[bug-notifications] [exim 0004631]: Upgrade exim to 4.72

[Mantis Bug Tracker]

A NOTE has been added to this issue. 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=4631 
====================================================================== 
Reported By:                dm26
Assigned To:                bwalton
====================================================================== 
Project:                    exim
Issue ID:                   4631
Category:                   upgrade
Reproducibility:            have not tried
Severity:                   major
Priority:                   normal
Status:                     assigned
====================================================================== 
Date Submitted:             2010-12-13 12:31 CET
Last Modified:              2010-12-20 16:08 CET
====================================================================== 
Summary:                    Upgrade exim to 4.72
Description: 
Please upgrade exim to the latest version.
The current OpenCSW version (4.68) has a remote root vulnerability.

The exploit is detailed here:
http://isc.sans.edu/diary.html?storyid=10057
====================================================================== 

---------------------------------------------------------------------- 
 (0008608) bwalton (developer) - 2010-12-20 16:08
 https://www.opencsw.org/mantis/view.php?id=4631#c8608 
---------------------------------------------------------------------- 
Hi Darren,

Are you by any chance using either of the mysql or postgresql lookup
facilities?  My own exim use is as a smarthost relay, so I'm not personally
using any of these advanced lookup types.

Thanks
-Ben