Bug 20060

Summary:	exim security vulnerability CVE-2016-9963
Product:	Mageia	Reporter:	Zombie Ryushu <zombie_ryushu>
Component:	Security	Assignee:	Mageia Bug Squad <bugsquad>
Status:	RESOLVED INVALID	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal
Version:	5
Target Milestone:	---
Hardware:	All
OS:	Linux
URL:	https://www.debian.org/security/2016/dsa-3747
Whiteboard:
Source RPM:	exim	CVE:
Status comment:

Description Zombie Ryushu 2017-01-02 17:46:30 CET

Bjoern Jacke discovered that Exim, Debian's default mail transfer agent, may leak the private DKIM signing key to the log files if specific configuration options are met.

Exim should be upgraded to 4.84.2

Comment 1 David Walser 2017-01-02 22:53:47 CET

We don't have exim packaged.

Status: NEW => RESOLVED
Resolution: (none) => INVALID