-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 23 Jul 2026 19:04:03 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: s390x
Version: 4.98.2-1+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (ziehrer) <buildd_s390x-ziehrer@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Changes:
 exim4 (4.98.2-1+deb13u4) trixie-security; urgency=high
 .
   * Fix two local privilege escalation issues.
     EXIM-Security-2026-06-22.1 (GCVE-25-2026-07-45-1)
     Using command-line arguments intended for transferring queue-name
     through an Exim execution chain, files outside the spool area can be
     accessed.  This can be used for a privilege escalation. CVE-2026-66140
     EXIM-Security-2026-06-22.3 (GCVE-25-2026-07-45-3)
     A local user having a .forward file can use a string-expansion there.
     With certain Exim configurations this can be used as a privilege
     escalation. CVE-2026-66141
Checksums-Sha1:
 664bd01d8092cf7040c8f5dcb1e954f267dd9b84 128660 exim4-base-dbgsym_4.98.2-1+deb13u4_s390x.deb
 0e9771afa9738ccdf4871322805456d7ee0dc063 1142144 exim4-base_4.98.2-1+deb13u4_s390x.deb
 c911668afb69c8789c0b161d38fe31f1b11d5528 1692792 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_s390x.deb
 5124aca4c301e1e5ba6fd736187dc102ea3c769a 668516 exim4-daemon-heavy_4.98.2-1+deb13u4_s390x.deb
 791680e89b9241e5f29d559d47d4a762fe293cba 1491964 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_s390x.deb
 0695cf4292b5a550c53e80000740dd70479595e9 611340 exim4-daemon-light_4.98.2-1+deb13u4_s390x.deb
 22a54c2ce06862ed7c7549dad70d9e33fdb9618f 36624 exim4-dev_4.98.2-1+deb13u4_s390x.deb
 6d1109bd2a27fb95106b46ab42e498fe6d429e6f 11318 exim4_4.98.2-1+deb13u4_s390x-buildd.buildinfo
 f8834d724d1adf4e2b36d7d2a5164439edcb52c6 140060 eximon4-dbgsym_4.98.2-1+deb13u4_s390x.deb
 b645098c121ed9afa646541ba0cb5afb2c0e8d98 72656 eximon4_4.98.2-1+deb13u4_s390x.deb
Checksums-Sha256:
 7200736c264ecaea7907eb6bd4082fb81b749b5b333ec5e71d1b9fa960e40c27 128660 exim4-base-dbgsym_4.98.2-1+deb13u4_s390x.deb
 8b0edb1eda91a17447c70ce393fef9ba2a0357d23ab2d65d4ee6bfe5dd630b41 1142144 exim4-base_4.98.2-1+deb13u4_s390x.deb
 906aded28c7fa23ec22ed047c7c56d25716d588645d5ded2cc255d521fcf2d9b 1692792 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_s390x.deb
 65a1105d5e17682e5c25f029544648f2394930bea0b74c8bc154fc4dd8bedbee 668516 exim4-daemon-heavy_4.98.2-1+deb13u4_s390x.deb
 d6da0b481138bb6a889b86c9fe7609172934d56ead6f47d21e0da82e2e0d73e9 1491964 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_s390x.deb
 0a49ffdd63d271e12e56119d1843bd7309315f4a98b03f29f1aa10366cef5d2a 611340 exim4-daemon-light_4.98.2-1+deb13u4_s390x.deb
 353f1c11df8f9aa20f17ae7939cdd86e5839da3890b8873290fc57764eba53a9 36624 exim4-dev_4.98.2-1+deb13u4_s390x.deb
 677ba1670b9c422d900027bdc4ea087e96f6b678e46305e6f98536b1341d64cf 11318 exim4_4.98.2-1+deb13u4_s390x-buildd.buildinfo
 3e73425e15e3bce4ce39621479174d2e5d7375f5dc4e047a9e014ca8673e4fae 140060 eximon4-dbgsym_4.98.2-1+deb13u4_s390x.deb
 8faf685576578f6533e956322bd50af82c6469273e8978ba6da2233ea3bd5505 72656 eximon4_4.98.2-1+deb13u4_s390x.deb
Files:
 d853c6c438949623cb048c141e00c1b9 128660 debug optional exim4-base-dbgsym_4.98.2-1+deb13u4_s390x.deb
 bef04408c7ec0b81c1ea5c3e75601325 1142144 mail optional exim4-base_4.98.2-1+deb13u4_s390x.deb
 c84d9078690c549b7ffca32d10795ee7 1692792 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_s390x.deb
 78459eec2c6e4e779c05191ab6cc49d0 668516 mail optional exim4-daemon-heavy_4.98.2-1+deb13u4_s390x.deb
 2022faae5883b46d7de480d9eaa73e04 1491964 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_s390x.deb
 1adbc584bfcb2c712c432b3bb80b1d9b 611340 mail optional exim4-daemon-light_4.98.2-1+deb13u4_s390x.deb
 79e5fe27b1ab9409d7a73509a53b138d 36624 mail optional exim4-dev_4.98.2-1+deb13u4_s390x.deb
 23b97f0ec10c4619ba1a1376229ee0c2 11318 mail standard exim4_4.98.2-1+deb13u4_s390x-buildd.buildinfo
 d5ddf7d0f36adad4426175c36ad731c7 140060 debug optional eximon4-dbgsym_4.98.2-1+deb13u4_s390x.deb
 8d73bcbb44aaaab3aeebd3a47be348b7 72656 mail optional eximon4_4.98.2-1+deb13u4_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=dD+V
-----END PGP SIGNATURE-----