From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp0 ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id WBAPJJSeomBk6gAAgWs5BA (envelope-from ) for ; Mon, 17 May 2021 18:49:24 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:bcc0::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp0 with LMTPS id kAvMH5SeomADNQAA1q6Kng (envelope-from ) for ; Mon, 17 May 2021 16:49:24 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 0FBBF235D0 for ; Mon, 17 May 2021 18:49:24 +0200 (CEST) Received: from localhost ([::1]:40860 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1ligQl-00063Q-1c for larch@yhetil.org; Mon, 17 May 2021 12:49:23 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:60054) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lifyT-0001Yx-C4 for guix-devel@gnu.org; Mon, 17 May 2021 12:20:10 -0400 Received: from out5-smtp.messagingengine.com ([66.111.4.29]:39981) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1lifyP-00023d-V9 for guix-devel@gnu.org; Mon, 17 May 2021 12:20:09 -0400 Received: from compute3.internal (compute3.nyi.internal [10.202.2.43]) by mailout.nyi.internal (Postfix) with ESMTP id 446455C0130; Mon, 17 May 2021 12:20:04 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute3.internal (MEProxy); Mon, 17 May 2021 12:20:04 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=mesmtp; bh=XCM7UZC6vj4UuSKntYLCC5Xn zLKWfGszFVvmIwF8IJw=; b=vdtn+t81RMepRZHj87fKrmsygxfk0qjg52g58nbo 2RZM63COHYSw/QAhCekmaHSabEM6JdzLJXstEXgrB4ylWv8fiUVPeA1tGjfpUp2v MlydNACn6L7rCrGvhF9SoGOf5gwTfkud7tzxsxOVnIlQFOe072bZpgkvStc39ACo 8wI= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm2; bh=XCM7UZ C6vj4UuSKntYLCC5XnzLKWfGszFVvmIwF8IJw=; b=WEkDSuuRiyVRAhLKR2px37 5YMK0Q7Wam0vbi/uRlVdk1KzmNG22o3AqtvbTSfx0F4iy7C8x8fbHJLmti+UbMGn 86C2WVdlg6MFtgQjgzrYlrYXmf5HzlAa7ZzNh8zP9gsPAdk1aVfxqA4jg8NlybWv BuVOW1h3kkjkZqvda+KY5fkhM+3PQ6MMYNPJ1jR08Am/PC7tD71f+sJBOFoSDCIN gsEj5rP6fByNMWqb6PWX3AHORJfIxtaFSMuh13bsB2HKhKiaw2Y9BcYMXWwFf/cH 3ccrZWKQPaArEFnF8rEUagR6w6PdyXDDRxpCsY7AQWTx4zUO0rFdwvXT58SEmP3Q == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeduledrvdeihedgleelucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfqfgfvpdfurfetoffkrfgpnffqhgen uceurghilhhouhhtmecufedttdenucesvcftvggtihhpihgvnhhtshculddquddttddmne cujfgurhepfffhvffukfhfgggtuggjsehttdertddttddvnecuhfhrohhmpefnvghoucfh rghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnhgrmhgvqeenucggtffrrghtth gvrhhnpeeukeektdffvddtudegjeegtdevhfeufeeivdejiedtieegtdevjedvjeehffev gfenucfkphepuddttddruddurdduieelrdduudeknecuvehluhhsthgvrhfuihiivgeptd enucfrrghrrghmpehmrghilhhfrhhomheplhgvohesfhgrmhhulhgrrhhirdhnrghmvg X-ME-Proxy: Received: from localhost (pool-100-11-169-118.phlapa.fios.verizon.net [100.11.169.118]) by mail.messagingengine.com (Postfix) with ESMTPA; Mon, 17 May 2021 12:20:03 -0400 (EDT) Date: Mon, 17 May 2021 12:20:01 -0400 From: Leo Famulari To: Taylan Kammer Subject: Re: Exim CVEs (21Nails) Message-ID: References: <167164ca-dd47-e1ea-4b5b-4ae973dca222@gmail.com> <05916828-a36c-3d65-79fe-6ca1a6c543f1@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <05916828-a36c-3d65-79fe-6ca1a6c543f1@gmail.com> Received-SPF: pass client-ip=66.111.4.29; envelope-from=leo@famulari.name; helo=out5-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Guix Devel Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1621270164; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=XCM7UZC6vj4UuSKntYLCC5XnzLKWfGszFVvmIwF8IJw=; b=NixIx4u3DRO/+FWHpeXI0eCV8LNs3TBx/awU1sfLJ6YGH7KnHHz/q9YQAb/twpY4i2z7CS l4ulCdRHqjVvkZouRPfMOhTU0G9f2T43qpkvKNLGU0E5avQ01Ilel6xi74qQ7CXYOFn8sD od6B61uNf+L/80v8/veoL2PTrwmNtcrKn2/7uxKMaV3cPejU9C1beDbXqod8EaKE58MGJN /jaMYgBSMXKhcFNTJzAFbS2rQ1/cVYtX6ius8ZZuWllAMgISxoLSpPiO8QquX9iXrBwzgE c/aIaB0Re12ndpj0c7iBA7sIpgtYEOp1g+eU6Y1eAfzkK27MoYHgQvPzkqzMaQ== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1621270164; a=rsa-sha256; cv=none; b=pf9uiCOhxLmc1WgLUxC3u388YOTxsHptAk7u7M7jKxJvIUOXElIBqMha2CVCY+giZ77raq C1n0faRptSZSWY0zuOu0X6iSlhpVJ6dG6BaT/LBp+B93fS8ydHj69zRgZuwje76MJODWZz KE1ERXEZwz9Wj97KRF3hLUIxJznWt/GEArzHZj3V5lRYLCz5SsnRYanjNMDeLEI8KBV76I MxDhgWeonbX2SPWMlONHHq/ua04GHTbpJ0XBUxh9yU6H4WFALdrG2KupqjwFVpFK73xmHd kb05CGHiae+7rYyvCSzHdaXIz3AbZQ67d09aTDeukFkA6EJHxhl5mNlZ6FJkOA== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=famulari.name header.s=mesmtp header.b=vdtn+t81; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=WEkDSuuR; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Spam-Score: -1.14 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=famulari.name header.s=mesmtp header.b=vdtn+t81; dkim=pass header.d=messagingengine.com header.s=fm2 header.b=WEkDSuuR; dmarc=none; spf=pass (aspmx1.migadu.com: domain of guix-devel-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=guix-devel-bounces@gnu.org X-Migadu-Queue-Id: 0FBBF235D0 X-Spam-Score: -1.14 X-Migadu-Scanner: scn0.migadu.com X-TUID: tlkby64QP6oU On Mon, May 17, 2021 at 05:26:36PM +0200, Taylan Kammer wrote: > On the same day that article was published, neat! :-) There was advance warning, so we were ready :)