tocsin

Debian/exim4: critical 9.8

In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation

Action: Upgrade exim4 to 4.96-15+deb12u9 or later.

Affected

introducedfixedlast affected
04.96-15+deb12u9-

Fixed versions

4.96-15+deb12u9

Sources

published · modified · JSON