You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa exim4

Sigurnosni nedostatak programskog paketa exim4

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LUB

==========================================================================
Ubuntu Security Notice USN-4141-1
September 28, 2019

exim4 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 19.04

Summary:

Exim could be made to crash or run programs if it received specially
crafted network traffic.

Software Description:
– exim4: Exim is a mail transport agent

Details:

It was discovered that Exim incorrectly handled certain string operations.
A remote attacker could use this issue to cause Exim to crash, resulting in
a denial of service, or possibly execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 19.04:
exim4-daemon-heavy 4.92-4ubuntu1.4
exim4-daemon-light 4.92-4ubuntu1.4

In general, a standard system update will make all the necessary changes.

References:
https://usn.ubuntu.com/4141-1
CVE-2019-16928

Package Information:
https://launchpad.net/ubuntu/+source/exim4/4.92-4ubuntu1.4

—–BEGIN PGP SIGNATURE—–
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=BY/S
—–END PGP SIGNATURE—–

AutorToni Vugdelija
Cert idNCERT-REF-2019-09-0001-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
IzvorAdobe
Top
More in Preporuke
Sigurnosni nedostatak programskog paketa golang-1.11

Otkriven je sigurnosni nedostatak u programskom paketu golang-1.11 za operacijski sustav Debian. Otkriveni nedostatak potencijalnim napadačima omogućuje zaobilaženje sigurnosnih ograničenja....

Close