Security bugs are reported here via bugzilla

[Seth Alan Woolley <seth AT positivism.org>]

They are both for this:

http://www.guninski.com/exim1.html

The 4.33 fix wasn't "good enough" and so 4.34 was issued.

I didn't change the spell much though, so it should behave just like
normal.  Maybe I missed something?  I have no machine to test exim's
actual workings (I run sendmail so port 25's taken up).

Not sure why it was rejected though.

I found 4.34 by going to their source download folder after reading the
gentoo security announcement.  I often beat them, but this time they
have an inside track to exim releases, I guess.

I too noticed no official release on their website.  I figure they will
announce when they are done fixing all the problems.  In the meantime,
we're bleeding edge.  I'd rather not risk leaving our boxes open. 
Better broken than a hole.

Seth

On Fri, May 14, 2004 at 03:30:24PM -0700, Eric Sandall wrote:
> 
> What have these last two security updates been fore? I don't see any news on
> exim's website (they still don't even list 4.33)? Also, my mail server 
> decided
> to start rejecting all the mail it once accepted as "no relay allowed" after
> the last update, so I guess it did make my e-mail a little more secure. ;)
> 
> -sandalle

-- 
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8  3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: pgpNNwghD_8fA.pgp
Description: PGP signature