Exim vulnerability update

[cyclone200]

Hello,

I've just seen the announcement of the critical vulnerability (CVE-2019-10149) found on Exim mail server.

I would like to know how to update safely Exim on Vesta 0.9.8-24.

The exim4 packaged installed on my server is : 4.89-2+deb9u6.

Thank you for your help.

[grayfolk]

Hello,

I've just seen the announcement of the critical vulnerability (CVE-2019-10149) found on Exim mail server.

I would like to know how to update safely Exim on Vesta 0.9.8-24.

The exim4 packaged installed on my server is : 4.89-2+deb9u6.

Thank you for your help.

Just read Exim documentation. This is not related to Vesta.

[cyclone200]

I did but it just says:

21. Upgrading Exim
If you are already running Exim on your host, building and installing a new version automatically makes it available to MUAs, or any other programs that call the MTA directly. However, if you are running an Exim daemon, you do need to send it a HUP signal, to make it re-execute itself, and thereby pick up the new binary. You do not need to stop processing mail in order to install a new version of Exim. The install script does not modify an existing runtime configuration file.

Is apt-get install exim4 enough to update the package and escape the vulnerability?