UbuntuUpdates.org

Package "exim4"

Name: exim4

Description:

metapackage to ease Exim MTA (v4) installation
Latest version: 4.97-4ubuntu4.3
Release: noble (24.04)
Level: security
Repository: main
Homepage: https://www.exim.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "exim4"

All arch deb package
APT INSTALL

Other versions of "exim4" in Noble

Repository Area Version
base universe 4.97-4ubuntu4
base main 4.97-4ubuntu4
security universe 4.97-4ubuntu4.3
updates main 4.97-4ubuntu4.3
updates universe 4.97-4ubuntu4.3

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 4.97-4ubuntu4.3 2025-03-26 18:07:37 UTC

  exim4 (4.97-4ubuntu4.3) noble-security; urgency=medium

  * SECURITY UPDATE: use-after-free security issue
    - debian/patches/CVE-2025-30232.patch: null out debug_pretrigger_buf
      pointer before freeing the buffer in src/debug.c.
    - CVE-2025-30232

 -- Marc Deslauriers <email address hidden> Fri, 21 Mar 2025 10:14:44 -0400
Source diff to previous version

Version: 4.97-4ubuntu4.1 2024-07-31 21:07:10 UTC

  exim4 (4.97-4ubuntu4.1) noble-security; urgency=medium

  * SECURITY UPDATE: Multiline header filename parsing issue
    - debian/patches/CVE-2024-39929-*.patch: Fix MIME parsing of filenames
      specified using multiple parameters.
    - CVE-2024-39929

 -- Fabian Toepfer <email address hidden> Tue, 30 Jul 2024 21:17:37 +0200
CVE-2024-39929 Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename extension-blocking protecti


About   -   Send Feedback to @ubuntu_updates