Re: CVE Request: exim STARTTLS fix

[Josh Bressers <bressers () redhat com>]

----- Original Message -----
> Hi,
>
> while reviewing EXIM git for the last security issues, I also found the
> STARTTLS fix:
>
> http://git.exim.org/exim.git/commitdiff/da80c2a8ed49427334af613c00df65ae301cacdd
>
> Is fixed with exim 4.76 apparently.

That commit suggests it's not an issue, but rather some extra paranoid
buffer wiping. Is there a reason to believe this is a problem?

I'd rather not assign an ID if it's not needed.

Thanks.

-- 
    JB