On 2025-07-25 Moritz Orbach via Exim-users <exim-users@lists.exim.org> wrote: > Hi all,
> I don't trust libspf2 anymore because after almost 2 years it's still > unclear to me if CVE-2023-42118 is fixed or not (e.g. > https://bugs.gentoo.org/916493#c2). [...] Please note that OpenDMARC does not look a lot better than libspf. Last release in 2021, about 7 commits (excluding merges) since then. cu Andreas -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/postorius/lists/exim-users.lists.exim.org/ ## unsubscribe (doesn't require an account): ## exim-users-unsubscr...@lists.exim.org ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
