tocsin

Debian/exim4: unknown

expand.c in Exim before 4.83 expands mathematical comparisons twice, which allows local users to gain privileges and execute arbitrary commands via a crafted lookup value.

Action: Upgrade exim4 to 4.82.1-2 or later.

Affected

introducedfixedlast affected
04.82.1-2-

Fixed versions

4.82.1-2

Sources

published · modified · JSON