Debian Linux Security Advisory 2236-1 – It was discovered that Exim, Debian’s default mail transfer agent, is vulnerable to command injection attacks in its DKIM processing code, leading to arbitrary code execution.
Source: Debian Security Advisory 2236-1
