Exim vulnerabilities

Hi Tomas Beran,

 Thank you for reaching out to the Sophos community team. Our dev team is investigating this under ID NC-72625.

can we expect that these security holes to are patched by hotfix or would customers have to wait until the next SFOS update? are there any steps to mitigate the vulnerabilities in the meantime manually or at least ways to check if the system is already compromised?    

I would like to see a response similar to "Asnarök" from sophos. As it seems that the impact is pretty serious and the exploits are around for more than 2 months

Hi Samuel Heinrich,

We'll update the following blog post as the new information becomes available:

• Advisory: Multiple Vulnerabilities (AKA 21Nails) in Exim

Thanks,

JFYI: The Advisory was updated with the latest information.

thanks for bringing attention to this.

is XG or SG vulnerable against that if mail protection is off?

As stated by the advisory post: 

Sophos Firewall customers not licensed for email protection, and those using legacy mode (transparent email proxy) for email, are not vulnerable.

As stated by the advisory post: 

Sophos Firewall customers not licensed for email protection, and those using legacy mode (transparent email proxy) for email, are not vulnerable.

Hi folks,

hot fix notification is appearing on GUI console.

Ian