Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 40: exim Update for CVE 2025-30232 - Critical Escalation Fix

fedora
Calendar Grey April 5, 2025
Dist Fedora Esm H88
Patch addresses privilege elevation vulnerabilities in Exim for Fedora 40, mitigating CVE 2025-30233. Execute installation for improved safety.
This is an update fixing CVE 2025-30232.

Summary

Exim is a message transfer agent (MTA) developed at the University of

Cambridge for use on Unix systems connected to the Internet. It is

freely available under the terms of the GNU General Public Licence. In

style it is similar to Smail 3, but its facilities are more

general. There is a great deal of flexibility in the way mail can be

routed, and there are extensive facilities for checking incoming

mail. Exim can be installed in place of sendmail, although the

configuration of exim is quite different to that of sendmail.

Update Information:

This is an update fixing CVE 2025-30232.

Topics%20covered

Topics Covered

security advisory Fedora privilege escalation exim update information threat mitigation

Change Log

* Wed Mar 26 2025 Jaroslav Å karvada - 4.98.2-1 - New version Resolves: CVE 2025-30232

References


[ 1 ] Bug #2355643 - CVE-2025-30232 exim: privilege escalation via use-after-free [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2355643

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-3a56fe6159' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: exim
Product: Fedora 40
Version: 4.98.2
Release: 1.fc40
URL: https://www.exim.org/
Summary: The exim mail transfer agent

Topics%20covered

Topics Covered

security advisory Fedora privilege escalation exim update information threat mitigation

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here