-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 25 Sep 2026 11:25:38 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: amd64
Version: 4.98.2-1+deb13u5
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Closes: 1148506
Changes:
 exim4 (4.98.2-1+deb13u5) trixie-security; urgency=high
 .
   * Cherry-pick relevant changes from security release 4.100.1.
     CVE-2026-94054 EXIM-Security-2026-09-12.1 (GCVE-25-2026-09-50-1)
      Exim before 4.100.1, when Proxy-Protocol is used with an attacker-
      controlled proxy, has an out-of-bounds write.
     CVE-2026-94056 EXIM-Security-2026-09-12.2 (GCVE-25-2026-09-55-1)
      Exim before 4.100.1, when Proxy-Protocol is used with an attacker-
      controlled proxy, allows attackers to read certain uninitialized
      data from stack memory.
     CVE-2026-94057 EXIM-Security-2026-09-12.4 (GCVE-25-2026-09-56-1)
      Exim before 4.100.1 allows SMTP smuggling in which the received
      message does not match any sent message, and instead depends on
      crafted data sent after a rejection during DATA processing.
     Closes: #1148506
     (CVE-2026-94055 is not relevant - TLS Early banner support was
     introduced in 4.99.)
Checksums-Sha1:
 7387f8298465876dba5e1cab17100b79b68c599a 139460 exim4-base-dbgsym_4.98.2-1+deb13u5_amd64.deb
 522983804e7a5cb89929017214ed00c4128d04e7 1143472 exim4-base_4.98.2-1+deb13u5_amd64.deb
 267dd646f31f4b92cd4f8d6d0650b7dd5357dc12 1689636 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_amd64.deb
 0574232af67dc2a1a964006c1c20813d02424570 691472 exim4-daemon-heavy_4.98.2-1+deb13u5_amd64.deb
 ee0a8fb2d50f391c4486f2d5e1107e3d90d2575e 1487632 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_amd64.deb
 1704743a2b52cf5ef063a39862b75db7888e2aa2 631460 exim4-daemon-light_4.98.2-1+deb13u5_amd64.deb
 cb2f83f52c8ea8b4d94f0dc4369c0ac7d6fe1401 36900 exim4-dev_4.98.2-1+deb13u5_amd64.deb
 cf3e980fc4333349f93580772a7bf764853660c4 11523 exim4_4.98.2-1+deb13u5_amd64-buildd.buildinfo
 85140b755fe22612b6698c49d8a4dad18e452554 138644 eximon4-dbgsym_4.98.2-1+deb13u5_amd64.deb
 b3aa229a2477d298a502f8d97824523d46c0b2f6 72412 eximon4_4.98.2-1+deb13u5_amd64.deb
Checksums-Sha256:
 7f8ce370d338afb4833f880e855b1b66e7c080f9bda17a1eaea06de872070c6b 139460 exim4-base-dbgsym_4.98.2-1+deb13u5_amd64.deb
 32bc9c2c40731bfcb74dddc784126f62df8435eb50e3614ec2b25b550b51632d 1143472 exim4-base_4.98.2-1+deb13u5_amd64.deb
 3abda30d6341cf9cc56d28662f5478c068ff71d81e1e5f65081160b016888b48 1689636 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_amd64.deb
 4ac05cb5692e3dbb0326aee979be46005f1e53a4d9dd5cb60f3c206155134995 691472 exim4-daemon-heavy_4.98.2-1+deb13u5_amd64.deb
 95a761b5477bd816bff112d7a5f763c5e81b33c983cc0796e3d58c3d47cf1437 1487632 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_amd64.deb
 8b95fbf799d478f711c833eedc3a639357be43d75e41d9446b01dfc8265a2691 631460 exim4-daemon-light_4.98.2-1+deb13u5_amd64.deb
 fd751e98a8e5b042a0d4a3482ff0743465fe6b9319c7b741ef8140e75d718b3b 36900 exim4-dev_4.98.2-1+deb13u5_amd64.deb
 b0826863c777a0f30900b21181f0f872aa7860250adb105c95b5aee48ef9107e 11523 exim4_4.98.2-1+deb13u5_amd64-buildd.buildinfo
 631f7677f05b7f45f04de01b97dc4af38be9da1573c4a2fcc28585d119874cac 138644 eximon4-dbgsym_4.98.2-1+deb13u5_amd64.deb
 9303361db3ce512b734bba2c249d38a344954c1f3bf66f31bb0861316621ff97 72412 eximon4_4.98.2-1+deb13u5_amd64.deb
Files:
 8897dbbd7b2c5d2643b473eac30f4a30 139460 debug optional exim4-base-dbgsym_4.98.2-1+deb13u5_amd64.deb
 b52cfbb9e791795c90cb2e8845668753 1143472 mail optional exim4-base_4.98.2-1+deb13u5_amd64.deb
 606cc4e8fba898c6390d10a02aab7a9b 1689636 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_amd64.deb
 98491958f5921452f9e13000705d48db 691472 mail optional exim4-daemon-heavy_4.98.2-1+deb13u5_amd64.deb
 d760d07d37ae579fe7f723228c4e523c 1487632 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_amd64.deb
 88bf4e9bc5ec3701b097318538d49680 631460 mail optional exim4-daemon-light_4.98.2-1+deb13u5_amd64.deb
 4542df7366efd70b9684465dcd20b6c4 36900 mail optional exim4-dev_4.98.2-1+deb13u5_amd64.deb
 aca886b5f0288fc05693a77253f11322 11523 mail standard exim4_4.98.2-1+deb13u5_amd64-buildd.buildinfo
 340570a70d168f6e7fc32779de083ea0 138644 debug optional eximon4-dbgsym_4.98.2-1+deb13u5_amd64.deb
 56ae388a7c4781cdedbe67900de04ef3 72412 mail optional eximon4_4.98.2-1+deb13u5_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=wDTz
-----END PGP SIGNATURE-----