Bug#987133: exim4: Exim 4.94's new tainting-feature will break many running configs
Paul Muster
paul at muster.net
Sun Apr 18 10:18:23 BST 2021
Package: exim4
Version: 4.94-17
Severity: serious
Justification: The tainting-feature that has been introduced with 4.94
by upstream will break many running configurations.
Dear Maintainers,
the tainting-feature that has been introduced with 4.94 by upstream will
break many running configurations.
The feature requires "un-tainting" of all external information used in
Exim's config for security reasons. Upstream unfortunately introduces
this in a minor release and not in an Exim major release so that most of
the users will get aware of it in the moment their mailserver stops working.
@the guys already working on the issue: Please add more information and
get in touch with the Release Manager(s).
Thanks,
Paul
More information about the Pkg-exim4-maintainers
mailing list