-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 23 Jul 2026 19:04:03 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: armel
Version: 4.98.2-1+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: armel Build Daemon (arm-ubc-04) <buildd_arm64-arm-ubc-04@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Changes:
 exim4 (4.98.2-1+deb13u4) trixie-security; urgency=high
 .
   * Fix two local privilege escalation issues.
     EXIM-Security-2026-06-22.1 (GCVE-25-2026-07-45-1)
     Using command-line arguments intended for transferring queue-name
     through an Exim execution chain, files outside the spool area can be
     accessed.  This can be used for a privilege escalation. CVE-2026-66140
     EXIM-Security-2026-06-22.3 (GCVE-25-2026-07-45-3)
     A local user having a .forward file can use a string-expansion there.
     With certain Exim configurations this can be used as a privilege
     escalation. CVE-2026-66141
Checksums-Sha1:
 62ed46e70b1b0d002ba50c5498a85cac031e5b1b 129884 exim4-base-dbgsym_4.98.2-1+deb13u4_armel.deb
 0a93f69fe03fd68b32b2a5178974cf64a171aba7 1139732 exim4-base_4.98.2-1+deb13u4_armel.deb
 bde53f65638b4dbf17a4c34e242282ad67f1aa3c 1656808 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_armel.deb
 74a35f93b394d7a4fe107c530189eefa1e81d966 622964 exim4-daemon-heavy_4.98.2-1+deb13u4_armel.deb
 0a0292f4a8927d158a1b01ea6868617c6630748a 1456712 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_armel.deb
 e475d01011ab1cb0bd5038f17823c9f9ce9bdf1a 570268 exim4-daemon-light_4.98.2-1+deb13u4_armel.deb
 53e45db485e2c3909eb5c75ea79257a3c815432a 36636 exim4-dev_4.98.2-1+deb13u4_armel.deb
 60c01be0a02a2b475cc43f327ecedc81ca48245d 11308 exim4_4.98.2-1+deb13u4_armel-buildd.buildinfo
 647bd972308058f0d4886e06b4d534c12de274f2 137216 eximon4-dbgsym_4.98.2-1+deb13u4_armel.deb
 28cd384d5c36d3f64bb67df19de435c62d44a767 69064 eximon4_4.98.2-1+deb13u4_armel.deb
Checksums-Sha256:
 314a1229626078b8510af3f9fe7af145553e533bdabb9adaa9d1748808b7650c 129884 exim4-base-dbgsym_4.98.2-1+deb13u4_armel.deb
 fbc352aae68a998905d7c4de4fac153d264e257bc82689056adc72ec694e573d 1139732 exim4-base_4.98.2-1+deb13u4_armel.deb
 4b404e0df64319211fee76f729e9d961fb4fa6981e7997298b714f5822ba2f4d 1656808 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_armel.deb
 15009f122d4a5cdec25be0c3e44a13a446c94421dbc45264f353df92f0be6223 622964 exim4-daemon-heavy_4.98.2-1+deb13u4_armel.deb
 bdae66dfb1dd4f5c3e23c006acb54fb2566aeca90c3f7b5c03e6725b8c462d23 1456712 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_armel.deb
 e9a715292da17ed282010f1304e37eec40285b8ac45a539817bd822afede6f18 570268 exim4-daemon-light_4.98.2-1+deb13u4_armel.deb
 5058da3285c61f0a00058c2ee19a493ccd16c0c035b65fa45a3fbe9006ec1530 36636 exim4-dev_4.98.2-1+deb13u4_armel.deb
 b598ff603262356d07ac0a4e0c037589192ff518fa936904bd01b5f044f78365 11308 exim4_4.98.2-1+deb13u4_armel-buildd.buildinfo
 ce25ae19930c241b2db4dc3a24080db71729d3a7718ac6e16154e2260d7fa786 137216 eximon4-dbgsym_4.98.2-1+deb13u4_armel.deb
 6a2e7eb628a1cba6d47e354c21ca98ec857cd876d06abd71e805b915fd2906b4 69064 eximon4_4.98.2-1+deb13u4_armel.deb
Files:
 1833ee3c8b06978e3267319504434320 129884 debug optional exim4-base-dbgsym_4.98.2-1+deb13u4_armel.deb
 86f805a6c665ee94defc2e1b1e92ee07 1139732 mail optional exim4-base_4.98.2-1+deb13u4_armel.deb
 6a0d7dd0ff9c68eb1905d708dfd61875 1656808 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_armel.deb
 94857047e9baae4dad0dbe907fdfa39f 622964 mail optional exim4-daemon-heavy_4.98.2-1+deb13u4_armel.deb
 d52892afc337cf79efabd0e23d40e194 1456712 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_armel.deb
 1c9e12da36bf1796f92668e4994d9e45 570268 mail optional exim4-daemon-light_4.98.2-1+deb13u4_armel.deb
 6c7e2059a82c03ee55671f32ac6e0143 36636 mail optional exim4-dev_4.98.2-1+deb13u4_armel.deb
 f884100bbe4e1bccaa4c644d01ebe949 11308 mail standard exim4_4.98.2-1+deb13u4_armel-buildd.buildinfo
 84b80185faf45ba9048708790eb93e1a 137216 debug optional eximon4-dbgsym_4.98.2-1+deb13u4_armel.deb
 b19149b0ce82bc9718b376f496867a12 69064 mail optional eximon4_4.98.2-1+deb13u4_armel.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmpjoZgACgkQK1PZBedP
spqgtw/+Od/llN6BL+LSAFCkGWbOvxhU2Y1sz8OJpEyIQcd4qMO+xVP3NhvFvOIK
5n+/oO6N73ySCIyVKXdWpmylKSLBVyKt30bJp3CnsODDeUgTLISTO4Uu2BTjDz5J
etisJ+nhtbS4C35A8duW+NyjGOP1Udc7dMhT9j04LcXYxTwisrTq7RsCGozyEaoA
zleS5vQL4CB5ZIvXA3jqMwZsMeeTZFJ3Gy86ZQvtyvgrGwicOenh9jp+ZX72YiG4
uTs6EtvRDP80Lhmm01RuLLT42k2DzRmfX7MBnbvu3TGMF7xBpxGFecGfBjxxQ9Yz
gxVywOd1y8ocX+NluaWDMKV5Frg9oYIC+8G/xcg7mb9SHMLNdU0CgrCBsKYOAaso
hKiBTmUFpPjcHDwacu9aktSANu38+K7E2gWGVWvUSf9DF4YOExI+kGox/ivLDvwi
jcaHuW+Wp9ST050b5y+M+mAjeVncgjHC/VXxxwbJttPdrU7DC0e9Jwxjd1Mak84+
7qRjIH8yyfDprJK14GudyxWVkdcEUgFep3+8sXFBgkOBKQp4m+ebOBd0Cbd5oHyq
IZDu//smM9UBzelWVgQxnv2YzWOvIDdmTFpc84991EVzBNU0R4zZaj+L3miFQsk5
vahywcGgkCXKwRcD2GBs3oxv7G8ewNWwfS7zgpSCREjX2gldrCE=
=kKCb
-----END PGP SIGNATURE-----