CSIRTS // UNIFIED SECURITY ADVISORY FEEDSYS ● ONLINE · POWERED BY INTELFUSIONS.COM

USN-8590-1: Exim vulnerabilities

unknown
It was discovered that Exim incorrectly handled certain command line options. A local attacker could possibly use this issue to access files outside of the spool area. It was discovered that Exim incorrectly handled string expansion in .local files. A local attacker could possibly use this issue to escalate privileges.

CSIRTS triage

What
Exim incorrectly handled certain command line options and string expansion.
Who is affected
Local attackers using Exim.
Urgency
Remediation is necessary, but the severity is currently unknown.
Action
Apply the necessary updates.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Exim

Get an email when a new Exim advisory drops — max one per day, one-click unsubscribe.

Details

Source
Ubuntu Security Notices (INTL · vendor-psirt · site)
Severity
unknown
Published
2026-07-22
Exploitation
Not in CISA KEV at last sync

Original advisory: https://ubuntu.com/security/notices/USN-8590-1

More from Ubuntu Security Notices