Stay Secure with the Latest Linux Advisories

security advisoryfedoraupdate

Fedora 22 Exim: Critical Security Update For Local Escalation

This is new version fixing local privilege escalation for set-uid root when using perl_startup.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-0e3ca94d88 2016-03-13 09:04:20.340539 -------------------------------------------------------------------------------- Name : exim Product : Fedora 22 Version : 4.85.2 Release : 1.fc22 URL : https://www.exim.org/ Summary : The exim mail transfer agent Description : Exim is a message transfer agent (MTA) developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal of flexibility in the way mail can be routed, and there are extensive facilities for checking incoming mail. Exim can be installed in place of sendmail, although the configuration of exim is quite different to that of sendmail. -------------------------------------------------------------------------------- Update Information: This is new version fixing local privilege escalation for set-uid root when using perl_startup. -------------------------------------------------------------------------------- References: [ 1 ] Bug #1314293 - CVE-2016-1531 exim: local root privilege escalation for configurations with perl_startup https://bugzilla.redhat.com/show_bug.cgi?id=1314293 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update exim' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Latest Fedora 22 security patch for exim fixes privilege escalation vulnerabilities in perl_startup settings. Update immediately to ensure system integrity.. Fedora Exim Privilege Escalation Update. . Severity: Critical. LinuxSecurity.com Team

Mar 13, 2016 •Critical Fedora