On 2025/04/21 7:14 PM, Johnnie Adams via Exim-users wrote:
Honestly, I was flailing around, trying to mitigate the issue, but I think
that's a fool's errand. I'm abandoning trying to make this syntax work.

Understanding would be better than flailing.

The first is, if this is CVE-worthy, who takes that forward?

It is not.

The second is, in the meantime, I've got a very small number of users which
need authentication--less than a dozen. I'm thinking about installing some
sort of local authentication--maybe gdbm. Is that a reasonable path to take?

Yes, but you'll need to understand your config.
--
Cheers,
  Jeremy

--
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/
## unsubscribe (doesn't require an account):
##   exim-users-unsubscr...@lists.exim.org
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to