-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 25 Sep 2026 11:25:38 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: i386
Version: 4.98.2-1+deb13u5
Distribution: trixie-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Closes: 1148506
Changes:
 exim4 (4.98.2-1+deb13u5) trixie-security; urgency=high
 .
   * Cherry-pick relevant changes from security release 4.100.1.
     CVE-2026-94054 EXIM-Security-2026-09-12.1 (GCVE-25-2026-09-50-1)
      Exim before 4.100.1, when Proxy-Protocol is used with an attacker-
      controlled proxy, has an out-of-bounds write.
     CVE-2026-94056 EXIM-Security-2026-09-12.2 (GCVE-25-2026-09-55-1)
      Exim before 4.100.1, when Proxy-Protocol is used with an attacker-
      controlled proxy, allows attackers to read certain uninitialized
      data from stack memory.
     CVE-2026-94057 EXIM-Security-2026-09-12.4 (GCVE-25-2026-09-56-1)
      Exim before 4.100.1 allows SMTP smuggling in which the received
      message does not match any sent message, and instead depends on
      crafted data sent after a rejection during DATA processing.
     Closes: #1148506
     (CVE-2026-94055 is not relevant - TLS Early banner support was
     introduced in 4.99.)
Checksums-Sha1:
 3b010dc97ff40cccafc086e6218492800b8f1537 129004 exim4-base-dbgsym_4.98.2-1+deb13u5_i386.deb
 03e699ee4628ce5c8a36ff98bbfed0041fed435e 1144428 exim4-base_4.98.2-1+deb13u5_i386.deb
 04db7f30dc78167ea849ea6359b4ecb37867a7ac 1524268 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_i386.deb
 fe4c1884902843111af4d14031964472a38f32b1 709200 exim4-daemon-heavy_4.98.2-1+deb13u5_i386.deb
 5b509b97d7b88161b9a571415835669cad510189 1341168 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_i386.deb
 6a32e07dda9de6ae6eca9da7b97422411b907174 647712 exim4-daemon-light_4.98.2-1+deb13u5_i386.deb
 4d3937809688855b3dd214a4d83601c608375b5d 36904 exim4-dev_4.98.2-1+deb13u5_i386.deb
 1b81c1e55f0bf2ffc7827f546edb34a949da6e7d 11403 exim4_4.98.2-1+deb13u5_i386-buildd.buildinfo
 57a88a4bd14125535bfbd7f746b3a911e1edd31c 127216 eximon4-dbgsym_4.98.2-1+deb13u5_i386.deb
 f4da58396006d0bd575c7c17937e9a41ce8dcd0a 73584 eximon4_4.98.2-1+deb13u5_i386.deb
Checksums-Sha256:
 0f1cd6be5bc793ecfbba3be6f0c8c5b8d05758846e9adb3b6e472d1a7b3b66d9 129004 exim4-base-dbgsym_4.98.2-1+deb13u5_i386.deb
 db54a19b5f8e33389b36c64cb000b14585e4e0704becd466e5388c24ba659230 1144428 exim4-base_4.98.2-1+deb13u5_i386.deb
 ccd3435612585c0393c202710625db117524b2f32acc13c7a07ff0ed05d98bc3 1524268 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_i386.deb
