Author: Adam Spiers Date: To: John Winters CC: users Subject: Re: [bitfolk] 21 critical Exim security issues need addressing
On Fri, May 07, 2021 at 11:19:19AM +0100, John Winters wrote: >On 07/05/2021 11:06, Adam Spiers wrote:
>>That list suggests that only sid (unstable), bullseye (testing), and
>>buster-backports have a fix.
>
>Debian don't upgrade versions, they backport fixes to the version in a
>release.
>
>From the Debian security mailing list:
>
> For the stable distribution (buster), these problems
> have been fixed in version 4.92-8+deb10u6.
Ah OK, thanks. It's a shame that LWN article didn't list fixed
versions for each distro; that best practice is normally followed for
vulnerability announcements.