Exim 4.92.3 has been released, addressing the fourth critical vulnerability of the year.
An emergency release of the Exim mail server, version 4.92.3, has been published, fixing yet another critical vulnerability (CVE-2019-16928) that potentially allows remote code execution on the server via the transmission of a specially crafted string in the EHLO command. The vulnerability manifests itself after privilege escalation and is limited to code execution with the rights of an unprivileged user under which the incoming message handler runs. The issue occurs only in the […]
