Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

Debian: DSA-5597-1 Critical: Exim4 Message Embedding Flaw

debian
Calendar Grey January 4, 2024
Debian Logo
The Debian Security Advisory DSA-5597-1 addresses a critical flaw in Exim4 that allows message embedding in emails.
It was discovered that Exim, a mail transport agent, can be induced to accept a second message embedded as part of the body of a first message in certain configurations where PIPEL...

Summary

For the oldstable distribution (bullseye), this problem has been fixed
in version 4.94.2-7+deb11u2.

For the stable distribution (bookworm), this problem has been fixed in
version 4.96-15+deb12u4.

We recommend that you upgrade your exim4 packages.

For the detailed security status of exim4 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/source-package/exim4

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: exim4
CVE ID: CVE-2023-51766

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here