Bug#987133: exim4: Exim 4.94's new tainting-feature will break many running configs

Paul Muster paul at muster.net
Sun Apr 18 10:18:23 BST 2021


Package: exim4
Version: 4.94-17
Severity: serious
Justification: The tainting-feature that has been introduced with 4.94 
by upstream will break many running configurations.

Dear Maintainers,

the tainting-feature that has been introduced with 4.94 by upstream will 
break many running configurations.

The feature requires "un-tainting" of all external information used in 
Exim's config for security reasons. Upstream unfortunately introduces 
this in a minor release and not in an Exim major release so that most of 
the users will get aware of it in the moment their mailserver stops working.

@the guys already working on the issue: Please add more information and 
get in touch with the Release Manager(s).

Thanks,

Paul



More information about the Pkg-exim4-maintainers mailing list