7 May
2021
7 May
'21
10:56 a.m.
Hi,
There were some notes in the exim advisories (Linked via the LWN article)
that 4.94 has some data tainting protection and that this might need some
attention when upgrading from earlier releases.
I'm not sure how this has been handled in the Debian buster-backports
package but you might want to check everything is as you expect.
Best wishes,
@ndy
--
andyjpb(a)ashurst.eu.org
http://www.ashurst.eu.org/
0x7EBA75FF
And indeed I
see the
same presumably vulnerable version listed for buster here:
https://packages.debian.org/search?keywords=exim4&searchon=names&ex…
That list suggests that only sid (unstable), bullseye (testing), and
buster-backports have a fix. ...
Well that was slightly more painful than it probably should have been,