-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 23 Jul 2026 19:04:03 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: i386
Version: 4.98.2-1+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: i386 Build Daemon (x86-grnet-01) <buildd_amd64-x86-grnet-01@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Changes:
 exim4 (4.98.2-1+deb13u4) trixie-security; urgency=high
 .
   * Fix two local privilege escalation issues.
     EXIM-Security-2026-06-22.1 (GCVE-25-2026-07-45-1)
     Using command-line arguments intended for transferring queue-name
     through an Exim execution chain, files outside the spool area can be
     accessed.  This can be used for a privilege escalation. CVE-2026-66140
     EXIM-Security-2026-06-22.3 (GCVE-25-2026-07-45-3)
     A local user having a .forward file can use a string-expansion there.
     With certain Exim configurations this can be used as a privilege
     escalation. CVE-2026-66141
Checksums-Sha1:
 7dc354761963fa20db90a180e3eec3500f8a8fe3 129008 exim4-base-dbgsym_4.98.2-1+deb13u4_i386.deb
 10b1e69227427e8af86c705459d91bc41305e838 1143932 exim4-base_4.98.2-1+deb13u4_i386.deb
 c7054b8aaf4b5fbd94e3d76af1aec80aa8114b5c 1524420 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_i386.deb
 036cdc651540c0e262059cb372fd5c3867754035 709004 exim4-daemon-heavy_4.98.2-1+deb13u4_i386.deb
 518f5197c4995fdacb0120cf9a36d8bc962bde51 1340948 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_i386.deb
 a38505c739405ec4bbbdbe80e1472a48cb3cc0e9 647460 exim4-daemon-light_4.98.2-1+deb13u4_i386.deb
 4b036fb41dfe122dff83cf30cf073165dba36640 36624 exim4-dev_4.98.2-1+deb13u4_i386.deb
 ba0271863a0ae46be11568301617429802fd5764 11336 exim4_4.98.2-1+deb13u4_i386-buildd.buildinfo
 6fb49d33d08bb9253cd465bc7c1d722734bc6530 127236 eximon4-dbgsym_4.98.2-1+deb13u4_i386.deb
 ae55173ba356e3081b4e63a57a9d6a5e267456a7 73376 eximon4_4.98.2-1+deb13u4_i386.deb
Checksums-Sha256:
 8fa4a1a24ff1314b0a9dee5210f4896af97b00d7dbe8c2115dd29305f240e3d1 129008 exim4-base-dbgsym_4.98.2-1+deb13u4_i386.deb
 2a76e040e215637b752fe4268f546b5087133bdaacbe0c65ec7dbb9f320d7da4 1143932 exim4-base_4.98.2-1+deb13u4_i386.deb
 b750429997b4a1065557a8530f5abde2770554e5803b233a318e2dda42b59671 1524420 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_i386.deb
 9e45b660b1ab33ac391a5d5596bc4c24c0b120c8b881c2c76747492ab423669d 709004 exim4-daemon-heavy_4.98.2-1+deb13u4_i386.deb
 8ea1f50097d98bd029aabb213a061f516d50af731dcc8a317d52ced5748685dd 1340948 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_i386.deb
 a31b6ffddb698ab715577fdf63fffa82f22d8246b1c42feaffdada980cd1c8a1 647460 exim4-daemon-light_4.98.2-1+deb13u4_i386.deb
 4ae3229cce4e3226ddbb4c15c768c00bbf5154752740f4a27572370fe82923a9 36624 exim4-dev_4.98.2-1+deb13u4_i386.deb
 e2d3298e96626d4ca10214cff4e3088e5f018c79854ab40a7991152021ab4be7 11336 exim4_4.98.2-1+deb13u4_i386-buildd.buildinfo
 62018b514ddcf5e9aa52d1dca08920d0287557e7236834326ce417182513df24 127236 eximon4-dbgsym_4.98.2-1+deb13u4_i386.deb
 5e1aac1eaa6c2ceca02e4edf761367509804a23f02c8efd73b53b5c2c7067b3c 73376 eximon4_4.98.2-1+deb13u4_i386.deb
Files:
 5796dbeca66881f5c7cff68afe97313a 129008 debug optional exim4-base-dbgsym_4.98.2-1+deb13u4_i386.deb
 4b762d985f575e76ae186dd4c62a3268 1143932 mail optional exim4-base_4.98.2-1+deb13u4_i386.deb
 f91bc64425cea9b6866d897e597b80f9 1524420 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_i386.deb
 2200192fc780d0964e1ea4ce7fecf17e 709004 mail optional exim4-daemon-heavy_4.98.2-1+deb13u4_i386.deb
 87a1dc3b43c53d81fc77dcba8ec0a379 1340948 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_i386.deb
 452f54beb400ec97b0855f27693774db 647460 mail optional exim4-daemon-light_4.98.2-1+deb13u4_i386.deb
 cab23294a5794ef9b69bf8dd9a3c8379 36624 mail optional exim4-dev_4.98.2-1+deb13u4_i386.deb
 845f9ecf46f78c465a5ad4d434b10224 11336 mail standard exim4_4.98.2-1+deb13u4_i386-buildd.buildinfo
 7e41b7604d7156ff1dead0caa5657d6c 127236 debug optional eximon4-dbgsym_4.98.2-1+deb13u4_i386.deb
 5bafeaa450147a7cc985127ad5e16c26 73376 mail optional eximon4_4.98.2-1+deb13u4_i386.deb

-----BEGIN PGP SIGNATURE-----
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=9E+r
-----END PGP SIGNATURE-----