|
Exim Illegal IPv6 Address Buffer Overflow Vulnerability
Solution: The vendor has released patches, and a snapshot version of Exim to address this issue. These patches are for version 4.43 of Exim, but the vendor has reported that they may also work for previous versions. The patches can be extracted from the referenced email message from Philip Hazel. Debian has released an advisory (DSA 637-1) and updates to address this vulnerability in exim-tls. Please see the referenced advisory for further information regarding obtaining and applying appropriate updates. RedHat has released two advisories called FEDORA-2005-001 to address this, and other issues for Fedora Core 2 and 3. Please see the referenced advisories for further information. Ubuntu has released advisory USN-56-1 to address this issue. Please see the attached advisory for further information on obtaining and applying fixes. Debian has released advisory DSA 635-1 to address this issue. Please see the attached advisory for further information on obtaining and applying fixes. Gentoo has released an advisory GLSA 200501-23 to address issues in Exim. Please see the referenced advisory for more information. Gentoo users may carry out the following commands to update their computers: emerge --sync emerge --ask --oneshot --verbose ">=mail-mta/exim-4.43-r2" SuSE Linux has released a security summary report (SUSE-SR:2005:002) that contains fixes to address this and other vulnerabilities. Customers are advised to peruse the referenced advisory for further information regarding obtaining and applying appropriate updates. ALT Linux has released updates dealing with this and other issues. Please see the reference section for more information. University of Cambridge Exim 4.10
University of Cambridge Exim 4.20
University of Cambridge Exim 4.21
University of Cambridge Exim 4.32
University of Cambridge Exim 4.33
University of Cambridge Exim 4.34
University of Cambridge Exim 4.40
University of Cambridge Exim 4.41
University of Cambridge Exim 4.42
University of Cambridge Exim 4.43
|
|
|
Privacy Statement |