On 2010-05-28 at 14:06 -0400, Dan Rosenberg wrote: > Good to hear Exim may continue to be developed after all. What does > this mean in regards to fixing these particular issues? Will you have > time after this week to work on a fix? Should I bother waiting, or > should I just release an advisory describing how to mitigate the > issues with configuration changes and mention that a new release is > pending? I'd rather public sooner than later, especially since the > Bugzilla entries appear to be public - as in, the vulnerabilities > themselves are technically public already.
Me myself: I'll have time to spend this weekend writing an alternative fix for the second problem and if everyone's happy then we should be able to bundle up a release for next week. -Phil (not the original Phil who has been talked about in this thread) -- ## List details at http://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
