oss-sec mailing list archives

Re: Exim 4.95 invalid free


From: John Helmert III <ajak () gentoo org>
Date: Sat, 6 Aug 2022 09:47:05 -0500

Hi, please keep in mind the list content guidelines:

"At least the most essential part of your message (e.g., vulnerability detail and/or exploit) should be directly 
included in the message itself (and in plain text), rather than only included by reference to an external resource. 
Posting links to relevant external resources as well is acceptable, but posting only links is not. Your message should 
remain valuable even with all of the external resources gone."

Do you have any upstream references or commits of the fix?

On Sat, Aug 06, 2022 at 12:06:36PM +0300, Evgeny Legerov wrote:
Hi,


The issue has been silently fixed in Exim 4.96 - 
https://github.com/ivd38/exim_invalid_free



regards,

-e

Attachment: signature.asc
Description:


Current thread: