Re: [embargoed security update] mail/exim -> 4.94.1

We can do nothing until the embargo is lifted.

--
Sent from a phone, apologies for poor formatting.
On 28 April 2021 07:54:11 Renaud Allard <renaud@allard.it> wrote:

> Hello,
>
> Here is an diff to update exim to 4.94.1. This is a very important
> security update.
>
> Unfortunately, this update is embargoed so that "distro" package
> maintainers have the time to publish the packages. This means the source
> tar.gz is not available before 2021-05-04 13:30 UTC. I don't know how we
> could provide packages for -stable before the tar is published. I can
> build them for 6.8, but I can't sign them or build for 6.9 yet.
>
> It solves the following CVE:
>
> - CVE-2020-28007
> - CVE-2020-28008
> - CVE-2020-28009
> - CVE-2020-28010
> - CVE-2020-28011
> - CVE-2020-28012
> - CVE-2020-28013
> - CVE-2020-28014
> - CVE-2020-28015
> - CVE-2020-28016
> - CVE-2020-28017
> - CVE-2020-28018
> - CVE-2020-28019
> - CVE-2020-28020
> - CVE-2020-28021
> - CVE-2020-28022
> - CVE-2020-28023
> - CVE-2020-28024
> - CVE-2020-28025
> - CVE-2020-28026
> - CVE-2021-27216
>
> Best Regards