Bug#1053310: Fixes for stable/oldstable?

Tomas Pospisek tpo at sourcepole.ch
Tue Oct 31 10:07:06 GMT 2023


Hello Exim maintainers,

this ticket, asking for packages with fixes for CVE-2023-42117 and other 
security relavant issues is closed.

However only a package for unstable has been released:

https://security-tracker.debian.org/tracker/CVE-2023-42117

all other Debian releases (stable, oldstable) still seem to be carrying 
the vulnerable Exim4 version.

What is the status of releasing fixed Exims for Debian stable, oldstable? 
Is anybody working on it? Is help needed?
*t

PS: I'd prefer this bugreport to be open as long as the stable and
     oldstable packages are still vulnerable...



More information about the Pkg-exim4-maintainers mailing list