tocsin

Alpine/exim: medium 6.3

Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options.

Action: Upgrade exim to 4.94.2-r0 or later.

Affected

introducedfixedlast affected
04.94.2-r0-

Fixed versions

4.94.2-r0

Sources

published · modified · JSON