Subject: Advisory: Multiple Vulnerabilities in Exim used by Sophos Firewall
From: Sophos <[email-masked]>
To: [email-masked]
Date: Tue, 11 May 2021 20:59:55 -0400

"Sophos"     

If you have trouble reading this message Click Here <https://app.go.sophos.com/e/es?s=1777052651&e=1469967&elqTrackId=e279c511881c468c9c136eeb565cb711&elq=4c12596ad24043ca88eeaa3fd0adc01a&elqaid=16841&elqat=1&elqcst=272&elqcsid=1341> | Whitelist Us <https://app.go.sophos.com/e/er?s=1777052651&lid=46&elqTrackId=cfa46be1529d4ce5a72c77f7f986b005&elq=4c12596ad24043ca88eeaa3fd0adc01a&elqaid=16841&elqat=1&elqcst=272&elqcsid=1341>.          

"Sophos"                   <https://app.go.sophos.com/e/er?s=1777052651&lid=12&elqTrackId=7c2ffd8809d840d59ddd0d5b22295193&elq=4c12596ad24043ca88eeaa3fd0adc01a&elqaid=16841&elqat=1>                                      

"Sophos"                                                

Dear Sophos Customer,                       

On May 4, 2021, Qualys released a security advisory disclosing multiple CVEs, for the Exim mailer software, a widely used open-source message transfer agent (MTA). These CVEs are commonly referred to as 21Nails. Exim is used by Sophos Firewall as a part of the Email Protection functionality.                       

Sophos Firewall customers are not impacted if Email Protection is not licensed, or if Email Protection is used in Legacy Mode (Transparent Email Proxy).                       

On May 11, 2021, Sophos released a hotfix for Sophos Firewall version 17.5 MR4 and later. Customers on a release lower than version 17.5 MR4 should upgrade to the latest 17.5 MR or Sophos Firewall version 18. 

The hotfix remediates the vulnerabilities by upgrading the Exim version to 4.94.2. It is automatically applied to Sophos Firewalls with the “Allow automatic installation of hotfixes” feature enabled. Enabled is the default setting.                       

More information can be found on the Sophos Community Security Blog <https://app.go.sophos.com/e/er?s=1777052651&lid=21605&elqTrackId=9c90cf4ad4c44d60a0cfb715f4641438&elq=4c12596ad24043ca88eeaa3fd0adc01a&elqaid=16841&elqat=1>.                       

Best regards,

Your Sophos Team

"LinkedIn" <https://app.go.sophos.com/e/er?s=1777052651&lid=11499&elqTrackId=750daa5d49e84a1498df50c011c32e48&elq=4c12596ad24043ca88eeaa3fd0adc01a&elqaid=16841&elqat=1&elqcst=272&elqcsid=1360>                                   "Twitter" <https://app.go.sophos.com/e/er?s=1777052651&lid=10124&elqTrackId=2fd2bd73d258432ab7b24bdfe95c5369&elq=4c12596ad24043ca88eeaa3fd0adc01a&elqaid=16841&elqat=1&elqcst=272&elqcsid=1360>                                   "Facebook" <https://app.go.sophos.com/e/er?s=1777052651&lid=8&elqTrackId=8ef1de275b2e4f54ad59502942ff81c0&elq=4c12596ad24043ca88eeaa3fd0adc01a&elqaid=16841&elqat=1&elqcst=272&elqcsid=1360>                                   "YouTube" <https://app.go.sophos.com/e/er?s=1777052651&lid=7&elqTrackId=2d753c00a5ee4e4889a1d9cd2ba6711b&elq=4c12596ad24043ca88eeaa3fd0adc01a&elqaid=16841&elqat=1&elqcst=272&elqcsid=1360>             

© 2021 Sophos Ltd. No. 2096520. All rights reserved <https://app.go.sophos.com/e/er?s=1777052651&lid=744&elqTrackId=51dce0d472684bfdb6cab65e8117c0da&elq=4c12596ad24043ca88eeaa3fd0adc01a&elqaid=16841&elqat=1&elqcst=272&elqcsid=1379> | Privacy Policy <https://www.sophos.com/en-us/legal/sophos-group-privacy-policy.aspx?elqTrackId=d529843fd4f04f9191e3d11a8ded080f&elq=4c12596ad24043ca88eeaa3fd0adc01a&elqaid=16841&elqat=1&elqCampaignId=122538&elqcst=272&elqcsid=1379>
Registered office: The Pentagon, Abingdon Science Park, OX14 3YP, United Kingdom.

We use cookies and other similar tracking technologies in this email. To find out more about our use of cookies, please visit https://www.sophos.com/en-us/legal/cookie-information.aspx <https://app.go.sophos.com/e/er?s=1777052651&lid=732&elqTrackId=dadbc87e041744b7bf8c0fce3253a13f&elq=4c12596ad24043ca88eeaa3fd0adc01a&elqaid=16841&elqat=1&elqcst=272&elqcsid=1379>