[exim] Wait for fix to appear in distros?

2023-10-03 Thread Paul Vinkenoog via Exim-users
Hello all, I'm running exim on a number of servers and after the news yesterday I expected to see the fixed version appear soon in the various repos. But so far, nothing has shown up. I'm wondering now: should I wait a little more (risky?) or replace my version (from Almalinux 9) with the fixed

[exim] Re: Wait for fix to appear in distros?

2023-10-03 Thread Paul Vinkenoog via Exim-users
Jeremy Harris wrote: > On 03/10/2023 12:04, Paul Vinkenoog via Exim-users wrote: > > BTW, none of my installations advertise the AUTH command to > > anyone (and they refuse it when issued). Does that mean I'm > > relatively safe? > > That covers CVE-2023-4211

[exim] Re: Wait for fix to appear in distros?

2023-10-03 Thread Paul Vinkenoog via Exim-users
On Tue, 3 Oct 2023 18:26:19 +0200, you wrote: Cyborg wrote: > > I'm wondering now: should I wait a little more (risky?) or replace my > > version (from Almalinux 9) with the fixed version that was brought out > > yesterday? > > > > Isn't it a fork of Redhat? Have you checked the Fedora Repos, th

[exim] Re: Wait for fix to appear in distros?

2023-10-03 Thread Paul Vinkenoog via Exim-users
Sorry, this somehow got sent before I finished it. Cyborg wrote: > > I'm wondering now: should I wait a little more (risky?) or replace my > > version (from Almalinux 9) with the fixed version that was brought out > > yesterday? > > Isn't it a fork of Redhat? Have you checked the Fedora Repos, t