All Exim versions from 4.97 up to and including 4.99.2 are affected by a security vulnerability. An attacker could exploit this vulnerability to trigger denial of service condition and remote code execution. Security vulnerability was fixed in Exim 4.99.3

More information on vulnerability and update is available in Exim release note – exim.org.