Hello,Here is a simple diff against exim to solve the remaining security issues (apart from libspf2 which is solved in libspf2).
The current latest official release is now: exim-4.96.2 - fixed issues with the proxy protocol. - fixed issues in the `dnsdb` lookup subsystem. - The remaining issue with `libspf2`, raised as CVE against Exim, can'tbe addressed by exim team, as it seems to happen inside the library's code.
Library fixes are available. Best Regards
Index: Makefile
===================================================================
RCS file: /cvs/ports/mail/exim/Makefile,v
retrieving revision 1.144
diff -u -p -r1.144 Makefile
--- Makefile 2 Oct 2023 21:17:01 -0000 1.144
+++ Makefile 16 Oct 2023 06:23:44 -0000
@@ -1,12 +1,11 @@
COMMENT-main = flexible mail transfer agent
COMMENT-eximon = X11 monitor tool for Exim MTA
-VERSION = 4.96.1
+VERSION = 4.96.2
DISTNAME = exim-${VERSION}
PKGNAME-main = exim-${VERSION}
FULLPKGNAME-eximon = exim-eximon-${VERSION}
FULLPKGPATH-eximon = ${PKGPATH},-eximon
-REVISION-main = 0
CATEGORIES = mail
Index: distinfo
===================================================================
RCS file: /cvs/ports/mail/exim/distinfo,v
retrieving revision 1.45
diff -u -p -r1.45 distinfo
--- distinfo 2 Oct 2023 21:17:01 -0000 1.45
+++ distinfo 16 Oct 2023 06:23:44 -0000
@@ -1,2 +1,2 @@
-SHA256 (exim-4.96.1.tar.gz) = bQaEXgfGmefau+HKHt8j/osXCD3J/gc28LSpA1GscI4=
-SIZE (exim-4.96.1.tar.gz) = 2587066
+SHA256 (exim-4.96.2.tar.gz) = oOX7lRDU4HcE0ffKi0Mq4GnTxSKzHOfvX3tJmK53elM=
+SIZE (exim-4.96.2.tar.gz) = 2587523
smime.p7s
Description: S/MIME Cryptographic Signature
