Re: [exim] Exim 4.80.1 security release - details

Top Page
Delete this message
Reply to this message
Author: Mike Ridgers
Date:  
To: 'exim-users@exim.org'
Subject: Re: [exim] Exim 4.80.1 security release - details
Jeremy,
Thanks for your quick response. Very reassuring to know that my systems are OK.

Thanks again,
Mike

----- Original Message -----
From: Jeremy Harris [mailto:jgh@wizmail.org]
Sent: Tuesday, December 11, 2012 10:22 PM
To: exim-users@??? <exim-users@???>
Subject: Re: [exim] Exim 4.80.1 security release - details

On 12/11/2012 09:49 PM, Mike Ridgers wrote:
> 1. Does adding the 'warn control = dkim_disable_verify' under the 'acl_check_rcpt:' line negate the need to have 'control = dkim_disable_verify' stated separately against each 'accept' in the ACL below it as below ?


Yes. They won't have any bad effect, but you could lose them.

> 2. From the config below can anyone see if I'm still vulnerable to this very serious vulnerability - I have many critical servers running Exim & am very concerned that they are vulnerable.
>
> --------------------------------
> acl_check_rcpt:
>          warn control = dkim_disable_verify


You're fine.

--
Jeremy

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/