Hi,
hope that Sophos knows about the new Exim vulnerabilities and wil release hotfix:
https://www.bleepingcomputer.com/news/security/critical-21nails-exim-bugs-expose-millions-of-servers-to-attacks/