Re: [oss-security] CVE-2019-15846: Exim - local or remote attacker can execute programs with root privileges.
Heiko Schlittermann via Exim-announce <[email protected]> Wed, 4 Sep 2019 12:46:49 +0200
| Newsgroups | gmane.mail.exim.announce |
|---|---|
| Organization | schlittermann -- internet & unix support |
| Message-ID | <20190904104649.GR3837__12322.7432299004$1567594695$gmane$org@jumper.schlittermann.de> |
--===============0301942470== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="bFUYW7mPOLJ+Jd2A" Content-Disposition: inline --bFUYW7mPOLJ+Jd2A Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Heiko Schlittermann <[email protected]> (Mi 04 Sep 2019 11:22:48 = CEST): > *** Note: EMBARGO is still in effect! *** > *** Distros must not publish any detail yet *** As I saw blocked accesses to our security repo: If you're entitled to access our non-public security repository, please update your "remote". The git URL is now: ssh://[email protected]/exim-security ssh://[email protected]/exim-packages-security (We addedd the -security suffix.) Best regards from Dresden/Germany Viele Gr=C3=BC=C3=9Fe aus Dresden Heiko Schlittermann -- SCHLITTERMANN.de ---------------------------- internet & unix support - Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} - gnupg encrypted messages are welcome --------------- key ID: F69376CE - ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ - --bFUYW7mPOLJ+Jd2A Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQEzBAABCgAdFiEE0L/WueylaUpvFJ3Or0zGdqa2wUIFAl1vlhgACgkQr0zGdqa2 wULWOwf8C8LLYBWGCr6RxuK55Dj4vdKSfZEYW6Xbod1Yd3H5Yl8duKQfj2zMriYf UKxURtjXvbFKz9ACpVG1BOMwNxHWCeoK78hAtBIEn2TQL1QdfQOQ5NBESRMpQEl1 FHuUcQbpHfzQHDfrP7kwVc2HeQ3+ziAV62QUQo5ixaV941S0zzRUhltdsEtpnUie VKs6pXV3RLXBo3mviuSUWJAihq/sdx4wtWmPVQTHID9W2/A1TZss6OFa30arTTTW c5tGGhNOg8Z2SeMxjZePcdzZ2ocvEaH30THyPi1CwgtyRJOHyMOC7442aMFaE/si bZTmKURXjV+JzHuZnyqZybiIcJKnVQ== =v+EJ -----END PGP SIGNATURE----- --bFUYW7mPOLJ+Jd2A-- --===============0301942470== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- ## List details at https://lists.exim.org/mailman/listinfo/exim-announce Exim details at http://www.exim.org/ ## --===============0301942470==--