SA-Exim Vulnerability — Ubuntu Security Update (USN-9086-1)
USN-9086-1 updates Ubuntu 20.04, Ubuntu 22.04: It was discovered that SA-Exim unsafely evaluated the parameters of its greylisting SpamAssassin rule. Apply the update via standard apt tooling.
SharedLicense लाइसेंस के तहत इसका अर्थ
The advisory's own severity data peaks at CVSS 8.8 (CWE-78); unpatched Ubuntu 20.04, Ubuntu 22.04 servers remain exposed until updated.
-
USN-9086-1
Publication date
12 November 2026
Overview
SA-Exim could be made to run programs if it loaded specially crafted
SpamAssassin rules.
Releases
Packages
- sa-exim – Use SpamAssassin at SMTP time with the Exim v4 MTA
Details
It was discovered that SA-Exim unsafely evaluated the parameters of its
greylisting SpamAssassin rule. An attacker able to write SpamAssassin
configuration files or rules could possibly use this issue to execute
arbitrary code.
It was discovered that SA-Exim unsafely evaluated the parameters of its
greylisting SpamAssassin rule. An attacker able to write SpamAssassin
configuration files or rules could possibly use this issue to execute
arbitrary code.
Update instructions
In general, a standard system update will make all the necessary changes.
Learn more about how to get the fixes.
The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 18.04 LTS bionic | sa-exim – 4.2.1-16ubuntu0.1~esm1 Ubuntu Pro Fix available with Ubuntu Pro via ESM Apps. A community fix might become publicly available in the future. | ||
References
Related notices
अक्सर पूछे जाने वाले प्रश्न
What does USN-9086-1 fix?
Which Ubuntu releases are covered?
How do I apply it?
अपने सिस्टम में भेद्यताओं की जाँच करें
अपना उत्पाद और ऑपरेटिंग सिस्टम चुनें ताकि आपके लिए लागू सटीक फिक्स कमांड देख सकें।
अपना सिस्टम जाँचें