 ac687ad9266231a0623aa6bd8cf17c6b6a353a8cac9cd0ca6e246618735d8e1a 709200 exim4-daemon-heavy_4.98.2-1+deb13u5_i386.deb
 dd5c690ac207df9c1f02915952ae4c65d5d8c2ef3b8939bc9333e9d0324a6422 1341168 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_i386.deb
 160b34c9652c5b048f86de4bc432d08ed966297151c8377c791db3ef1c323d5c 647712 exim4-daemon-light_4.98.2-1+deb13u5_i386.deb
 5cbc5967204af839a33d8c385dcada2f0ffc7b6e08edb5cef79c952a782c4614 36904 exim4-dev_4.98.2-1+deb13u5_i386.deb
 51e290a2ccd9a997e8c61f6835b594bec4a8afbd351b4fd4aa4dcda0e2c24914 11403 exim4_4.98.2-1+deb13u5_i386-buildd.buildinfo
 6d20fbf1ba0779ed9e90a2e4991693c6ad74ff538742d608f22c04efc220cf2b 127216 eximon4-dbgsym_4.98.2-1+deb13u5_i386.deb
 ba86a37075e0a6ce97fccf967eedc263f313c63ab6670dc662d0c253aba4d720 73584 eximon4_4.98.2-1+deb13u5_i386.deb
Files:
 ee9444508db53fbdf66b6ae58f5bba98 129004 debug optional exim4-base-dbgsym_4.98.2-1+deb13u5_i386.deb
 21cb9227a4e3ce50cbee451fbca3c3c8 1144428 mail optional exim4-base_4.98.2-1+deb13u5_i386.deb
 20d937ca3b99ef4c77137c2d7e3cbec4 1524268 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_i386.deb
 d4ea8746c4c34b497d5cc7681fda12f4 709200 mail optional exim4-daemon-heavy_4.98.2-1+deb13u5_i386.deb
 880525b181970b267503ad4d070b6535 1341168 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_i386.deb
 b31e50548695b09ba8cf5b4b70efccf4 647712 mail optional exim4-daemon-light_4.98.2-1+deb13u5_i386.deb
 32fa8b1c54f5c25eb282f10a25fc9c53 36904 mail optional exim4-dev_4.98.2-1+deb13u5_i386.deb
 cb13b9dcf1191ff04cccc48afd97cebc 11403 mail standard exim4_4.98.2-1+deb13u5_i386-buildd.buildinfo
 bf58271cbba1b6cb9f741f082943ae9d 127216 debug optional eximon4-dbgsym_4.98.2-1+deb13u5_i386.deb
 1ea88a317dd9c5be5dd64ac7560aa0d8 73584 mail optional eximon4_4.98.2-1+deb13u5_i386.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmq48ksACgkQbheoBegw
XLLOMQ//eeNjY9vO/kZNsf2cRLVGz05HOMUrWIPyDLF179IQzfghVzl6hYnShlmZ
apRKUxmGC6gkZrB8vpLQJmcgmrkpSY4+QKE7vLnBgPVqAftbwwZofIuDJFwqBkbD
A3eDwmtXCpf0gKuqUOYuE9Dt1LZKxzOfE751/z5tDZtu6seXQqTX7bqz1Sa9rDEo
rEx9YCWTc1vdPiRQHf0OLwXvc21NagmPWarvZS9SsUy0kWRLZ1SNc1Jf0Yx5VgvY
9uRHV93bUl7SL8kuB3aNTP6AE3FNq/BHbDpPO1krIrx1gqo8J8DDNMJx+4Y2ERO/
3auXShHMfb641z9wRVX91Y0xp4h4bqxrq5Wwlvotzut5STtJIfGlaPDpZgo9gvOe
Ab+x6YQqkkKQpJJj5zDN2bLMZ24yj7RRqAsNuPXWwzPxumWOZ7kquTwxw7YMRGWu
BGz0SpcZSAFUR1WpKMqviyiGK1Ed87fevNP9c548kPY/IxMM68cG9SfrKvOXqK8G
aBWO0sk8e/nPEQ9YwgvW//4dvq82t8NDqNYf29gfJU331dFrWgqugRyEspaJRhg7
Sg+O9U/kh7SEMOcz8S3C5g/+bFLze9NXmHiSw8vLP6sIrt0tF241/hlUQTMJ5PSG
ppXkOJxtT49GDnMDo37bk61wGKG0CSihb1TYgCkTKm22WBTdcRc=
=zP+L
-----END PGP SIGNATURE-----