From: Heiko Schlittermann (HS12-RIPE) <hs@schlittermann.de>
Date: Sat, 30 Dec 2023 08:44:34 +0000 (+0100)
Subject: chg: mention CVE for 3.97.1
X-Git-Url: https://git.exim.org/exim-website.git/commitdiff_plain/HEAD

chg: mention CVE for 3.97.1
---

diff --git a/templates/web/index.xsl b/templates/web/index.xsl
index 7604d2c..33c36cd 100644
--- a/templates/web/index.xsl
+++ b/templates/web/index.xsl
@@ -47,15 +47,19 @@
 
          <p id="version_info">
             <xsl:text>The current version is </xsl:text> <xsl:value-of select="/content/current_version"/><xsl:text>.</xsl:text> <br/>
-	    <xsl:text>If necessary, we publish maintenance releases. These releases are mainly intended for package maintainers.</xsl:text>
 	</p>
 
-	<!--
 	<p>
-	<xsl:text>This is a security release. You should upgrade as soon as possible. Please see </xsl:text>
-        <a href="static/doc/security/CVE-2023-zdi.txt">this document for more detailed information.</a>
+	<xsl:text>This is a security release. It addresses the SMTP smuggling attack to which SMTP servers may be vulnerable. See </xsl:text>
+	<a href="https://bugs.exim.org/show_bug.cgi?id=3063">our bugtracker (Bug 3063)</a>
+	<xsl:text> for further information. Exim got </xsl:text>
+	<a href="https://nvd.nist.gov/vuln/detail/CVE-2023-51766">CVE-2023-51766</a>
+	<xsl:text> assigned for this issue.</xsl:text>
 	</p>
-	-->
+
+	<p>
+	    <xsl:text>If necessary, we publish maintenance releases. These releases are mainly intended for package maintainers.</xsl:text>
+        </p>
 
 	 <!--
          <p>