-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 23 Jul 2026 19:04:03 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: amd64
Version: 4.98.2-1+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Changes:
 exim4 (4.98.2-1+deb13u4) trixie-security; urgency=high
 .
   * Fix two local privilege escalation issues.
     EXIM-Security-2026-06-22.1 (GCVE-25-2026-07-45-1)
     Using command-line arguments intended for transferring queue-name
     through an Exim execution chain, files outside the spool area can be
     accessed.  This can be used for a privilege escalation. CVE-2026-66140
     EXIM-Security-2026-06-22.3 (GCVE-25-2026-07-45-3)
     A local user having a .forward file can use a string-expansion there.
     With certain Exim configurations this can be used as a privilege
     escalation. CVE-2026-66141
Checksums-Sha1:
 5ffe82ac097bc2505da9564f27e68e55197d41bd 139484 exim4-base-dbgsym_4.98.2-1+deb13u4_amd64.deb
 dbf1f4710bcaf2f694735256fb097f67a5e7ac88 1143020 exim4-base_4.98.2-1+deb13u4_amd64.deb
 254e39ac055c3c712a9231e5470c7530d9c9b325 1689840 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_amd64.deb
 e01d5e0b57137ebcafc591d40a4c527ce8b6dfac 690728 exim4-daemon-heavy_4.98.2-1+deb13u4_amd64.deb
 024057f2815b6324c38a1389a64e7ca0347d8471 1487704 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_amd64.deb
 914abbb75aaea54ed0246f3c0b514e7042f412ed 630856 exim4-daemon-light_4.98.2-1+deb13u4_amd64.deb
 7b40b2487d0a9d06b383594f4e2530d33522373c 36628 exim4-dev_4.98.2-1+deb13u4_amd64.deb
 2b0780a795a0456a266914b485d5ebd66a837ee1 11456 exim4_4.98.2-1+deb13u4_amd64-buildd.buildinfo
 9858ef75a64aeda8a06c7963e88b720e02cd8db8 138628 eximon4-dbgsym_4.98.2-1+deb13u4_amd64.deb
 45d9236c0402fd3f7e42dcc527781e4b909f8f12 72152 eximon4_4.98.2-1+deb13u4_amd64.deb
Checksums-Sha256:
 7a0836d034a4ff6c7c4d885623cc51038e2aae04911e46fa4b751de33155e6df 139484 exim4-base-dbgsym_4.98.2-1+deb13u4_amd64.deb
 f3f6d817b295c79fc4857cc5792b69305f0aca504f93087e7902bf578d5d193e 1143020 exim4-base_4.98.2-1+deb13u4_amd64.deb
 ae41ad8b0413242a15c8794fbdf21afc6edca01077d4b5c5a30a2c74734e1d03 1689840 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_amd64.deb
 9c797806127481b72568d6da69c80c68816381d325a840636be2c0da2fd74da7 690728 exim4-daemon-heavy_4.98.2-1+deb13u4_amd64.deb
 da4add341fd82eefefa31bae6e1feb4c0e411b380c457507fc230cdbd8026da4 1487704 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_amd64.deb
 09c989214d0a9ebbdbc6a8e1c788c11b510df91764a02d4ed48abfa357313dda 630856 exim4-daemon-light_4.98.2-1+deb13u4_amd64.deb
 2bfb74cfcc12b68c8fed6f10c88f8867ce0c9dddd1f47b7aa527e1b59e8ccf16 36628 exim4-dev_4.98.2-1+deb13u4_amd64.deb
 89e5bb4d9b653dfb4030430b27d9b38055d4c57a5bf66ada4082e6dd99f68822 11456 exim4_4.98.2-1+deb13u4_amd64-buildd.buildinfo
 a50478325eb7c798beb0db51c0fb6373c16cf23f5428a02ecac7926ee2de216b 138628 eximon4-dbgsym_4.98.2-1+deb13u4_amd64.deb
 8b78c87fcea044ce7dec7e19a9301c32dd021803afa4b7634827cd174a6192e2 72152 eximon4_4.98.2-1+deb13u4_amd64.deb
Files:
 0855157bfa475ee25b0ac7c6065f72ec 139484 debug optional exim4-base-dbgsym_4.98.2-1+deb13u4_amd64.deb
 1d4235333a9dcacf5fdcd2f8cb308dcb 1143020 mail optional exim4-base_4.98.2-1+deb13u4_amd64.deb
 0fecdd73922544b9fe60fccb19bba3fd 1689840 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_amd64.deb
 8fc764a943ecabaeb3e7632fce1ceae2 690728 mail optional exim4-daemon-heavy_4.98.2-1+deb13u4_amd64.deb
 150676e97d08a8e7fa25e5cda0797128 1487704 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_amd64.deb
 fd0f2eb4e17dcb3b4ace01320b4ff728 630856 mail optional exim4-daemon-light_4.98.2-1+deb13u4_amd64.deb
 ba934473ff2b8daf4ab8396540491119 36628 mail optional exim4-dev_4.98.2-1+deb13u4_amd64.deb
 f1fcb635c80fa6197878761ebe89c3a0 11456 mail standard exim4_4.98.2-1+deb13u4_amd64-buildd.buildinfo
 8670f0b8d12bcc9d5c81137508320659 138628 debug optional eximon4-dbgsym_4.98.2-1+deb13u4_amd64.deb
 157239b01c79bab835aae19f384292e8 72152 mail optional eximon4_4.98.2-1+deb13u4_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=KO+q
-----END PGP SIGNATURE-----