On Mon, 2006-03-20 at 11:27 +0000, Nigel Metheringham wrote:
> BTW I was somewhat shocked to find that in the Fedora FC5 security
> audit there was a current (unfixed) CVE report against exim -
> CVE-2006-1251
> http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-1251
> However this is a SA-Exim specific problem, so not specifically ours
> as such.
The Fedora Exim package does include SA-Exim but not the offending
script, which is part of the greylisting bits.
--
dwmw2