-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 25 Sep 2026 11:25:38 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: arm64
Version: 4.98.2-1+deb13u5
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Closes: 1148506
Changes:
 exim4 (4.98.2-1+deb13u5) trixie-security; urgency=high
 .
   * Cherry-pick relevant changes from security release 4.100.1.
     CVE-2026-94054 EXIM-Security-2026-09-12.1 (GCVE-25-2026-09-50-1)
      Exim before 4.100.1, when Proxy-Protocol is used with an attacker-
      controlled proxy, has an out-of-bounds write.
     CVE-2026-94056 EXIM-Security-2026-09-12.2 (GCVE-25-2026-09-55-1)
      Exim before 4.100.1, when Proxy-Protocol is used with an attacker-
      controlled proxy, allows attackers to read certain uninitialized
      data from stack memory.
     CVE-2026-94057 EXIM-Security-2026-09-12.4 (GCVE-25-2026-09-56-1)
      Exim before 4.100.1 allows SMTP smuggling in which the received
      message does not match any sent message, and instead depends on
      crafted data sent after a rejection during DATA processing.
     Closes: #1148506
     (CVE-2026-94055 is not relevant - TLS Early banner support was
     introduced in 4.99.)
Checksums-Sha1:
 730df930ebb29af4af15516d8714fa8d6c7f2e51 137728 exim4-base-dbgsym_4.98.2-1+deb13u5_arm64.deb
 d65ea3e1548feeb5670b687b75d8c5da32c07e86 1141176 exim4-base_4.98.2-1+deb13u5_arm64.deb
 21e9b2fe2ddde809003a8539e171dcf81e13156a 1691456 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_arm64.deb
 bd70aca304e52a1615bc1dbfa4aadc325907faa2 636444 exim4-daemon-heavy_4.98.2-1+deb13u5_arm64.deb
 17f29386b55bf35165512620fef18fb9d9be1166 1490556 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_arm64.deb
 a835d41dee72b3fcff38e78874ee4b5a1379be00 582472 exim4-daemon-light_4.98.2-1+deb13u5_arm64.deb
 6c7c685367bb75f30397c524a16ea965d9f549d7 36900 exim4-dev_4.98.2-1+deb13u5_arm64.deb
 f2c37d539f1917bd1473fac3cd8ba54edd429528 11510 exim4_4.98.2-1+deb13u5_arm64-buildd.buildinfo
 cae74312c633123d6275110dd3220d7bdab085ee 138568 eximon4-dbgsym_4.98.2-1+deb13u5_arm64.deb
 01591dba3c80aa91958713e9c21081475190625e 70528 eximon4_4.98.2-1+deb13u5_arm64.deb
Checksums-Sha256:
 03e4ca4fbeb039f3cb0b8e1d0d256356f9901c9aab272404503a049bac0d7529 137728 exim4-base-dbgsym_4.98.2-1+deb13u5_arm64.deb
 6b221969d7fe75303a3743769d4b4f504b062cf1ebed9a239065f18985c8e887 1141176 exim4-base_4.98.2-1+deb13u5_arm64.deb
 702347d9c2b45c9085389e77bc0dd887c4859ac8d01b7a4ac19e62973d9f04e2 1691456 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_arm64.deb
 df91766bc701257318187297c40d57b871b0291260305bbf0d0494a67ae91e5b 636444 exim4-daemon-heavy_4.98.2-1+deb13u5_arm64.deb
 41908c22d51f886feadc0065fdc722f03329e4fad14f4c6c717c46e66a49de08 1490556 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_arm64.deb
 00006bb90743eeec393c53e2a2c6887eb8c71d98297082d3feb96e2b879e48cc 582472 exim4-daemon-light_4.98.2-1+deb13u5_arm64.deb
 0089fd8b99a95e4e75b12ea7c078eb10c170bc8c2ac179bc9e717a2de68bb013 36900 exim4-dev_4.98.2-1+deb13u5_arm64.deb
 3a01e205eb9b61ef6b28ab347b050e839de18ea8d7b1ecaa3ed8df11fac10395 11510 exim4_4.98.2-1+deb13u5_arm64-buildd.buildinfo
 7565fcc7e11fe7ab2e6957985e4cab93a3c971f2bdf0c5a1547684c69fc4c8a8 138568 eximon4-dbgsym_4.98.2-1+deb13u5_arm64.deb
 368f263d84672cbb2edc3430603c0f6f6294fdbc1f78498d22dcc8d5cefc5b56 70528 eximon4_4.98.2-1+deb13u5_arm64.deb
Files:
 2ee5d8f3717bb04dfb6937b335f27962 137728 debug optional exim4-base-dbgsym_4.98.2-1+deb13u5_arm64.deb
 88b90c2c7c4ae45e07648d0e7a235e15 1141176 mail optional exim4-base_4.98.2-1+deb13u5_arm64.deb
 da0840dfd6f5d9d3671abfd6fa2a04bc 1691456 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_arm64.deb
 83155a30135b0c4dd0d48fff009c6ddd 636444 mail optional exim4-daemon-heavy_4.98.2-1+deb13u5_arm64.deb
 57f46ca521aae3233484c8bd756d8e3b 1490556 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_arm64.deb
 b1b3982ef2ef57d203c9256beb3f8339 582472 mail optional exim4-daemon-light_4.98.2-1+deb13u5_arm64.deb
 4da54ac4b9f868771eb7c09b8f9647c1 36900 mail optional exim4-dev_4.98.2-1+deb13u5_arm64.deb
 320fe1264f0bf142c2506679e09355d1 11510 mail standard exim4_4.98.2-1+deb13u5_arm64-buildd.buildinfo
 474f4a734162b1446f425742e86533f3 138568 debug optional eximon4-dbgsym_4.98.2-1+deb13u5_arm64.deb
 a0ba33c27c91f092a15e5efe30a6deb0 70528 mail optional eximon4_4.98.2-1+deb13u5_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=Znpl
-----END PGP SIGNATURE-----