USN-6455-2
exim4 regression
USN-6455-1 fixed vulnerabilities in Exim. The fix for CVE-2023-42117 introduced a regression on Ubuntu 22.04 LTS that resulted in certain connections logging a Taint mismatch error. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that Exim incorrectly handled validation of user-supplied data, which could lead to memory corruption. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2023-42117)
It was discovered that Exim incorrectly handled validation of user-supplied data, which could lead to an out-of-bounds read. An attacker could possibly use this issue to expose sensitive information. (CVE-2023-42119)
What each source reports
OSV No score
exim4 regression
USN-6455-1 fixed vulnerabilities in Exim. The fix for CVE-2023-42117 introduced a regression on Ubuntu 22.04 LTS that resulted in certain connections logging a Taint mismatch error. This update fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It was discovered that Exim incorrectly handled validation of user-supplied data, which could lead to memory corruption. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2023-42117)
It was discovered that Exim incorrectly handled validation of user-supplied data, which could lead to an out-of-bounds read. An attacker could possibly use this issue to expose sensitive information. (CVE-2023-42119)
- Record
USN-6455-2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
exim4Ubuntu:22.04:LTS |
before 4.95-4ubuntu2.10, plus listed versions 4.94.2-7ubuntu24.95-2ubuntu24.95-4ubuntu14.95-4ubuntu24.95-4ubuntu2.1 Show 8 moreShow less4.95-4ubuntu2.24.95-4ubuntu2.34.95-4ubuntu2.44.95-4ubuntu2.54.95-4ubuntu2.64.95-4ubuntu2.74.95-4ubuntu2.84.95-4ubuntu2.9 |
4.95-4ubuntu2.10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-6455-2 is a vulnerability with no CVSS score yet in exim4, published June 10, 2026. No source lists public exploit code. Fixed in exim4 4.95-4ubuntu2.10.