| 1 |
commit: 19be7376115b40b59b26846918a6bbd1587a314e |
| 2 |
Author: Fabian Groffen <grobian <AT> gentoo <DOT> org> |
| 3 |
AuthorDate: Tue May 4 15:43:33 2021 +0000 |
| 4 |
Commit: Fabian Groffen <grobian <AT> gentoo <DOT> org> |
| 5 |
CommitDate: Tue May 4 15:43:33 2021 +0000 |
| 6 |
URL: https://gitweb.gentoo.org/data/gentoo-news.git/commit/?id=19be7376 |
| 7 |
|
| 8 |
add 2021-05-04-exim-transports-disallow-tainted |
| 9 |
|
| 10 |
Signed-off-by: Fabian Groffen <grobian <AT> gentoo.org> |
| 11 |
|
| 12 |
...1-05-04-exim-transports-disallow-tainted.en.txt | 28 ++++++++++++++++++++++ |
| 13 |
1 file changed, 28 insertions(+) |
| 14 |
|
| 15 |
diff --git a/2021-05-04-exim-transports-disallow-tainted/2021-05-04-exim-transports-disallow-tainted.en.txt b/2021-05-04-exim-transports-disallow-tainted/2021-05-04-exim-transports-disallow-tainted.en.txt |
| 16 |
new file mode 100644 |
| 17 |
index 0000000..f16e485 |
| 18 |
--- /dev/null |
| 19 |
+++ b/2021-05-04-exim-transports-disallow-tainted/2021-05-04-exim-transports-disallow-tainted.en.txt |
| 20 |
@@ -0,0 +1,28 @@ |
| 21 |
+Title: Exim>=4.94 transports: tainted not permitted |
| 22 |
+Author: Fabian Groffen <grobian@g.o> |
| 23 |
+Posted: 2021-05-04 |
| 24 |
+Revision: 1 |
| 25 |
+News-Item-Format: 2.0 |
| 26 |
+Display-If-Installed: mail-mta/exim |
| 27 |
+ |
| 28 |
+The Message Transfer Agent Exim disallows tainted variables in transport |
| 29 |
+configurations since version 4.94. Existing exim.conf configurations |
| 30 |
+in /etc/exim need to be reviewed for breakage prior to upgrading to |
| 31 |
+ >=mail-mta/exim-4.94 to avoid error conditions at runtime. |
| 32 |
+ |
| 33 |
+Since the release of Exim-4.94, transports refuse to use tainted data in |
| 34 |
+constructing a delivery location. If you use this in your transports, |
| 35 |
+your configuration will break, causing errors and possible downtime. |
| 36 |
+ |
| 37 |
+Particularly, the use of $local_part in any transport, should likely be |
| 38 |
+updated with $local_part_data. Check your local_delivery transport, |
| 39 |
+which historically used $local_part. |
| 40 |
+ |
| 41 |
+Unfortunately there is not much documentation on "tainted" data for |
| 42 |
+Exim[1], and to resolve this, non-official sources need to be used, such |
| 43 |
+as [2] and [3]. |
| 44 |
+ |
| 45 |
+ |
| 46 |
+[1] https://lists.exim.org/lurker/message/20201109.222746.24ea3904.en.html |
| 47 |
+[2] https://mox.sh/sysadmin/tainted-filename-errors-in-exim-4.94/ |
| 48 |
+[3] https://jimbobmcgee.wordpress.com/2020/07/29/de-tainting-exim-configuration-variables/ |
Archives