Skip to Content.
Sympa Menu

sm-security - Re: [SM-Security] SECURITY UPDATE for mail/exim

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Seth Alan Woolley <seth AT positivism.org>
  • To: Eric Sandall <eric AT sandall.us>
  • Cc: sm-security AT lists.ibiblio.org
  • Subject: Re: [SM-Security] SECURITY UPDATE for mail/exim
  • Date: Fri, 14 May 2004 15:39:09 -0700

They are both for this:

http://www.guninski.com/exim1.html

The 4.33 fix wasn't "good enough" and so 4.34 was issued.

I didn't change the spell much though, so it should behave just like
normal. Maybe I missed something? I have no machine to test exim's
actual workings (I run sendmail so port 25's taken up).

Not sure why it was rejected though.

I found 4.34 by going to their source download folder after reading the
gentoo security announcement. I often beat them, but this time they
have an inside track to exim releases, I guess.

I too noticed no official release on their website. I figure they will
announce when they are done fixing all the problems. In the meantime,
we're bleeding edge. I'd rather not risk leaving our boxes open.
Better broken than a hole.

Seth

On Fri, May 14, 2004 at 03:30:24PM -0700, Eric Sandall wrote:
>
> What have these last two security updates been fore? I don't see any news on
> exim's website (they still don't even list 4.33)? Also, my mail server
> decided
> to start rejecting all the mail it once accepted as "no relay allowed" after
> the last update, so I guess it did make my e-mail a little more secure. ;)
>
> -sandalle

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: pgpNNwghD_8fA.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page