Bug 1955539

Summary: exim bug 2587 present in epel 7 4.94.2 exim3
Product: [Fedora] Fedora EPEL Reporter: redhat
Component: eximAssignee: Jaroslav Škarvada <jskarvad>
Status: CLOSED EOL QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: epel7CC: bennie.joubert, dwmw2, fschwarz, jskarvad
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-07-09 03:34:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
upstream fix for plain login failure exim 4.94 none

Description redhat 2021-04-30 10:47:31 UTC 
Description of problem:


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. install exim4.94.2 on rhel 7 or centos 7
2. activate pam auth for plain smtp
3. try to log in via plain smtp

Actual results:
server fails with the following message:
```
2021-04-30 11:49:03 Taint mismatch, string_nextinlist: auth_call_pam 158
```

Expected results:
The plain smtp login succeeds.

Additional info:

The bug has been fixed in upstream
https://bugs.exim.org/show_bug.cgi?id=2587
Comment 1 redhat 2021-04-30 10:49:22 UTC 
Created attachment 1777730 [details]
upstream fix for plain login failure exim 4.94
Comment 2 Felix Schwarz 2021-05-05 07:47:37 UTC 
Latest EPEL 7 has exim-4.94.2-1.el7 (in testing): https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2021-dad1996f63

As far as I can see this version contains the fix for Exim bug 2587 (upstream git commit https://git.exim.org/exim.git/commit/173bd1c8f9cf83ad8c0e61a9e32678e7e371d41d ) so you might want to test the mentioned Fedora update and leave karma if it works for you.
Comment 3 Troy Dawson 2024-07-09 03:34:19 UTC 
EPEL 7 entered end-of-life (EOL) status on 2024-06-30.\n\nEPEL 7 is no longer maintained, which means that it\nwill not receive any further security or bug fix updates.\n As a result we are closing this bug.