According to Exim upstream, there are multiple security issues in the current Exim code with fixes being available for distribution maintainers: https://www.openwall.com/lists/oss-security/2023/09/29/5 Probably you are aware of the issue but just in case: Anything I can do to help getting the fixes out for Fedora+EPEL? Reproducible: Always
I will handle it. We have individual security trackers: https://bugzilla.redhat.com/show_bug.cgi?id=2241538 https://bugzilla.redhat.com/show_bug.cgi?id=2241525 https://bugzilla.redhat.com/show_bug.cgi?id=2241528 https://bugzilla.redhat.com/show_bug.cgi?id=2241531 https://bugzilla.redhat.com/show_bug.cgi?id=2241535 https://bugzilla.redhat.com/show_bug.cgi?id=2241542 Thus I am closing this report and will handle it in the individual trackers. *** This bug has been marked as a duplicate of bug 2241538 ***
I cannot handle https://bugzilla.redhat.com/show_bug.cgi?id=2241535, it's libspf2, but I will handle the rest.