This bug was fixed in the package exim4 - 4.90.1-1ubuntu1.4 ---------------- exim4 (4.90.1-1ubuntu1.4) bionic-security; urgency=medium
* SECURITY UPDATE: remote command execution - debian/patches/CVE-2019-15846.patch: ensure not to interpret '\\' before '\0' in src/string.c - CVE-2019-15846 -- Alex Murray <alex.mur...@canonical.com> Wed, 04 Sep 2019 21:14:01 +0930 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1843041 Title: CVE-2019-15846 exim4 execute programs with root privileges To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/exim4/+bug/1843041/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs