives. After unpacking 4483kB of additional disk space will be used. Do you want to continue? [Y/n] Y Committing changes... Preparing... ################################################################################################### [100%] file /usr/sbin/mailq conflicts between attempted installs of exim-common-4.76-alt2 and sendmail-common-1.7-alt3 135019 1 ldv 2012-11-19 19:18:41 +0400 Надо убрать /usr/sbin/mailq из пакета exim-common, поскольку он уже есть в sendmail-common >= 1.7-alt3. 136693 2 slchess 2013-01-09 17:28:54 +0400 (В ответ на комментарий №1) > Надо убрать /usr/sbin/mailq из пакета exim-common, поскольку он уже есть в > sendmail-common >= 1.7-alt3. так что никто не пере соберет ее ? 138379 3 mike 2013-03-04 13:31:27 +0400 По факту exim оказался бесхозным, я бы не рекомендовал его использовать. Кажется, там ещё и дырка последняя не заткнута... 138389 4 slchess 2013-03-04 17:45:58 +0400 (В ответ на комментарий №3) > По факту exim оказался бесхозным, я бы не рекомендовал его использовать. > Кажется, там ещё и дырка последняя не заткнута... для себя собрал в hasher + CVE-2012-5671.patch из debian, жалко что бесхозный. 138394 5 mike 2013-03-04 19:20:50 +0400 Может, оприходуете? (а нет, так хоть забросьте мне спек+патч почтой) 138400 6 5760 slchess 2013-03-05 09:48:12 +0400 Created attachment 5760 CVE-2012-5671.patch 138401 7 slchess 2013-03-05 09:54:16 +0400 в спеке добавить --- exim.spec.orig 2013-03-05 08:52:20.346252322 +0300 +++ exim.spec 2013-03-05 08:52:16.250272289 +0300 @@ -48,6 +48,7 @@ Patch1: exim-4.72-buildoptions.patch Patch3: exim-4.34-texinfo.patch Patch4: exim-4.76-pcre.patch +Patch5: CVE-2012-5671.patch # Automatically added by buildreq on Tue Apr 26 2011 # ...and edited: @@ -211,6 +212,7 @@ #patch3 -p1 %patch4 -p1 +%patch5 -p1 install %SOURCE21 Local/eximon.conf @@ -393,7 +395,7 @@ %_bindir/exiqsumm %_bindir/exiqgrep #%attr( 755,root,root) %{_sbindir}/exim -%_sbindir/mailq +#%_sbindir/mailq %_sbindir/rmail %_sbindir/rsmtp %_sbindir/runq ну и changelog добавить 138876 8 mike 2013-03-20 00:50:41 +0400 Спасибо, отправил; а не хотите до 4.80.1 обновить? 