Re: [exim-dev] Exim 4.61-RC1 available

Top Page
Delete this message
Reply to this message
Author: David Woodhouse
Date:  
To: Nigel Metheringham
CC: exim-dev
Subject: Re: [exim-dev] Exim 4.61-RC1 available
On Mon, 2006-03-20 at 11:27 +0000, Nigel Metheringham wrote:
> BTW I was somewhat shocked to find that in the Fedora FC5 security
> audit there was a current (unfixed) CVE report against exim -
> CVE-2006-1251
> http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-1251


> However this is a SA-Exim specific problem, so not specifically ours
> as such.


The Fedora Exim package does include SA-Exim but not the offending
script, which is part of the greylisting bits.

--
dwmw2