-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 25 Sep 2026 11:25:38 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: armel Version: 4.98.2-1+deb13u5 Distribution: trixie-security Urgency: high Maintainer: armel Build Daemon (arm-conova-02) Changed-By: Andreas Metzler Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Closes: 1148506 Changes: exim4 (4.98.2-1+deb13u5) trixie-security; urgency=high . * Cherry-pick relevant changes from security release 4.100.1. CVE-2026-94054 EXIM-Security-2026-09-12.1 (GCVE-25-2026-09-50-1) Exim before 4.100.1, when Proxy-Protocol is used with an attacker- controlled proxy, has an out-of-bounds write. CVE-2026-94056 EXIM-Security-2026-09-12.2 (GCVE-25-2026-09-55-1) Exim before 4.100.1, when Proxy-Protocol is used with an attacker- controlled proxy, allows attackers to read certain uninitialized data from stack memory. CVE-2026-94057 EXIM-Security-2026-09-12.4 (GCVE-25-2026-09-56-1) Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing. Closes: #1148506 (CVE-2026-94055 is not relevant - TLS Early banner support was introduced in 4.99.) Checksums-Sha1: da011a4524a2425ca9fb93522c84c689fdd43397 129900 exim4-base-dbgsym_4.98.2-1+deb13u5_armel.deb d75e40dce461be84e93834d8fafb0da5e9f2fd2b 1140068 exim4-base_4.98.2-1+deb13u5_armel.deb 5686b171c1fcb9e9a1ca98f4a10c16289fa89771 1656136 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_armel.deb 58ee5850aa4f822e2f67aa6538da8f2a8064b04c 623380 exim4-daemon-heavy_4.98.2-1+deb13u5_armel.deb 08f4e7ca51bed78111d9fe7030524962cb66c82f 1456920 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_armel.deb 6451691bb30a13eb62e3fe001257aa393c141fd4 569788 exim4-daemon-light_4.98.2-1+deb13u5_armel.deb 63a5a1fbee16c400e13c112529ad50454fe93257 36920 exim4-dev_4.98.2-1+deb13u5_armel.deb 30686ac4f00bc5ea8d9fc015f7e61a1a47cdd982 11375 exim4_4.98.2-1+deb13u5_armel-buildd.buildinfo f8a4300bdcdd1440529b72bf7c81d1e86a56d2eb 137216 eximon4-dbgsym_4.98.2-1+deb13u5_armel.deb bbbaccd3699a3d5e3f0139575557bc806f0add5d 69328 eximon4_4.98.2-1+deb13u5_armel.deb Checksums-Sha256: c214ecd179dc6f96c9e054c415d530e1df0f9cbdf11b2cd222ff38f14afde340 129900 exim4-base-dbgsym_4.98.2-1+deb13u5_armel.deb 8a7b476d7e1e4d722ceff55192f50515f6f1ee8d24f331a5b04d94306d94d4ec 1140068 exim4-base_4.98.2-1+deb13u5_armel.deb e1faef3911bc7e3a686bdf6f879b1ca58e6b6f9d2b5054c967c54d0a23f890c8 1656136 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_armel.deb 732d21e572f186c59cfc0d44912f6450d7c6a4c4ddf953583df6892ad5613e35 623380 exim4-daemon-heavy_4.98.2-1+deb13u5_armel.deb 9f7ade38a088a1126ce478fa76e3a8cde46af03e4b0c544ee50d3ce9b8c76e06 1456920 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_armel.deb 6003ebfa968e557542bf4631cbec255b5e1ebf39b7efb301fa61bb9db0a69e26 569788 exim4-daemon-light_4.98.2-1+deb13u5_armel.deb 3780cf1bac244f59559c55986ea3c9dc137e8dd93f727da79cdd5b92802894b4 36920 exim4-dev_4.98.2-1+deb13u5_armel.deb 72d0e8c067ec4e122319cd4520ea1a158cf024e2d2c6b370372675c2e6754006 11375 exim4_4.98.2-1+deb13u5_armel-buildd.buildinfo 9f5dd9d9fe57ee9cc57e9ab0f927e453e9dd763f17447cddabf66c75c4a50dbd 137216 eximon4-dbgsym_4.98.2-1+deb13u5_armel.deb 3cafde073a06033e63b2afba75f46b8e1c696fa595184428c1f25255be0207fe 69328 eximon4_4.98.2-1+deb13u5_armel.deb Files: 467b71533ec39e2d340f9ca411032733 129900 debug optional exim4-base-dbgsym_4.98.2-1+deb13u5_armel.deb c10941b724dd4a1d2a340e0384d73643 1140068 mail optional exim4-base_4.98.2-1+deb13u5_armel.deb e27a791e5cde4acbdf2972ab92ae1ef1 1656136 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_armel.deb 5e6fd073c6dce8431e9d911554a533a7 623380 mail optional exim4-daemon-heavy_4.98.2-1+deb13u5_armel.deb 50e8cb2a3ad5942ed0d85a2acc35f179 1456920 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_armel.deb e896f5667a6a3e1694753740b056df02 569788 mail optional exim4-daemon-light_4.98.2-1+deb13u5_armel.deb f6ffdbcb0f337a079a69f79cc184d514 36920 mail optional exim4-dev_4.98.2-1+deb13u5_armel.deb ca2b2346edee52f78b5bcf03e22b6387 11375 mail standard exim4_4.98.2-1+deb13u5_armel-buildd.buildinfo 69a83f594c3d91108682efc7f579554b 137216 debug optional eximon4-dbgsym_4.98.2-1+deb13u5_armel.deb f88e4bfd009a23d3066a520c28b87f13 69328 mail optional eximon4_4.98.2-1+deb13u5_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEa5s+5E+WDkV2pQjwIyDMsRzdi8EFAmq45OUACgkQIyDMsRzd i8HBSA//WNMT3bD+1nthWvHyUy9AULeWNc3VVc6+znaL03ezREsulgcAAW9Fb1xD EMxXszhKqYG3jN3zYidqUVznaFh6x8E3G8w7Rn9AOzG1mjX64zUz+wVukmxS+5HA ww1tPKDI7gNMNunTdDvbNweKR+4EBTB704lDXiSMV1zTar3mTKOmFDEDsueZ5lyu /Nx0tAx2erIWtOQrFXlQDUC62zQ4NGjI7KiJj7/yvJtiaU4jOomoDw+6hrR+1xOG IAYsbM1Mftl7aENeMdOGn/iylJK8/tILal/S3pkzHAaQd8mLPtW+lLmpvq36SNLH x4TUSxm9UlVYKxLlNh+ZW2GBxwIjKg5sAPWLi3uxA4Zo9O7CX1L3SFm+6q2kA02S FbX8zCZtTZCzepllmIj9LKilpHPOyYvWnn9EaQBDw2rdx9u2MiOypP2apLHTDBbi FznddfKJwPjL58g9MFrjOhf7ZO9YZnaeapaIpl16YnitFu1MEAyb+ZS9APL3wDOt Rl0rxXvek/6tIItmFjgsSADuHvzw8exoqYkkZ6Fj3rNFXRNLB/7EKTp+C57p1dN2 quS4sy3VNirNNF5IfHmi7yId91eto3j80A1sCYTIVTL48XrJOTRCLla3cFet2S2i JDlvH0Yty7eO/AotIv2GnG+Q9kV3cWw67nz5jn/lvlZD4gNgIHo= =jOKZ -----END PGP SIGNATURE-----