Ubuntu 26.04 LTS Exim Important File Access and Priv Escalation USN-8590-1

ubuntu

July 22, 2026

Several security issues were fixed in Exim.

Summary

Several security issues were fixed in Exim.

Software Description:

- exim4: Exim is a mail transport agent

Details:

It was discovered that Exim incorrectly handled certain command line

options. A local attacker could possibly use this issue to access files

outside of the spool area.

It was discovered that Exim incorrectly handled string expansion in

.local files. A local attacker could possibly use this issue to escalate

privileges.

Topics Covered

security advisory privilege escalation exim Ubuntu important file access

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  exim4                           4.99.1-1ubuntu1.4

Ubuntu 24.04 LTS
  exim4                           4.97-4ubuntu4.7

Ubuntu 22.04 LTS
  exim4                           4.95-4ubuntu2.11

In general, a standard system update will make all the necessary changes.