no idea if it will fix CVE-2023-42118 as there is no info about that vulnerability but we can hope... libspf2 support has been disabled in exim and milter-greylist for 7.4. still enabled in opendmarc for now.