-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 23 Jul 2026 19:04:03 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: ppc64el Version: 4.98.2-1+deb13u4 Distribution: trixie-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Andreas Metzler Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.98.2-1+deb13u4) trixie-security; urgency=high . * Fix two local privilege escalation issues. EXIM-Security-2026-06-22.1 (GCVE-25-2026-07-45-1) Using command-line arguments intended for transferring queue-name through an Exim execution chain, files outside the spool area can be accessed. This can be used for a privilege escalation. CVE-2026-66140 EXIM-Security-2026-06-22.3 (GCVE-25-2026-07-45-3) A local user having a .forward file can use a string-expansion there. With certain Exim configurations this can be used as a privilege escalation. CVE-2026-66141 Checksums-Sha1: 6bd617d9d4e1d3c59041b4f3b5d2e429de265003 132952 exim4-base-dbgsym_4.98.2-1+deb13u4_ppc64el.deb 78e0b259f09f3d07930e7586a4ac2db7955295cb 1145840 exim4-base_4.98.2-1+deb13u4_ppc64el.deb 9416dc1e1534b5772822e6cca5fc3d25c3cc11b4 1737524 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_ppc64el.deb 21220def3486bbe2344d0cdd84ba47d6a1e7730c 703860 exim4-daemon-heavy_4.98.2-1+deb13u4_ppc64el.deb 016f8fe4e3f7ec67c92ea8d3028f8627043f4722 1528676 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_ppc64el.deb b251c6e81f8ac7fdee92ffa82f17c5392f106dc7 643188 exim4-daemon-light_4.98.2-1+deb13u4_ppc64el.deb 287731c24764b9315a1249b1ae171ac7da324a8d 36628 exim4-dev_4.98.2-1+deb13u4_ppc64el.deb a9a7c1c0e724ce555f994e31ac74ebc9e7620cfc 11497 exim4_4.98.2-1+deb13u4_ppc64el-buildd.buildinfo 5a77903bed7917810efae6a8996ab27bee84d516 142572 eximon4-dbgsym_4.98.2-1+deb13u4_ppc64el.deb 10c4ead7410bcb9d2ddb8bd5cb9c55d6c35e2e67 74936 eximon4_4.98.2-1+deb13u4_ppc64el.deb Checksums-Sha256: 95839a385092fb8d48c924e51b32a8de0134e70559612c39a43f6ff4a4d3c499 132952 exim4-base-dbgsym_4.98.2-1+deb13u4_ppc64el.deb 1acd7d6b4d38792ac579cd4cabf8420e75731735a6a5be48fc76407dda9f4e61 1145840 exim4-base_4.98.2-1+deb13u4_ppc64el.deb 7f355d4df3ecf130d8503a608beaf55ad2bef9fd4c600d2e6b78cc0f9fd2667a 1737524 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_ppc64el.deb ea4d04a80005b1f4e07f3ba9f999998274e75de54d4c17cd46a61232b5441cdd 703860 exim4-daemon-heavy_4.98.2-1+deb13u4_ppc64el.deb 507302d845b9888a56f3bf90e663ed9aaed45b7b4b323675285251de739d9ae4 1528676 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_ppc64el.deb c49dd55de746ffc189f597a6ede98bffc9d58eb11194f8e64f124052ae9814f8 643188 exim4-daemon-light_4.98.2-1+deb13u4_ppc64el.deb 9991738ade730d28ca0c6152606af97caaf8e4a51b820a38bd0d3cab4e350a2c 36628 exim4-dev_4.98.2-1+deb13u4_ppc64el.deb 390ab835650db5af0a1ef30c591968e1f08f13e9dd25fa01dacbd2789780653d 11497 exim4_4.98.2-1+deb13u4_ppc64el-buildd.buildinfo 7ed3ef2e53fbdc994b7a18c0b72553ce6cd3177555179a1b9b507393b83e94d6 142572 eximon4-dbgsym_4.98.2-1+deb13u4_ppc64el.deb 299c8b0cdfef22f2fe5bb62fec7e579ca97a8a7da722aa29e226823a10525b73 74936 eximon4_4.98.2-1+deb13u4_ppc64el.deb Files: d44c0a853f0d9077a0231e798b462135 132952 debug optional exim4-base-dbgsym_4.98.2-1+deb13u4_ppc64el.deb da6a3f2b57aa5c53ffdb242f3fda6cf6 1145840 mail optional exim4-base_4.98.2-1+deb13u4_ppc64el.deb 4b8a64ad49a89c506fd687612a0be588 1737524 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_ppc64el.deb f7c45dd38a5fadd941aed9bb03ad970c 703860 mail optional exim4-daemon-heavy_4.98.2-1+deb13u4_ppc64el.deb 4328009260062bac12259f442e822e16 1528676 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_ppc64el.deb 2c5154ebacadab2fa1ef48fb02802b75 643188 mail optional exim4-daemon-light_4.98.2-1+deb13u4_ppc64el.deb aefce3ee5dfcca15140dc060bc1a314f 36628 mail optional exim4-dev_4.98.2-1+deb13u4_ppc64el.deb c470ed845e2d639c5d93f6b05c2cad92 11497 mail standard exim4_4.98.2-1+deb13u4_ppc64el-buildd.buildinfo bb4bd14e9af4993b861c4a83ae6e2b86 142572 debug optional eximon4-dbgsym_4.98.2-1+deb13u4_ppc64el.deb 304436890d25de5761ac43b981ccb0e9 74936 mail optional eximon4_4.98.2-1+deb13u4_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETLpi2USYGUNSlYhoNINNphgym2QFAmpjobUACgkQNINNphgy m2T8+Q//SMEzb/1FB7JyZZUz6rHzJ+vMD/z/K5yK/J+AOudZnfQ6ekIDP4ENNwv7 4q8dZAP3RIPuANmt6LB2iriSyqwuk8RagCcV6Gfc3DMB02iGpMRvsg2BGoIRkc0g ipHpLGIL1x+CzvSrnH/p/KMyRD6l+27PhH/vIo+ICoffYBMEN2rf9LI9MOy5iYfG xPwqZY9qLDLqtABJdZDWrNo35h84AcgD4ndVhCC+af4mi3U2xeQArgcM9j7dThaQ 5wey7ytr0r3fxl5oXCv6fpTjxoJJXlVNbU+GxhaMcuX5FhJIKD2T4eYUcvumvCW9 cb/BE4siALTrICxZZAKytSFTV/YBQXX9aErX9pFFqbK1xpt2R/tePgp17pdKamDy YVQ2r+UpA97XRywDLefde9xxXOoKax0DD2QlvnB9yG+2RSPz0rl5KNwBokUBQQsb wPAw2quQompqZPA9c/k/ZSN4H6ujIW1tdcOwRmU9shGHSrKkUA/GUdYfAgStBHQg pBhI3LuA1W7anX9U20UI7CqwQwl7iM6AqlC6X8rzDKh4I/osTsi6m0IJ64UrslJ2 DOx6xqtGZKn6y3WYPv0W+phiccUyFdJEkFhumVDp+kk2YBFqcNaaRd45XbDVzvl0 ThypQqOd2l4ELd52Kntq0Hd8YOXLQ4DaCfwBGWSDwYxD5z9+eEk= =8CmJ -----END PGP SIGNATURE-----