On Tue, May 4, 2021 at 4:52 PM Heiko Schlittermann via Exim-users < exim-users@exim.org> wrote:
> Dear Exim-Users > > Abstract > -------- > > Several exploitable vulnerabilities in Exim were reported to us and are > fixed. > > We have prepared a security release, tagged as "exim-4.94.2". > > This release contains all changes on the exim-4.94+fixes branch plus > security fixes. > > You should update your Exim instances as soon as possible. (See below > for short upgrade notes.) > I have installed this version and I am getting a strange error which was not appearing with v4.94: 2021-05-04 16:45:39 1ldwIb-000LOY-LA H=maily102.outbound.eversrv.com [154.0.15.102] I=[46.165.223.102]:25 X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no F=< bounce_5k3w1xx3vfd9mww6_dly8zilxgzejudot_b3ccc2b800ca38d4...@fnbmailer-mail.com> temporarily rejected after DATA: failed to expand ACL string "${lookup sqlite,file=/var/spool/exim/db/greylist.db {SELECT host from resenders WHERE helo='${quote_sqlite:$sender_helo_name}' AND host='$sender_host_address';} {1}}": absolute file name expected for "sqlite" lookup <CUT> GREYDB=/var/spool/exim/db/greylist.db greylist_mail: accept condition = ${if eq{$acl_m_greylistreasons}{} {1}} accept hosts = : accept authenticated = * accept hosts = +IPwhitelist accept sender_domains = facebook.com : twitter.com : facebookmail.com : linkedin.com accept hosts = +backup_mx_hosts accept condition = ${lookup sqlite,file=GREYDB {SELECT host from resenders \ WHERE helo='${quote_sqlite:$sender_helo_name}' \ AND host='$sender_host_address';} {1}} warn set acl_m_greyident = ${hash{20}{62}{$sender_address$recipients$h_message-id:}} warn set acl_m_greyexpiry = ${lookup sqlite,file=GREYDB {SELECT expire FROM greylist \ WHERE id='${quote_sqlite:$acl_m_greyident}';}{$value}} warn condition = ${if eq {$acl_m_greyexpiry}{} {1}} set acl_m_dontcare = ${lookup sqlite,file=GREYDB {INSERT INTO greylist \ VALUES ( '$acl_m_greyident', \ '${eval10:$tod_epoch+300}', \ '$sender_host_address', \ '${quote_sqlite:$sender_helo_name}' );}} defer condition = ${if eq {$acl_m_greyexpiry}{} {1}} condition = ${lookup sqlite,file=GREYDB {SELECT expire FROM greylist \ WHERE id='${quote_sqlite:$acl_m_greyident}';} {1}} message = Mail is suspicious. Please retry later. log_message = Greylisted <$h_message-id:> from <$sender_address> for offences: ${sg {$acl_m_greylistreasons}{\n}{,}} warn condition = ${if eq {$acl_m_greyexpiry}{} {1}} log_message = Greylist insertion failed. Bypassing greylist. accept condition = ${if eq {$acl_m_greyexpiry}{} {1}} defer condition = ${if > {$acl_m_greyexpiry}{$tod_epoch}} message = Mail is suspicious. Please retry later. warn set acl_m_orighost = ${lookup sqlite,file=GREYDB {SELECT host FROM greylist \ WHERE id='${quote_sqlite:$acl_m_greyident}';}{$value}} set acl_m_orighelo = ${lookup sqlite,file=GREYDB {SELECT helo FROM greylist \ WHERE id='${quote_sqlite:$acl_m_greyident}';}{$value}} set acl_m_dontcare = ${lookup sqlite,file=GREYDB {INSERT INTO resenders \ VALUES ( '$acl_m_orighost', \ '${quote_sqlite:$acl_m_orighelo}', \ '$tod_epoch' ); }} logwrite = Added host $acl_m_orighost with HELO '$acl_m_orighelo' to known resenders accept </CUT> -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-) -- ## List details at https://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/