mail-mta/exim: add notice about new options for CVE-2016-1531
authorFabian Groffen <grobian@gentoo.org>
Fri, 4 Mar 2016 16:56:10 +0000 (17:56 +0100)
committerFabian Groffen <grobian@gentoo.org>
Fri, 4 Mar 2016 16:56:29 +0000 (17:56 +0100)
Package-Manager: portage-2.2.26

mail-mta/exim/exim-4.86.2.ebuild

index 1e63f26ac6f63800b7ce0600d80b24c3feea6fea..414ea67efbe2962532b6786d037b4c3ce947ee69 100644 (file)
@@ -515,6 +515,11 @@ pkg_postinst() {
                einfo "support prior to 4.83, make sure to remove all dsn_process"
                einfo "switches from your routers, see https://bugs.gentoo.org/511818"
        fi
+       if use perl ; then
+               einfo "For CVE-2016-1531, Exim introduced keep_environment and"
+               einfo "add_environment flags.  You might want to set them, see:"
+               einfo "https://lists.exim.org/lurker/message/20160302.191005.a72d8433.en.html"
+       fi
        einfo "Exim maintains some db files under its spool directory that need"
        einfo "cleaning from time to time.  (${EROOT}var/spool/exim/db)"
        einfo "Please use the exim_tidydb tool as documented in the Exim manual:"