Re: [exim] The most used Exim version is the vulnerable one

Top Page
Delete this message
Reply to this message
Author: Cyborg
Date:  
To: exim-users
Subject: Re: [exim] The most used Exim version is the vulnerable one
Am 12.06.19 um 13:01 schrieb Gary Stainburn via Exim-users:
> On Wednesday 12 June 2019 06:56:34 Konstantin Boyandin via Exim-users wrote:
>> I maintain several CentOS 6-based servers. They will finally be replaced
>> by CentOS 7-based, but it's out of my control to upgrade the
>> distributions ASAP. Hence, I have to do manual upgrades and monitor
>> security advisories.
>>
>> I wonder how many CentOS installations will be hit.
>>
> I have just done a "yum update" on my C7 system and there was no EXIM update included. Hopefully this will be resolved soon.
>
> In the meantime, I saw somewhere that there is a fix using valid character control. Does anyone have a link to this?
>

https://marius.bloggt-in-braunschweig.de/2019/06/11/quickfix-exim-4-91-for-cve-2019-10149/

Marius