On Sat, 2014-10-18 at 14:26 +0200, Luca Bertoncello wrote:
> "Adam D. Barratt" <adam@???> schrieb:
>
> > On Sat, 2014-10-18 at 13:27 +0200, Luca Bertoncello wrote:
> > > I cannot find a way to disable SSLv3 on Exim 4.75...
> > > Could someone help me?
> > > Exim 4.75 was compiled with OpenSSL.
> >
> > The recent exim-announce mail has copy-and-pastable configuration.
> > https://lists.exim.org/lurker/message/20141017.093614.e5c38176.en.html
>
> But it does NOT work with Exim 4.75... :(
Ah, right. The appropriate options were only added in 4.76 it would
appear.
Really, at this point upgrading would be the most appropriate action.
Unless you've been locally patching, you're still vulnerable to
CVE-2011-1764, CVE-2011-1407 and CVE-2012-5671 at least.
Regards,
Adam
