[Exim] Exim and SpamAssassin - Bugtraq

Hi,

as we could see these days in the bugtraq, SpamAssassin meets a security
hole (buffer overflow) when being used in BSMTP-mode.
As the configuration guide on the SpamAssassin website points out to use
BSMTP mode for both 3 and 4 versions, I think most of the exim-users are
affected... (?)
At last, in our configuration SpamAssassin is used as described with exim
3.36 (on the primary mx) and bsmtp=all.
My question now is if I can use SpamAssassin without BSMTP at all or if I
must patch SpamAssassin...

Thanx,

Michael