security advisorycritical issuedebian It was discovered that Exim, a mail transport agent, can be induced to accept a second message embedded as part of the body of a first message in certain configurations where PIPELINING or CHUNKING on incoming connections is offered. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5597-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso January 04, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : exim4 CVE ID : CVE-2023-51766 Debian Bug : 1059387 It was discovered that Exim, a mail transport agent, can be induced to accept a second message embedded as part of the body of a first message in certain configurations where PIPELINING or CHUNKING on incoming connections is offered. For the oldstable distribution (bullseye), this problem has been fixed in version 4.94.2-7+deb11u2. For the stable distribution (bookworm), this problem has been fixed in version 4.96-15+deb12u4. We recommend that you upgrade your exim4 packages. For the detailed security status of exim4 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/exim4 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . The Debian Security Advisory DSA-5597-1 addresses a critical flaw in Exim4 that allows message embedding in emails.. Exim4 Security Update, Debian Advisory, Email Agent Security, Transport Layer Issues, Message Handling Security. . Severity: Critical. LinuxSecurity.com Team
Jan 04, 2024 •Critical Debian