Stay Secure with the Latest Linux Advisories

security advisorybug fixremote access

Debian DSA-5728-1: Exim4 Critical Update on Remote Access Flaw

Phillip Szelat discovered that Exim, a mail transport agent, does not properly parse a multiline RFC 2231 header filename, allowing a remote attacker to bypass a $mime_filename based extension-blocking protection mechanism. . - ------------------------------------------------------------------------- Debian Security Advisory DSA-5728-1 This email address is being protected from spambots. You need JavaScript enabled to view it. https://www.debian.org/security/ Salvatore Bonaccorso July 10, 2024 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : exim4 CVE ID : CVE-2024-39929 Debian Bug : 1075785 Phillip Szelat discovered that Exim, a mail transport agent, does not properly parse a multiline RFC 2231 header filename, allowing a remote attacker to bypass a $mime_filename based extension-blocking protection mechanism. For the oldstable distribution (bullseye), this problem has been fixed in version 4.94.2-7+deb11u3. For the stable distribution (bookworm), this problem has been fixed in version 4.96-15+deb12u5. We recommend that you upgrade your exim4 packages. For the detailed security status of exim4 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/source-package/exim4 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian has released DSA-5728-1 addressing a critical Exim4 vulnerability. Users must upgrade promptly and review configurations to ensure security.. Exim4, Security Advisory, Debian Update, Remote Access, Bug Fix. . Severity: Critical. LinuxSecurity.com Team

Jul 10, 2024 •Critical Debian