==========================================================================
Ubuntu Security Notice USN-3565-1
February 12, 2018

exim4 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

– Ubuntu 17.10
– Ubuntu 16.04 LTS
– Ubuntu 14.04 LTS

Summary:

Exim could be made to crash or run programs if it received specially
crafted network traffic.

Software Description:
– exim4: Exim is a mail transport agent

Details:

Meh Chang discovered that Exim incorrectly handled memory in certain
decoding operations. A remote attacker could use this issue to cause Exim
to crash, resulting in a denial of service, or possibly execute arbitrary
code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.10:
exim4-daemon-heavy 4.89-5ubuntu1.3
exim4-daemon-light 4.89-5ubuntu1.3

Ubuntu 16.04 LTS:
exim4-daemon-heavy 4.86.2-2ubuntu2.3
exim4-daemon-light 4.86.2-2ubuntu2.3

Ubuntu 14.04 LTS:
exim4-daemon-heavy 4.82-3ubuntu2.4
exim4-daemon-light 4.82-3ubuntu2.4

In general, a standard system update will make all the necessary changes.

References:
https://www.ubuntu.com/usn/usn-3565-1
CVE-2018-6789

Package Information:
https://launchpad.net/ubuntu/+source/exim4/4.89-5ubuntu1.3
https://launchpad.net/ubuntu/+source/exim4/4.86.2-2ubuntu2.3
https://launchpad.net/ubuntu/+source/exim4/4.82-3ubuntu2.4

—–BEGIN PGP SIGNATURE—–
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=BKNl
—–END PGP SIGNATURE—–
—