Thank you for taking the time for Ubuntu. I'll triage this as a "exim4 needs a merge" bug, to resync against Debian's 4.82.1-1. I don't think we need a security bug as it'd be fixed by the merge and because of its priority the merge would probably come first. If anyone else wants a bug to specifically track the security issue, feel free to file it.
Thank you for taking the time for Ubuntu. I'll triage this as a "exim4 needs a merge" bug, to resync against Debian's 4.82.1-1. I don't think we need a security bug as it'd be fixed by the merge and because of its priority the merge would probably come first. If anyone else wants a bug to specifically track the security issue, feel free to file it.