Summary
It was discovered that Exim incorrectly handled certain command line
options. A local attacker could possibly use this issue to access files
outside of the spool area.
It was discovered that Exim incorrectly handled string expansion in
.local files. A local attacker could possibly use this issue to escalate
privileges.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | exim4 | 4.95-4ubuntu2.11 |
| Ubuntu · 24.04 LTS 24.04:LTS | exim4 | 4.97-4ubuntu4.7 |
| Ubuntu · 26.04 LTS 26.04:LTS | exim4 | 4.99.1-1ubuntu1.4 |
References
-
report
https://launchpad.net/bugs/2161106