Hello Exim maintainers,

this ticket, asking for packages with fixes for CVE-2023-42117 and other security relavant issues is closed.

However only a package for unstable has been released:

https://security-tracker.debian.org/tracker/CVE-2023-42117

all other Debian releases (stable, oldstable) still seem to be carrying the vulnerable Exim4 version.

What is the status of releasing fixed Exims for Debian stable, oldstable? Is anybody working on it? Is help needed?
*t

PS: I'd prefer this bugreport to be open as long as the stable and
    oldstable packages are still vulnerable...

Reply via email to