Re: [exim] CVE-2015-0235 - glibc gethostbyname remotelyexplo…

On Tue, 2015-01-27 at 19:20 +0000, Phil Pennock wrote:


> Jumping ship would be doing something for the sake of doing something,
> addressing only whichever API most recently happened to have a
> vulnerability; it does not address any systemic issues and there's
> no guarantee that it would actually help.

It is in PHP too. Have, temporarily, disabled verify = helo and the PHP
instances.

--
Regards,

Paul.
England, EU.      Je suis Charlie.