tocsin

Debian/exim4: critical 9.1

In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or erroneous data processi

Action: Upgrade exim4 to 4.96-15+deb12u9 or later.

Affected

introducedfixedlast affected
04.96-15+deb12u9-

Fixed versions

4.96-15+deb12u9

Sources

published · modified · JSON