发布于3月6日3月6日 Members Debian: CVE-2024-39929: exim4 -- security update Severity 4 CVSS (AV:L/AC:M/Au:N/C:P/I:P/A:P) Published 07/04/2024 Created 07/12/2024 Added 07/12/2024 Modified 07/12/2024 Description Exim through 4.97.1 misparses a multiline RFC 2231 header filename, and thus remote attackers can bypass a $mime_filename extension-blocking protection mechanism, and potentially deliver executable attachments to the mailboxes of end users. Solution(s) debian-upgrade-exim4 References https://attackerkb.com/topics/cve-2024-39929 CVE - 2024-39929 DSA-5728-1
