Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 21 Apr 2021 13:48:55 +0200
From: Heiko Schlittermann <>
To: oss-security <>
Subject: Exim security update ahead

Dear Exim-Users and maintainers,

this is a *heads up* notice only. No action is required on your part
right now.


Several exploitable vulnerabilities in Exim were reported to us and are

We have prepared a security release, tagged as "exim-4.94.1".

This release contains all changes on the exim-4.94+fixes branch plus
security fixes.


2021-04-27 13.30 UTC:   Grant access to the security repos
                        for distro maintainers

2021-05-04 13:30 UTC:   Publish the release on the public


The sources *will* be available on our security repo:

                  tag: exim-4.94.1

Access to these security Git repos will be granted for the known set of
Exim maintainers and distro packagers first. Please reach out to us, if
you need further details or if you think, you should be part of this

One week after granting access to the distro packagers the release will
be pushed to the well known public repos as usual.


The current Exim versions (and likely older versions too) suffer from
several exploitable vulnerabilities. These vulnerabilities were reported
by Qualys via back in October 2020.

Due to several internal reasons it took more time than usual for the Exim
development team to work on these reported issues in a timely manner.

We explicitly thank Qualys for reporting *and* for providing patches for
most of the reported vulnerabilities.

Thank you for using Exim.

    Best regards from Dresden/Germany
    Viele Grüße aus Dresden
    Heiko Schlittermann
-- ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -

Download attachment "signature.asc" of type "application/pgp-signature" (489 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.