-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 23 Jul 2026 19:04:03 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: arm64
Version: 4.98.2-1+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-04) <buildd_arm64-arm-conova-04@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Changes:
 exim4 (4.98.2-1+deb13u4) trixie-security; urgency=high
 .
   * Fix two local privilege escalation issues.
     EXIM-Security-2026-06-22.1 (GCVE-25-2026-07-45-1)
     Using command-line arguments intended for transferring queue-name
     through an Exim execution chain, files outside the spool area can be
     accessed.  This can be used for a privilege escalation. CVE-2026-66140
     EXIM-Security-2026-06-22.3 (GCVE-25-2026-07-45-3)
     A local user having a .forward file can use a string-expansion there.
     With certain Exim configurations this can be used as a privilege
     escalation. CVE-2026-66141
Checksums-Sha1:
 47a018230412366dce499ffa29a32ddeb7acd590 137756 exim4-base-dbgsym_4.98.2-1+deb13u4_arm64.deb
 941aaf09dfc559481d0fe8a5799ebb3dd4471d2b 1140768 exim4-base_4.98.2-1+deb13u4_arm64.deb
 c9ba12dd2321c75a8fea6a4c414e9ddfdd275256 1691440 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_arm64.deb
 b5f4aa5464a057b5011147bf21db0852bd566906 636744 exim4-daemon-heavy_4.98.2-1+deb13u4_arm64.deb
 15372f2316014c4000f3653935be4afdb6de763e 1490552 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_arm64.deb
 97d8adc4a31b6a8691e1f2a890845f3bf248d36b 582208 exim4-daemon-light_4.98.2-1+deb13u4_arm64.deb
 c70a67be3998a786005bab85482c784e20a6a356 36628 exim4-dev_4.98.2-1+deb13u4_arm64.deb
 91d81914c9f06865719da5d999f83a214661d35e 11443 exim4_4.98.2-1+deb13u4_arm64-buildd.buildinfo
 c69bd741fc91e330b3c4830872ef0f98c8e849fb 138564 eximon4-dbgsym_4.98.2-1+deb13u4_arm64.deb
 e1c376561f264af6a8bd97080ef5f0230fdd1f57 70304 eximon4_4.98.2-1+deb13u4_arm64.deb
Checksums-Sha256:
 3026e4d22ce35086a2c59b293a75aa8f29ab221b5f07f1386de7319f2f12a290 137756 exim4-base-dbgsym_4.98.2-1+deb13u4_arm64.deb
 2e3e4fa73b2c8008f39be82aa534bce5275d4d3efd8ecf5bb957284cb443c78e 1140768 exim4-base_4.98.2-1+deb13u4_arm64.deb
 c88bfe954422fca5574778956b554bf9bf1cee0611888a5c103b48b93e2da97d 1691440 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_arm64.deb
 f3c42699e2d89d7ed00ff9b9965e37a0ab91b52dc0f187d6c267cacd9d7f993a 636744 exim4-daemon-heavy_4.98.2-1+deb13u4_arm64.deb
 62e0e75aa6b15b0c705f3788afc20d7800e90a01bcc952d323d14203706013ee 1490552 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_arm64.deb
 ebf4e3c3d20a2f323aa957e3ea36557ddbe03180d4bed9d267ceb4d5e3b621b5 582208 exim4-daemon-light_4.98.2-1+deb13u4_arm64.deb
 4019b748db5299c48093076c693952720ac29bf5ab8a5bc93e1481e7fa9f037f 36628 exim4-dev_4.98.2-1+deb13u4_arm64.deb
 f9e1d63b15e73ec6938a629867b02fbd0434a90df8778b4d53e09f47d7682c3c 11443 exim4_4.98.2-1+deb13u4_arm64-buildd.buildinfo
 5edbe84f82d2ecba90a64a2fedb569e7ddce0e1618dd2efa18c3c8975a8281d8 138564 eximon4-dbgsym_4.98.2-1+deb13u4_arm64.deb
 0a12ab4386476f4876c6b4d0b5de100b0be42ba963169c57630e5b0c0aa9f842 70304 eximon4_4.98.2-1+deb13u4_arm64.deb
Files:
 549f6d267c06b01eb1ee8cfc4361cdee 137756 debug optional exim4-base-dbgsym_4.98.2-1+deb13u4_arm64.deb
 1aee7c4e29fcdd5f850b50e33f2c708a 1140768 mail optional exim4-base_4.98.2-1+deb13u4_arm64.deb
 82adb9fee70366ecd0e9bcc16a990a5f 1691440 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_arm64.deb
 3f0b2f7e276698e5d51dd3fc1a66eb14 636744 mail optional exim4-daemon-heavy_4.98.2-1+deb13u4_arm64.deb
 74d8c52b53d6e8fa84b59247fdcceee9 1490552 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_arm64.deb
 ac0ddfbfd19f32c3906f098ce8874a94 582208 mail optional exim4-daemon-light_4.98.2-1+deb13u4_arm64.deb
 2073b3b7ec2ff0d71db33b565ae35075 36628 mail optional exim4-dev_4.98.2-1+deb13u4_arm64.deb
 f4f2812deb0d9093a50f51107d8b93ed 11443 mail standard exim4_4.98.2-1+deb13u4_arm64-buildd.buildinfo
 ae026d03206488ac97e2d1b5e7d6b700 138564 debug optional eximon4-dbgsym_4.98.2-1+deb13u4_arm64.deb
 d381b6bd780eac835942d93d2485068d 70304 mail optional eximon4_4.98.2-1+deb13u4_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=+qgI
-----END PGP SIGNATURE-----