Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.announce.security > #5091 > unrolled thread

[SECURITY] [DSA 6522-1] exim4 security update

Back to article view | Back to linux.debian.announce.security

Contents

  [SECURITY] [DSA 6522-1] exim4 security update Salvatore Bonaccorso <carnil@debian.org> - 2026-09-27 21:30 +0200

#5091 — [SECURITY] [DSA 6522-1] exim4 security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6522-1                   security@debian.org
https://www.debian.org/security/                     Salvatore Bonaccorso
September 27, 2026                    https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : exim4
CVE ID         : CVE-2026-94054 CVE-2026-94056 CVE-2026-94057
Debian Bug     : 1148506

Several vulnerabilities were discovered in the Exim mail transport
agent, which could result in SMTP smuggling, information disclosure,
denial of service or the execution of arbitrary code. 

For the stable distribution (trixie), these problems have been fixed in
version 4.98.2-1+deb13u5.

We recommend that you upgrade your exim4 packages.

For the detailed security status of exim4 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/exim4

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmq5bHZfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2
NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND
z0T7zg/8CXIRXB7uUXbXo8m4f1CxW3BBVF/nofKl4T2jE4ZocQQHkkOX3rcJJvKG
1cFD9EawOmkT49OgOQLGqsmfOALm/rCnaXjzpL2mg3ej4yBEQ5T/8j7kxlP6NRuI
xzGbpGGu+9TkHx/vK5z2NQwcnVu3+62lP1J9tA0j6vHtLIUx+f6ZCxGwxsp7RqNP
rySkaveyr+7njXWdXC3mP3vj3/PtwpIMak0gxDgu4BNGsjD721tZtLdtsIMDoWJ3
H8kidxZzTy59nRm8gaCPns9/uquO6XdJ4WqwSSyrlukasuG8Qvx2/lHzs7pPFPK3
mI6K2DazkLyxilgbbGsUifpESO4elWlhNX+1QXKEioISnwxxj4HmZH//z8Wa+2Rt
6fOfg0G23FannXOS6Xa/mK15ffqH3pDEGYbLF1LD/7+XlysfQ2HATZYwPLgrKCLO
wBZ1Oye0JD7WsgJyUtqvtVrglpvVIH4+/QW+d8yqx9yjYN2Gc1kBn4sodaOI+oGc
WI0urkd69sV21/BXwBbBO+XWMhk583aj574HdHGD257cnKydkHLmWBRIi2E5wjv5
11CgYNFgSx3BkhMomdDFNQkCt7ujTPDIz1fHmPVu90DzRepz+UY/qJYsuJ+W1LrW
HhsawmZ51IJY+RAspWVdb/SmFQPF7yq+o6vWpXsQ5w6wjIIoXVA=
=Cyke
-----END PGP SIGNATURE-----

[toc] | [standalone]

Back to top | Article view | linux.debian.announce.security

csiph-web