Hello,

Here is a simple diff against exim to solve the remaining security issues (apart from libspf2 which is solved in libspf2).

The current latest official release is now: exim-4.96.2

- fixed issues with the proxy protocol.
- fixed issues in the `dnsdb` lookup subsystem.
- The remaining issue with `libspf2`, raised as CVE against Exim, can't
be addressed by exim team, as it seems to happen inside the library's code.
  Library fixes are available.

Best Regards
Index: Makefile
===================================================================
RCS file: /cvs/ports/mail/exim/Makefile,v
retrieving revision 1.144
diff -u -p -r1.144 Makefile
--- Makefile	2 Oct 2023 21:17:01 -0000	1.144
+++ Makefile	16 Oct 2023 06:23:44 -0000
@@ -1,12 +1,11 @@
 COMMENT-main =		flexible mail transfer agent
 COMMENT-eximon =	X11 monitor tool for Exim MTA
 
-VERSION =		4.96.1
+VERSION =		4.96.2
 DISTNAME =		exim-${VERSION}
 PKGNAME-main =		exim-${VERSION}
 FULLPKGNAME-eximon =	exim-eximon-${VERSION}
 FULLPKGPATH-eximon =	${PKGPATH},-eximon
-REVISION-main =		0
 
 CATEGORIES =		mail
 
Index: distinfo
===================================================================
RCS file: /cvs/ports/mail/exim/distinfo,v
retrieving revision 1.45
diff -u -p -r1.45 distinfo
--- distinfo	2 Oct 2023 21:17:01 -0000	1.45
+++ distinfo	16 Oct 2023 06:23:44 -0000
@@ -1,2 +1,2 @@
-SHA256 (exim-4.96.1.tar.gz) = bQaEXgfGmefau+HKHt8j/osXCD3J/gc28LSpA1GscI4=
-SIZE (exim-4.96.1.tar.gz) = 2587066
+SHA256 (exim-4.96.2.tar.gz) = oOX7lRDU4HcE0ffKi0Mq4GnTxSKzHOfvX3tJmK53elM=
+SIZE (exim-4.96.2.tar.gz) = 2587523

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to