Ubuntu 16.10 USN-3164-1 Critical Exim DKIM Key Leak Advisory

ubuntu

January 5, 2017

Exim could be made to expose private DKIM signing keys.

Summary

Exim could be made to expose private DKIM signing keys.

Software Description:

- exim4: Exim is a mail transport agent

Details:

Bjoern Jacke discovered that Exim incorrectly handled DKIM keys. In certain

configurations, private DKIM signing keys could be leaked to the log files.

Topics Covered

security advisory update critical exim information disclosure ubuntu DKIM

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.10:
  exim4-daemon-heavy              4.87-3ubuntu1.1
  exim4-daemon-light              4.87-3ubuntu1.1

Ubuntu 16.04 LTS:
  exim4-daemon-heavy              4.86.2-2ubuntu2.1
  exim4-daemon-light              4.86.2-2ubuntu2.1

Ubuntu 14.04 LTS:
  exim4-daemon-heavy              4.82-3ubuntu2.2
  exim4-daemon-light              4.82-3ubuntu2.2

Ubuntu 12.04 LTS:
  exim4-daemon-heavy              4.76-3ubuntu3.4
  exim4-daemon-light              4.76-3ubuntu3.4

In general, a standard system update will make all the necessary changes.