On Wed, Feb 05, 2020 at 04:55:33PM +0100, Matus UHLAR - fantomas wrote:
> On 05.02.20 17:18, Henrik K wrote:
> >The error can only happen if there was unquoted $ in regex.
> >
> >header   __ZMIfish_ForgedBill01 Message-ID =~ /$Blat.v3/
> >
> >Newer 3.4.4 don't care about such things, you should upgrade asap since
> >there are vulnerabilities.
> 
> the OP reported using debian, which has those bugs fixed in 3.4.2.
> developers have backported fixed into the old version.

It's clearly not using debian version or then the backport is lacking fixes. 
I have not reviewed it personally so there are no guarantees.

Reply via email to