A new Debian Linux update has been published: ELA-868-1 exim4 security update
An exim4 security update has been released for Debian GNU/Linux 8 and 9 Extended LTS to address a flaw that allows response injection (buffering).Read more @ Linux Compatible