Re: CVE-2019-15846: Exim - local or remote attacker can execute programs with root privileges.

--===============2079462292==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="JPKYlvo4+BwO1+FT"
Content-Disposition: inline


--JPKYlvo4+BwO1+FT
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

*** Note: EMBARGO is still in effect!       ***
*** Distros must not publish any detail yet ***

In case you are entitled to access the security repo:
*and* use the 4.92.2+fixes branch:

The branch got two new commits, fixing a small tool. This tool is not
designed to process untrusted data, so there is no security issue, but
it was buggy. It is unlikely to be critical.

You may consider including the fix in the packages to be
released at CRD (today, 10.00 UTC) or schedule it for a later
maintainance release of the Exim packages.

commit cdc7f9a9667ecf31d803fc8d1a31b466284360bd
Author: Heiko Schlittermann (HS12-RIPE) <[email protected]>
Date:   Fri Sep 6 06:57:11 2019 +0200

commit 66935633816a88460f5222f40dc29d1a4e877978
Author: Heiko Schlittermann (HS12-RIPE) <[email protected]>
Date:   Thu Sep 5 14:56:22 2019 +0200

    Best regards from Dresden/Germany
    Viele Gr=C3=BC=C3=9Fe aus Dresden
    Heiko Schlittermann
--
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -
 ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -

--JPKYlvo4+BwO1+FT
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAABCgAdFiEE0L/WueylaUpvFJ3Or0zGdqa2wUIFAl1x8T8ACgkQr0zGdqa2
wUIEUggAq90HndAEvop7XJl2Hhlv0hcH1m0ZncK/ojF1OE1QAqCGtC73HnKh7qlD
d4KOxCd26f3slQqSWs6H8pZC0GvxoLU9QxTj0YyrBneOhY1VoLQKcGZ9ypcd3XlK
DGOUdVg5AnaJOxu0y9v/Uu8h/8JdNJR/rH1w+NbQCgK7GfhBjFLgqOIfso1jPtFY
yTLlOEgDvj3+G+RHojaz02uWCsH20ZR9yDqv8eOk9qasEZ8PSV48S+ZgGXhgYi9o
suNUGEF0qKYccL0DKFULtUyIgkuMPgCyumHS9LrRRMa4pN0XQIBUsQOhsj+9msJ/
DicrvbXIXfHNsRNvBwrnkvRT3TJD0Q==
=e4l+
-----END PGP SIGNATURE-----

--JPKYlvo4+BwO1+FT--


--===============2079462292==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-announce Exim details at http://www.exim.org/ ##

--===============2079462292==--