[Exim] patch for CAN-2004-0400?

Debian has announced a couple of vulnerabilities[1] in Exim 3 and 4, but I
can't find any mention of it on the exim.org site or in the list archives.

Does anyone have more details on the vulnerabilities and/or a patch?

Thanks.

--kurt

[1] http://www.debian.org/security/2004/dsa-501