Re: [exim] Exim 4.80.1 security release - details

Top Page
Delete this message
Reply to this message
Author: Marius Stan
Date:  
To: Nigel Metheringham
CC: <exim-users@exim.org>
Subject: Re: [exim] Exim 4.80.1 security release - details
On 26.10.2012 12:34, Nigel Metheringham wrote:
>
> Marius Stan wrote:
>> While you're waiting for corporate answers, you might check out the
>> packages here:
>> ftp://gateway.asesoft.ro/CentOS/6/x86_64/
>> it's just an official 4.77.48 rebranded as .49 containing the dkim patch.
> Please be aware that you need a degree of trust to install a package.
> Personally I would take the srpm, diff the spec and sources against the
> standard centos srpm, and only if that looked legitimate rebuild and use it.
>
>     Nigel.

You're right, of course. The srpm is available here:
ftp://gateway.asesoft.ro/CentOS/6/SRPMS/exim-4.77-49.el6.src.rpm
The availability of these packages was intended only as a quick fix for
those running vulnerable redhat/centos installations.

Marius