[exim] Re: New Exim Security Release 4.96.2

Startseite
Nachricht löschen
Nachricht beantworten
Autor: Slavko
Datum:  
To: exim ML
Betreff: [exim] Re: New Exim Security Release 4.96.2
Dňa 15. októbra 2023 18:37:54 UTC používateľ Andrew C Aitchison via Exim-users <exim-users@???> napísal:

>Sadly no. Ubuntu 23-10/mantic (released last week) still has:
>Debian is similar.


I contacted debian's security team about week ago with this.
The response was (in that time), that it is unknown if this
patch addresses issue, nor if it is OK. But that they are aware
and are watching situation. And i agree, if patch doesn't fixes
this issue, it is pointless to apply it (only exim uses that lib
here).

Thus, IMO when these particular patches will be confirmed,
they will supply update. The question is, who will confirm that,
as there was silence from libspf's dev for quite long time...
That is why i asked Heiko to confirm patches, to i can build
own packages, until issue will be fixed.

regards


--
Slavko
https://www.slavino.sk/

--
## subscription configuration (requires account):
## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-users-unsubscribe@???
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/