[CoIT-Security] Advisory - Exim Releases Security Patches (Remote exploit)

[Goode, April]

Advisory -

Please review the following Cybersecurity and Infrastructure Security Agency (CISA) advisory if you are running EXIM versions up to and including 4.92.1

>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>

National Cyber Awareness System:
Exim Releases Security Patches<https://www.us-cert.gov/ncas/current-activity/2019/09/06/exim-releases-security-patches>
09/06/2019 12:03 PM EDT

Original release date: September 6, 2019

Exim has released patches to address vulnerabilities affecting Exim 4.92.1 and prior versions. A remote attacker could exploit this vulnerability to take control of an affected email server.

The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Exim CVE-2019-15846<http://exim.org/static/doc/security/CVE-2019-15846.txt> page and upgrade to Exim 4.92.2 or apply the necessary patches.

This product is provided subject to this Notification<https://www.us-cert.gov/privacy/notification> and this Privacy & Use<https://www.dhs.gov/privacy-policy> policy.

________________________________
A copy of this publication is available at www.us-cert.gov<https://www.us-cert.gov>. If you need help or have questions, please send an email to info at us-cert.gov<mailto:info at us-cert.gov>. Do not reply to this message since this email was sent from a notification-only address that is not monitored. To ensure you receive future US-CERT products, please add US-CERT at ncas.us-cert.gov<mailto:US-CERT at ncas.us-cert.gov> to your address book.



April Goode MBA SPP
Director of OneNet Strategic Planning and Communications
Oklahoma State Regents for Higher Education
405.225.9251


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.onenet.net/pipermail/coit-security/attachments/20190906/75546ecb/attachment.html>