Add CVE-2018-6789 to security/

[exim-website.git] / templates / web / index.xsl

diff --git a/templates/web/index.xsl b/templates/web/index.xsl
index 9918701bd743536b33ab5111ca279ccb9bd37ca8..c27c43705cc4bac86a02826d9557978f39d31771 100644 (file)
--- a/templates/web/index.xsl
+++ b/templates/web/index.xsl
@@ -17,7 +17,7 @@
                        <link rel="stylesheet" type="text/css" href="{$staticroot}/css/index.css"/>
 
                <!-- Canonical -->
-                        <link rel="canonical" href="http://www.exim.org/"/>
+                        <link rel="canonical" href="https://www.exim.org/"/>
 
        </xsl:variable>
  
@@ -28,24 +28,25 @@
 
                 <!-- Summary -->
                        <p id="summary">
-                               <a href="http://www.exim.org/">
+                               <a href="https://www.exim.org/">
                                        <img src="i/exim-blue-ld-87x65.png" alt="Exim Logo" width="87" height="65"/>
                                </a>
                                <xsl:text>Exim is a message transfer agent (MTA) developed at the </xsl:text>
-                               <a href="http://www.cam.ac.uk/" title="University of Cambridge Home page">University of Cambridge</a>
+                               <a href="https://www.cam.ac.uk/" title="University of Cambridge Home page">University of Cambridge</a>
                                <xsl:text> for use on Unix systems connected to the Internet. It is freely available under the terms of the </xsl:text>
-                               <a href="http://www.gnu.org/licenses/gpl.html" title="GPL Information">GNU General Public Licence</a>
+                               <a href="https://www.gnu.org/licenses/gpl.html" title="GPL Information">GNU General Public Licence</a>
                                <xsl:text>. In style it is similar to </xsl:text>
-                               <a href="http://freshmeat.net/projects/smail/" rel="nofollow">Smail 3</a>
+                               <a href="http://freecode.com/projects/smail/" rel="nofollow">Smail 3</a>
                                <xsl:text>, but its facilities are more general. There is a great deal of flexibility in the way mail can be routed, and there are extensive facilities for checking incoming mail. Exim can be installed in place of </xsl:text>
-                               <a href="http://www.sendmail.org/" title="Sendmail home page" rel="nofollow">Sendmail</a>
+                               <a href="https://www.proofpoint.com/us/sendmail-open-source" title="Sendmail home page" rel="nofollow">Sendmail</a>
                                <xsl:text>, although the configuration of Exim is quite different.</xsl:text>
                        </p>
 
       <!-- Version Information -->
          <p id="obsolete_version_info">
 
-            <xsl:text>All versions of Exim previous to version </xsl:text><xsl:value-of select="/content/current_version"/><xsl:text> are now obsolete and everyone is very strongly recommended to upgrade to a current release. The last 3.x release was 3.36. It is obsolete and should not be used.</xsl:text>
+            <xsl:text>All versions of Exim previous to version </xsl:text><xsl:value-of select="/content/current_version"/><xsl:text> are now obsolete. The last 3.x release was 3.36. It is obsolete and should not be used.</xsl:text>
+
          </p>
 
          <p id="version_info">
@@ -53,8 +54,9 @@
             <xsl:value-of select="/content/current_version"/>
          </p>
 
-        <p> We fixed <a href="static/doc/CVE-2016-9963.txt">CVE-2016-9963</a> right now, you are
-        urged to upgrade to 4.88 or to 4.87.1, available from the known download sites.
+        <p> We fixed CVE-2017-16943 and CVE-2017-16944 with this release.
+        To address these two CVEs, please update to 4.89.1 or simply disable
+        the SMTP CHUNKING extension by using <code>chunking_advertise_hosts = </code> in the main configuration section.
         </p>
 
          <p id="beta_version_info">
@@ -70,7 +72,7 @@
                                <xsl:text>You may wish to purchase </xsl:text>
                                <a href="https://www.uit.co.uk/the-exim-smtp-mail-server">The Exim SMTP Mail Server</a>
                                <xsl:text> book, written by the original author of Exim, </xsl:text>
-                               <a href="http://en.wikipedia.org/wiki/Philip_Hazel">Philip Hazel</a>
+                               <a href="https://en.wikipedia.org/wiki/Philip_Hazel">Philip Hazel</a>
                                <xsl:text>.</xsl:text>
                        </p>