Re: [exim] CVE-2021-38371 (was: CVE-2022-37452)

Author: Heiko Schlittermann
Date:
To: exim-users
CC: Andreas Metzler
Subject: Re: [exim] CVE-2021-38371 (was: CVE-2022-37452)

Andreas Metzler via Exim-users <exim-users@???> (Do 16 Mär 2023 18:28:49 CET):
> Thanks to all the involved parties for clearing this up (and obviously
> for handling the whole thing in the first place)!

The missing CVE text is online since yesterday.

        https://www.exim.org/static/doc/security/CVE-2021-38371.txt

The website repo https://git.exim.org/exim-website.git

    commit ba0da048589d0c808f3161ea03de19d3bb2adc17
    Author: Heiko Schlittermann (HS12-RIPE) <hs@???>
    Date:   Mon Mar 20 11:14:19 2023 +0100

        chg: add note about CVE-2021-38371 about not being a problem

    commit 2fae8e2e6a9d5606ac7eb7c94003d59756a1281a
    Author: Andrew Aitchison <exim@???>
    Date:   Mon Mar 20 11:13:22 2023 +0100

        add: CVE-2021-38371

--
Heiko