138878 9 repository-robot 2013-03-20 01:05:26 +0400 exim-4.76-alt3 -> sisyphus: * Tue Mar 19 2013 Michael Shigorin <mike@altlinux> 4.76-alt3 - NMU: + applied CVE-2012-5671.patch + dropped mailq symlink duplicating sendmail-common's one (ALT#28006) 5760 2013-03-05 09:48:12 +0400 2013-03-05 09:48:12 +0400 CVE-2012-5671.patch CVE-2012-5671.patch text/plain 1823 slchess RnJvbSA0MjYzZjM5NWVmZDEzNmRlY2U1MmQ3NjVkZmNmZjNjOTZmMTc1MDZlIE1vbiBTZXAgMTcg MDA6MDA6MDAgMjAwMQpGcm9tOiBQaGlsIFBlbm5vY2sgPHBkcEBleGltLm9yZz4KRGF0ZTogV2Vk LCAyNCBPY3QgMjAxMiAyMzoyNjoyOSAtMDQwMApTdWJqZWN0OiBbUEFUQ0ggMS8zXSBTRUNVUklU WTogREtJTSBETlMgYnVmZmVyIG92ZXJmbG93IHByb3RlY3Rpb24KCkNWRS0yMDEyLTU2NzEKCm1h bGxvYy9oZWFwIG92ZXJmbG93LCB3aXRoIGEgNjBrQiB3aW5kb3cgb2Ygb3ZlcndyaXRlLgpSZXF1 aXJlcyBETlMgdW5kZXIgY29udHJvbCBvZiBwZXJzb24gc2VuZGluZyBlbWFpbCwgbGVhdmVzIHBs ZW50eSBvZgpldmlkZW5jZSwgYnV0IGlzIHZlcnkgbGlrZWx5IGV4cGxvaXRhYmxlIG9uIE9TZXMg dGhhdCBoYXZlIG5vdCBiZWVuCndlbGwgaGFyZGVuZWQuCi0tLQogZG9jL2RvYy10eHQvQ2hhbmdl TG9nIHwgICAgOCArKysrKysrKwogc3JjL3NyYy9ka2ltLmMgICAgICAgIHwgICAgMyArKysKIHNy Yy9zcmMvcGRraW0vcGRraW0uaCB8ICAgIDQgKystLQogMyBmaWxlcyBjaGFuZ2VkLCAxMyBpbnNl cnRpb25zKCspLCAyIGRlbGV0aW9ucygtKQoKSW5kZXg6IGV4aW00LTQuNzYvc3JjL2RraW0uYwo9 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09Ci0tLSBleGltNC00Ljc2Lm9yaWcvc3JjL2RraW0uYwkyMDExLTA1LTA5IDA0OjM2 OjI1LjAwMDAwMDAwMCAtMDQwMAorKysgZXhpbTQtNC43Ni9zcmMvZGtpbS5jCTIwMTItMTAtMjUg MDg6MjY6MjQuMDA5NzI2Njk1IC0wNDAwCkBAIC00NCw2ICs0NCw5IEBACiAgICAgICAgICAgICAg ICAiJS4qcyIsIChpbnQpbGVuLCAoY2hhciAqKSgocnItPmRhdGEpK3JyX29mZnNldCkpOwogICAg ICAgcnJfb2Zmc2V0Kz1sZW47CiAgICAgICBhbnN3ZXJfb2Zmc2V0Kz1sZW47CisgICAgICBpZiAo YW5zd2VyX29mZnNldCA+PSBQREtJTV9ETlNfVFhUX01BWF9SRUNMRU4pIHsKKyAgICAgICAgcmV0 dXJuIFBES0lNX0ZBSUw7CisgICAgICB9CiAgICAgfQogICB9CiAgIGVsc2UgcmV0dXJuIFBES0lN X0ZBSUw7CkluZGV4OiBleGltNC00Ljc2L3NyYy9wZGtpbS9wZGtpbS5oCj09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KLS0t IGV4aW00LTQuNzYub3JpZy9zcmMvcGRraW0vcGRraW0uaAkyMDExLTA1LTA5IDA0OjM2OjI1LjAw MDAwMDAwMCAtMDQwMAorKysgZXhpbTQtNC43Ni9zcmMvcGRraW0vcGRraW0uaAkyMDEyLTEwLTI1 IDA4OjI2OjI0LjAwOTcyNjY5NSAtMDQwMApAQCAtMjksOCArMjksOCBAQAogCiAvKiAtLS0tLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLSAqLwogLyogTGVuZ3RoIG9mIHRoZSBwcmVhbGxvY2F0ZWQgYnVmZmVyIGZvciB0 aGUgImFuc3dlciIgZnJvbSB0aGUgZG5zL3R4dAotICAgY2FsbGJhY2sgZnVuY3Rpb24uICovCi0j ZGVmaW5lIFBES0lNX0ROU19UWFRfTUFYX1JFQ0xFTiAgICA0MDk2CisgICBjYWxsYmFjayBmdW5j dGlvbi4gVGhpcyBzaG91bGQgbWF0Y2ggdGhlIG1heGltdW0gUkRMRU5HVEggZnJvbSBETlMuICov CisjZGVmaW5lIFBES0lNX0ROU19UWFRfTUFYX1JFQ0xFTiAgICAoMSA8PCAxNikKIAogLyogLS0t LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0gKi8KIC8qIEZ1bmN0aW9uIHN1Y2Nlc3MgLyBlcnJvciBjb2RlcyAqLwo=