A vulnerability has been detected in Exim server versions 4.87 to 4.91, allowing remote execution of commands on the server with root privileges. Version 4.92, released in February, is not affected. Details about the vulnerability are not yet available, but they should be disclosed after the embargo (a period during which vendors receive information about the issue and decide how to proceed).
Source: linux.org.ru
