DMARC (not) in exim4_4.98

[Cam Ellison]

On 2026-02-18 09:37, Andreas Metzler wrote:
> On 2026-02-16 Cam Ellison <cam at ellisonet.ca> wrote:
>> My understanding is that the vulnerability in libopendmarc was resolved with
>> the new package (libopendmarc2t64), and that DMARC is now available as of
>> Exim4 4.96.
>> It's not available in 4.98 in trixie, at least not in what's running on my
>> machines.
>> Can someone fill me in on what's happening, please?
> Debian's exim packages are not built/linked against OpenDMARC. The
> existence/fix of a vulnerability in OpenDMARC ist completely unrelated
> to that fact.
>
Is that policy likely to change in the near future? I'm curious about 
the reasons.

Cheers

Cam