Hello,Here is a simple diff against exim to solve the remaining security issues (apart from libspf2 which is solved in libspf2).
The current latest official release is now: exim-4.96.2 - fixed issues with the proxy protocol. - fixed issues in the `dnsdb` lookup subsystem. - The remaining issue with `libspf2`, raised as CVE against Exim, can'tbe addressed by exim team, as it seems to happen inside the library's code.
Library fixes are available. Best Regards
Index: Makefile =================================================================== RCS file: /cvs/ports/mail/exim/Makefile,v retrieving revision 1.144 diff -u -p -r1.144 Makefile --- Makefile 2 Oct 2023 21:17:01 -0000 1.144 +++ Makefile 16 Oct 2023 06:23:44 -0000 @@ -1,12 +1,11 @@ COMMENT-main = flexible mail transfer agent COMMENT-eximon = X11 monitor tool for Exim MTA -VERSION = 4.96.1 +VERSION = 4.96.2 DISTNAME = exim-${VERSION} PKGNAME-main = exim-${VERSION} FULLPKGNAME-eximon = exim-eximon-${VERSION} FULLPKGPATH-eximon = ${PKGPATH},-eximon -REVISION-main = 0 CATEGORIES = mail Index: distinfo =================================================================== RCS file: /cvs/ports/mail/exim/distinfo,v retrieving revision 1.45 diff -u -p -r1.45 distinfo --- distinfo 2 Oct 2023 21:17:01 -0000 1.45 +++ distinfo 16 Oct 2023 06:23:44 -0000 @@ -1,2 +1,2 @@ -SHA256 (exim-4.96.1.tar.gz) = bQaEXgfGmefau+HKHt8j/osXCD3J/gc28LSpA1GscI4= -SIZE (exim-4.96.1.tar.gz) = 2587066 +SHA256 (exim-4.96.2.tar.gz) = oOX7lRDU4HcE0ffKi0Mq4GnTxSKzHOfvX3tJmK53elM= +SIZE (exim-4.96.2.tar.gz) = 2587523
smime.p7s
Description: S/MIME Cryptographic Signature