New version

Resolves: rhbz#1314118
- Fixed local privilege escalation for set-uid root when using perl_startup
  Resolves: CVE-2016-1531
- Defuzzified patches

exim-4.85.2-dlopen-localscan.patch

@@ -37,7 +37,7 @@ index a0997a0..9dd84f8 100644
  
  #define CONFIGURE_FILE
 diff --git a/src/globals.c b/src/globals.c
-index fb705d9..efee424 100644
+index 6a24b6f..da64eb5 100644
 --- a/src/globals.c
 +++ b/src/globals.c
 @@ -170,6 +170,10 @@ uschar *tls_verify_certificates= NULL;
@@ -52,7 +52,7 @@ index fb705d9..efee424 100644
  /* Per Recipient Data Response variables */
  BOOL    prdr_enable            = FALSE;
 diff --git a/src/globals.h b/src/globals.h
-index f4baa0b..729426c 100644
+index e30a6d1..80b9a0b 100644
 --- a/src/globals.h
 +++ b/src/globals.h
 @@ -130,6 +130,10 @@ extern uschar *tls_verify_certificates;/* Path for certificates to check */
@@ -250,10 +250,10 @@ index 3500047..8599172 100644
 +
  /* End of local_scan.c */
 diff --git a/src/readconf.c b/src/readconf.c
-index 40af940..81be47f 100644
+index 4e7292d..acf27a4 100644
 --- a/src/readconf.c
 +++ b/src/readconf.c
-@@ -293,6 +293,9 @@ static optionlist optionlist_config[] = {
+@@ -298,6 +298,9 @@ static optionlist optionlist_config[] = {
    { "local_from_prefix",        opt_stringptr,   &local_from_prefix },
    { "local_from_suffix",        opt_stringptr,   &local_from_suffix },
    { "local_interfaces",         opt_stringptr,   &local_interfaces },

exim.spec

@@ -14,8 +14,8 @@
 
 Summary: The exim mail transfer agent
 Name: exim
-Version: 4.85
-Release: 2%{?dist}
+Version: 4.85.2
+Release: 1%{?dist}
 License: GPLv2+
 Url: http://www.exim.org/
 Group: System Environment/Daemons
@@ -58,7 +58,7 @@ Patch8: exim-4.82-libdir.patch
 Patch12: exim-4.82-cyrus.patch
 Patch13: exim-4.82-pamconfig.patch
 Patch14: exim-4.83-spamdconf.patch
-Patch18: exim-4.85-dlopen-localscan.patch
+Patch18: exim-4.85.2-dlopen-localscan.patch
 Patch19: exim-4.82-procmail.patch
 Patch20: exim-4.82-allow-filter.patch
 Patch21: exim-4.82-localhost-is-local.patch
@@ -616,6 +616,13 @@ test "$1"  = 0 || %{_initrddir}/clamd.exim condrestart >/dev/null 2>&1 || :
 %{_sysconfdir}/cron.daily/greylist-tidy.sh
 
 %changelog
+* Thu Mar  3 2016 Jaroslav Škarvada <jskarvad@redhat.com> - 4.85.2-1
+- New version
+  Resolves: rhbz#1314118
+- Fixed local privilege escalation for set-uid root when using perl_startup
+  Resolves: CVE-2016-1531
+- Defuzzified patches
+
 * Tue Feb 10 2015 Jaroslav Škarvada <jskarvad@redhat.com> - 4.85-2
 - Shared objects are now compiled with PIC, not PIE, which is needed for gcc-5,
   (by pic patch)

sources

@@ -1 +1 @@
-ebae28762b6f125726283dc9434e8709  exim-4.85.tar.bz2
+049ed1670cd63f48ca1660e3bf83e8ba  exim-4.85.2.tar.bz2