Re: [exim-dev] CVE-2021-38371 (allows response injection dur…

Góra strony
Delete this message
Reply to this message
Autor: Jeremy Harris
Data:  
Dla: exim-dev
Temat: Re: [exim-dev] CVE-2021-38371 (allows response injection during MTA SMTP sending)
On 04/01/2022 11:11, Harry Mills via Exim-dev wrote:
> We are running exim 4.94.2-2 from EPEL on Centos8.


Specific code protecting against the alleged attack appeared in Exim in 2011.

That was for release 4.76 . Unless the reporter is claiming a regression...

--
Cheers,
Jeremy