#exim

Analysis · May 17, 2026 · Colten Anderson

Dead.Letter is a Debian and Ubuntu problem, and the popular workaround is wrong

Exim 4.99.3 patches a pre-auth RCE that only exists on GnuTLS-linked builds. Several outlets are recommending a config change that does not close the hole.