ukukhishwa okungahleliwe kweseva yemeyili okususa ukuba sengozini okubalulekile (CVE-2019-13917), okuvumela ukwenziwa kwekhodi okukude ngamalungelo empande uma izilungiselelo ezithile zikhona ekucushweni.
Ukuba sengozini kusukela ekukhishweni okungu-4.85 uma usebenzisa i-opharetha ethi “${sort }” kuzilungiselelo, uma ama-elementi asetshenziswe kuhlu lokuthi “hlunga” angadluliselwa kubahlaseli (ngokwesibonelo, ngeziguquko zesizinda se-$local_part kanye ne-$). Ngokuzenzakalelayo, lo opharetha akasetshenziswa ekucushweni okunikezwayo ekusabalaliseni kwe-Exim kanye nakuphakheji ye-Debian ne-Ubuntu (mhlawumbe nakokunye ukusatshalaliswa). Ukuze uhlole isistimu yakho ngobungozi, ungasebenzisa umyalo “exim -bP config | uhlobo lwe-grep".
Izibuyekezo zokulungisa ukuba sengozini sezikhishiwe и . Izibuyekezo azikakalungeli , , и . Inkinga ye-RHEL ne-CentOS , njengoba i-Exim ingafakiwe kunqolobane yabo yephakheji evamile (uma kunesidingo, ifakwe endaweni yokugcina ).
Source: opennet.ru