-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 23 Jul 2026 19:04:03 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: armhf
Version: 4.98.2-1+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: armhf Build Daemon (arm-ubc-06) <buildd_arm64-arm-ubc-06@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Changes:
 exim4 (4.98.2-1+deb13u4) trixie-security; urgency=high
 .
   * Fix two local privilege escalation issues.
     EXIM-Security-2026-06-22.1 (GCVE-25-2026-07-45-1)
     Using command-line arguments intended for transferring queue-name
     through an Exim execution chain, files outside the spool area can be
     accessed.  This can be used for a privilege escalation. CVE-2026-66140
     EXIM-Security-2026-06-22.3 (GCVE-25-2026-07-45-3)
     A local user having a .forward file can use a string-expansion there.
     With certain Exim configurations this can be used as a privilege
     escalation. CVE-2026-66141
Checksums-Sha1:
 c3df674dc60840f7b746502d7723f17aab4b23df 131592 exim4-base-dbgsym_4.98.2-1+deb13u4_armhf.deb
 74b8dc495e96ff79a648241b8ad5afe0f4501269 1139972 exim4-base_4.98.2-1+deb13u4_armhf.deb
 fab9a3f83c6d0fd4b644eb4849ce15c017556fb7 1680264 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_armhf.deb
 92c4e24f56d1fea96671539c2f619297fe116aec 638156 exim4-daemon-heavy_4.98.2-1+deb13u4_armhf.deb
 a196be2553edbb6bedfc2776f4f32b9c93689cc3 1476276 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_armhf.deb
 a210499537ff566f4dac3e107593518be768eea4 582316 exim4-daemon-light_4.98.2-1+deb13u4_armhf.deb
 051010a3baf5673a22ba80b54d6a0242dfc2a228 36636 exim4-dev_4.98.2-1+deb13u4_armhf.deb
 d14176aae5510153a65a1477042ac7e787b4bbeb 11322 exim4_4.98.2-1+deb13u4_armhf-buildd.buildinfo
 1a63279428054b90cb0b7e35e662dc6543149a83 138588 eximon4-dbgsym_4.98.2-1+deb13u4_armhf.deb
 0253796285784c36d9ac9b0d626a7a55d6639ee9 68092 eximon4_4.98.2-1+deb13u4_armhf.deb
Checksums-Sha256:
 126c304d5c2c3a895011d9aa1ffc5ca2901b0ba554b653aeb8188207de6db48f 131592 exim4-base-dbgsym_4.98.2-1+deb13u4_armhf.deb
 df81b961bb8e19fca1cb2f6726587013e02e70f7fdad933e51edddff4591cfa2 1139972 exim4-base_4.98.2-1+deb13u4_armhf.deb
 20e317b3afd27684180dfa7c7c7da7baeb3a624bbaf5bf3fa69f975946791d2f 1680264 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_armhf.deb
 2a42cb56ee96df0ea1bb7101238853befa70d84789445b6e1d2bf623260be750 638156 exim4-daemon-heavy_4.98.2-1+deb13u4_armhf.deb
 bb21aab7f68322237817fbc6e534d3a2e342ec15647803bba457cf5893a127f2 1476276 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_armhf.deb
 b992e580879c1eab0161489c13c905d9ac9209c1500e06bdf7fe793ba566c481 582316 exim4-daemon-light_4.98.2-1+deb13u4_armhf.deb
 c8b4dc7224f1c66ad855333e349f70964f63aa9556f9510a4ec7513753f70799 36636 exim4-dev_4.98.2-1+deb13u4_armhf.deb
 a9b136c66635386ec6e5f1d5b6ec4cc0b1cccd99353be5be423ecd7d94c4b701 11322 exim4_4.98.2-1+deb13u4_armhf-buildd.buildinfo
 0f5e0292895bfa4228498086d6ac71189ca282b0f27037d1e89963549075013c 138588 eximon4-dbgsym_4.98.2-1+deb13u4_armhf.deb
 67d09f529a377f9200f61e4792405801f46327e0a8cfdf31b5a4f7e08ba0e519 68092 eximon4_4.98.2-1+deb13u4_armhf.deb
Files:
 033d730f1cc9c2c7ebdde5863f24d5b1 131592 debug optional exim4-base-dbgsym_4.98.2-1+deb13u4_armhf.deb
 39366b67c31f4904a47cdf75a5583f5d 1139972 mail optional exim4-base_4.98.2-1+deb13u4_armhf.deb
 7fb35ad532a05097ca0080bd3087f24e 1680264 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_armhf.deb
 31f294c37b08ebd7ec351fb8894ce092 638156 mail optional exim4-daemon-heavy_4.98.2-1+deb13u4_armhf.deb
 b1d029cdcabdcc225350f8b91d2cf4c7 1476276 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_armhf.deb
 08fd7f66a3459c3e6cbf18fc2c6ab292 582316 mail optional exim4-daemon-light_4.98.2-1+deb13u4_armhf.deb
 3b04f04e932d956736d777923e7aa5a1 36636 mail optional exim4-dev_4.98.2-1+deb13u4_armhf.deb
 446a1ba9188575d636bca3374cbd1206 11322 mail standard exim4_4.98.2-1+deb13u4_armhf-buildd.buildinfo
 884bb57f3e5331c57ba3be29c2d083da 138588 debug optional eximon4-dbgsym_4.98.2-1+deb13u4_armhf.deb
 227134a6f092974ce7d541a2c7d654fe 68092 mail optional eximon4_4.98.2-1+deb13u4_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=B+yI
-----END PGP SIGNATURE-----