-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 23 Jul 2026 19:04:03 +0200
Source: exim4
Binary: exim4 exim4-config
Architecture: all
Version: 4.98.2-1+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4      - metapackage to ease Exim MTA (v4) installation
 exim4-config - configuration for the Exim MTA (v4)
Changes:
 exim4 (4.98.2-1+deb13u4) trixie-security; urgency=high
 .
   * Fix two local privilege escalation issues.
     EXIM-Security-2026-06-22.1 (GCVE-25-2026-07-45-1)
     Using command-line arguments intended for transferring queue-name
     through an Exim execution chain, files outside the spool area can be
     accessed.  This can be used for a privilege escalation. CVE-2026-66140
     EXIM-Security-2026-06-22.3 (GCVE-25-2026-07-45-3)
     A local user having a .forward file can use a string-expansion there.
     With certain Exim configurations this can be used as a privilege
     escalation. CVE-2026-66141
Checksums-Sha1:
 dd56611ba2df40455507f0d381dcaa6699ab10a4 250136 exim4-config_4.98.2-1+deb13u4_all.deb
 c057a9eac7d2fd50632adf41d5e8f1b6297c94e1 9193 exim4_4.98.2-1+deb13u4_all-buildd.buildinfo
 eef2ed32364d7cd9fdc44713acfb749ea444c72e 7196 exim4_4.98.2-1+deb13u4_all.deb
Checksums-Sha256:
 fe46fbf68d8e95fb94d7b8cc523ea83ae1f23e1b700e1cbf30cd591dae7ee0b6 250136 exim4-config_4.98.2-1+deb13u4_all.deb
 3ce5af290af893fa17e0fd665b0cb2716bfd05cd7c265f7b6ab93197886e3135 9193 exim4_4.98.2-1+deb13u4_all-buildd.buildinfo
 faf4f712a5361a7ecd0b318618cd88134e031a1d090898b01cf4acda706a603a 7196 exim4_4.98.2-1+deb13u4_all.deb
Files:
 b5795df78dc607c80e9316b5b6010514 250136 mail optional exim4-config_4.98.2-1+deb13u4_all.deb
 7378b10687fb14816132e34df577e522 9193 mail standard exim4_4.98.2-1+deb13u4_all-buildd.buildinfo
 1b365a41c973bce343ecc6851419e098 7196 mail optional exim4_4.98.2-1+deb13u4_all.deb

-----BEGIN PGP SIGNATURE-----
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=NyWH
-----END PGP SIGNATURE-----