Control: tags -1 + confirmed On Tue, 2014-07-22 at 18:12 +0200, Andreas Metzler wrote: > exim 4.83 includes a fix for a minor security issue (local privilege > escalation to exim user) which I would like to fix for stable. I have > already doublechecked with debian security that fixing this via a > stable update instead of a DSA is the right thing to do. > > debdiff attached. > > This is CVE-2014-2972. Please go ahead; thanks. Regards, Adam