EXIM Vuln. - any news?

Yes we are working on & testing the new 9.706 release now, and are hoping to publish that tomorrow. 

Thanks. I have installed the 9.705-007 on a VMware Cluster, everything seems to work.

Update seems fine, no problems so far :)

When can we expect this to show up in Up2Date?

(I might perform a manual download and upgrade, but after all, I just received an advisory mail about 9.705-7 available since yesterday and 9.706 availbale or about to be availbale today - and including a link to "How to run Up2Date". This seems a bit pointless for the general aufdience when Up2Date doesn't deal these versions)

Hi all, 

We just released a 9.706-9 update on the download server as well, which patches these exim vulnerabilities for customers who already updated to 9.706-8. 

I was about to make a ticket after 9.706-8 was causing attachment corruption with email. Every attachment in or out was getting about 1.3% of the end of the file removed. I check a original and a corrupted file in a hex compare, it didn't scramble or corrupt the data structure, it just literally whacked the last bit off the data stream. here is an example of one of the test files https://i.imgur.com/MecVsxV.png . I'm posting here to say 9.706-9 fixed my issue. Ticket averted.