[SECURITY] Fedora 43 Update: exim-4.100.1-1.fc43

Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 has an improper neutralization of line delimiters. Local users can alter the behavior of root processes because a recipient address may contain a newline character...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allows Out-of-bounds Read because pdkimfinishbodyhash does not validate the relationship between sig-bodyhash.len and b-bh.len; thus, a crafted DKIM-Signature header might lead to the leakage of sensitive information from process memory...

Astra Linux – Vulnerability in exim4

In versions of Exim prior to 4.99.3, in certain GnuTLS configurations, there is a remotely reachable use-after-free in the BDAT body parsing path. This issue is triggered when a client sends a TLS closenotify message during a CHUNKING transfer, followed by a final cleartext byte on the same TCP...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allowed execution with unnecessary privileges. Since Exim operates as root in the log directory which is owned by a non-root user, a symlink or hard link attack could allow overwriting of critical root-owned files anywhere in the filesystem...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allowed integer overflow to lead to a buffer overflow in the receiveaddrecipient function, through an email message with fifty million recipients. NOTE: Remote exploitation might be difficult due to resource consumption...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 has an improper neutralization of line delimiters, which is relevant in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can cause a new line to be inserted into a spool header file, thereby indirectly allowing unauthenticated...

Astra Linux – Vulnerability in exim4

In Exim before 4.99.2, when utf8 operators are enabled, there is a potential for out-of-bounds reading if large UTF-8 trailing characters are present malformed UTF-8 header data. Information may be disclosed within an error message generated during the processing of an unrelated email message...

Astra Linux – Vulnerability in exim4

Before version 4.97.1, Exim allowed SMTP smuggling in certain pipeline/chunking configurations. Remote attackers could use a known exploitation technique to inject e-mail messages with a spoofed MAIL FROM address, thereby bypassing an SPF protection mechanism. This issue arises because Exim...

Astra Linux – Vulnerability in exim4

Exim 4.98 before 4.98.1 allowed remote SQL injection when SQLite hints and ETRN serialization were used. Resolving SQL injection requires an update to 4.99.1 in certain non-default rate-limit configurations...

CLEANSTART-2025-AY16629 issue was discovered in the base64d function in the SMTP listener in Exim before 4

Security vulnerability affects the exim package. An issue was discovered in the base64d function in the SMTP listener in Exim before 4...

CLEANSTART-2025-UI48931 receive_msg function in receive

Security vulnerability affects the exim package. The receivemsg function in receive...

CLEANSTART-2025-UH23278 receive_msg function in receive

Security vulnerability affects the exim package. The receivemsg function in receive...

CLEANSTART-2025-LU26051 Exim supports the use of multiple "-p" command line arguments which are malloc()'ed and never free()'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution

Security vulnerability affects the exim package. Exim supports the use of multiple "-p" command line arguments which are malloc'ed and never free'ed, used in conjunction with other issues allows attackers to cause arbitrary code execution...

CLEANSTART-2025-SL34234 flaw was found in Exim versions 4

Security vulnerability affects the exim package. A flaw was found in Exim versions 4...

CLEANSTART-2025-JY82846 Exim 4

Security vulnerability affects the exim package. Exim 4...

CLEANSTART-2025-MR41152 Exim before 4

Security vulnerability affects the exim package. Exim before 4...

CLEANSTART-2025-PV46598 Exim 4

Security vulnerability affects the exim package. Exim 4...

CLEANSTART-2025-NA80309 Exim through 4

Security vulnerability affects the exim package. Exim through 4...

CLEANSTART-2025-VY34802 Security fix for CVE-2020-28026 applied in: exim 4.94.2-r0

Security vulnerability affects the exim package. This issue is resolved in later releases. See references for vulnerability details...