-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 25 Sep 2026 11:25:38 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: riscv64
Version: 4.98.2-1+deb13u5
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-manda-03) <buildd_riscv64-rv-manda-03@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Closes: 1148506
Changes:
 exim4 (4.98.2-1+deb13u5) trixie-security; urgency=high
 .
   * Cherry-pick relevant changes from security release 4.100.1.
     CVE-2026-94054 EXIM-Security-2026-09-12.1 (GCVE-25-2026-09-50-1)
      Exim before 4.100.1, when Proxy-Protocol is used with an attacker-
      controlled proxy, has an out-of-bounds write.
     CVE-2026-94056 EXIM-Security-2026-09-12.2 (GCVE-25-2026-09-55-1)
      Exim before 4.100.1, when Proxy-Protocol is used with an attacker-
      controlled proxy, allows attackers to read certain uninitialized
      data from stack memory.
     CVE-2026-94057 EXIM-Security-2026-09-12.4 (GCVE-25-2026-09-56-1)
      Exim before 4.100.1 allows SMTP smuggling in which the received
      message does not match any sent message, and instead depends on
      crafted data sent after a rejection during DATA processing.
     Closes: #1148506
     (CVE-2026-94055 is not relevant - TLS Early banner support was
     introduced in 4.99.)
Checksums-Sha1:
 55bd7cdffccb3647c12b10bebf936c8c53538dcb 131688 exim4-base-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 f1d7d209b81eb73a435007560a3041859de5b9af 1142844 exim4-base_4.98.2-1+deb13u5_riscv64.deb
 ac8cedf6ba2a3ff700604b89202ea0cef60811d7 1618956 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 00651216993c8e6cd448a1a41906ffe7bd8ba3e4 673828 exim4-daemon-heavy_4.98.2-1+deb13u5_riscv64.deb
 6432dcc49c5f65a9363cc9f6d6a3187b25bfa798 1427148 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 74fe3b154de178d040cffce970d1e0a9727934ca 615364 exim4-daemon-light_4.98.2-1+deb13u5_riscv64.deb
 f87f76edd69d13ff30d2c6bf6dc58fc41727ec0c 36900 exim4-dev_4.98.2-1+deb13u5_riscv64.deb
 24206338ecd0a3063b087f9595a86097aef62cc9 11509 exim4_4.98.2-1+deb13u5_riscv64-buildd.buildinfo
 adcdb6b657330cdd5a362845bbea353d33802beb 132088 eximon4-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 03009637d6f89bd78ba4d04f8b656cf3f58f5032 71728 eximon4_4.98.2-1+deb13u5_riscv64.deb
Checksums-Sha256:
 5b57471e7d9e6b658604390e39c539aa0bc7ad39f0b55bff0b3e92cd828b5578 131688 exim4-base-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 f1352deaf082e0f4f55b276d0453e27e29c2324005dc6331cae8abc59dec79c9 1142844 exim4-base_4.98.2-1+deb13u5_riscv64.deb
 31920a11568ae112c77d7f0c414cd4106cee1494626336dc39c49838a65b5515 1618956 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 c8154532c26a6f4033a473baeb47e5d58fb951f058ce2cfb08fc5718b614bd40 673828 exim4-daemon-heavy_4.98.2-1+deb13u5_riscv64.deb
 51d118ad63f58b342075c87f0f0d83be9795885ea07e85f53b8ee9bbcdf743d1 1427148 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 3b3aee0c8b861a591c218aae9c9df3883a7e5827746b7c62891af274b10c6af8 615364 exim4-daemon-light_4.98.2-1+deb13u5_riscv64.deb
 f874ba1cb116def63c2be8b6e9b8f898dc5fc3ee33dedd67af7a40469349dbc5 36900 exim4-dev_4.98.2-1+deb13u5_riscv64.deb
 94226800d3ab044cb6caceafb3f2b366225bcbf4486a71478dab01406ad7c508 11509 exim4_4.98.2-1+deb13u5_riscv64-buildd.buildinfo
 b8c220d0b37b41b5745ab2cc72a2bc2ed6e989fee462e2668268b8014514d73b 132088 eximon4-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 4c08cf4761da65864c5148dc9f7ddb75bc8f84cc9153e8c6f12824b5324c779a 71728 eximon4_4.98.2-1+deb13u5_riscv64.deb
Files:
 319e5cf1b1a60a68ead394cb0e92a7dc 131688 debug optional exim4-base-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 4ac4776815d1076492b0e7f731dd141b 1142844 mail optional exim4-base_4.98.2-1+deb13u5_riscv64.deb
 8edfba6245be386de146503d83231752 1618956 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 d0a365cf7a8f0ae5f8f474f01c83cdf3 673828 mail optional exim4-daemon-heavy_4.98.2-1+deb13u5_riscv64.deb
 6edf9f7fe9d021a3591591b920ca4af2 1427148 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 95b7b29d285eb03cd37377b916d5e205 615364 mail optional exim4-daemon-light_4.98.2-1+deb13u5_riscv64.deb
 b0c31d29d8b6ad1ba658df2537368f16 36900 mail optional exim4-dev_4.98.2-1+deb13u5_riscv64.deb
 99cdf510097983fb2a076f0ba2b79f59 11509 mail standard exim4_4.98.2-1+deb13u5_riscv64-buildd.buildinfo
 213922a5f70b718ee34a43494f2d57f3 132088 debug optional eximon4-dbgsym_4.98.2-1+deb13u5_riscv64.deb
 2af142faa1807f8948bbbcf6fd50274c 71728 mail optional eximon4_4.98.2-1+deb13u5_riscv64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEXZ9jHPkg/vETgMJZlJNduPxUf2oFAmq47YgACgkQlJNduPxU
f2phqhAAp74Uqry8jcBZL7Fo43lFQQtreC2kOvzy0/u8Vwl0iaF8lq9BoYWbWkK0
XaydJZL0vf6f6VN0TEISguxvspGtwXukq+GzMlRyRIsywrRys1QT1pH8jlvURhDh
FD2m046IvtWMWRcXYKTXeO/eDyoX0IHAfAnuRruJy/qyJt4e4TjqZXi+2CMXJM9m
vRZeLXJSJbeJVXEmo/m4tH2IAPONRFy/L9qwycxcRozhNgs8FB0R5Fn/9c3dNrqB
ZAMftND8ueFYnU+XUrLnYO1uyo8iT2uSSta9Q6xs9lATKsQBY/aLBZUDOhyv2yoL
fYD+WT2Z6ppcpgrvYsweQe9GtvXVCwLW1KajImzcGe6sTClWD1t0+LXhdmZCsahU
qU8HnG4HQLpLD37zcFNXMLPDV9FW+0nLWOIIn7U4sqTja7LQf35aRJSwLSe4Lgq6
TVJKH1pkzUgXvG0mR6qSK/txXyP8W3e1/maOQLfzgHsuRgsY6vA+C+6v1nGyjU8S
UDR0x7vy7ENPrz7qTub9M1hXVQWJvtdS/xJF/JkDvetxRwqhq/qndSVJh5IdKO3L
TGyOWWKsc2f4eiZIBGSJoY/yVz9oS/AkZimlYF9UIzU9IGCQLE2niA3GE26og3XN
6WSNDPxSgctb1MN4DsURXbGRt9VA92YuPhFjkyyGCmvca9PFDYI=
=OcZ2
-----END PGP SIGNATURE-----