On 2012-12-02 at 18:33 +0000, Jeremy Harris wrote:
> On 10/26/2012 09:35 AM, Phil Pennock wrote:
> > [...] a remote code
> > execution hole in Exim, affecting releases 4.70 to 4.80, in the DKIM
> > handling.  This can be triggered by anyone who can send you email from a
> > domain for which they control the DNS, and gets them the Exim run-time
> > user.
> 
> Should this be added to https://github.com/Exim/exim/wiki/EximSecurity ?

Er, yes.  Done.

Also, updated https://github.com/Exim/exim/wiki/EximRelease so that this
doesn't get skipped in future.

Thanks,
-Phil

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to