-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 25 Sep 2026 11:25:38 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: s390x
Version: 4.98.2-1+deb13u5
Distribution: trixie-security
Urgency: high
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Closes: 1148506
Changes:
 exim4 (4.98.2-1+deb13u5) trixie-security; urgency=high
 .
   * Cherry-pick relevant changes from security release 4.100.1.
     CVE-2026-94054 EXIM-Security-2026-09-12.1 (GCVE-25-2026-09-50-1)
      Exim before 4.100.1, when Proxy-Protocol is used with an attacker-
      controlled proxy, has an out-of-bounds write.
     CVE-2026-94056 EXIM-Security-2026-09-12.2 (GCVE-25-2026-09-55-1)
      Exim before 4.100.1, when Proxy-Protocol is used with an attacker-
      controlled proxy, allows attackers to read certain uninitialized
      data from stack memory.
     CVE-2026-94057 EXIM-Security-2026-09-12.4 (GCVE-25-2026-09-56-1)
      Exim before 4.100.1 allows SMTP smuggling in which the received
      message does not match any sent message, and instead depends on
      crafted data sent after a rejection during DATA processing.
     Closes: #1148506
     (CVE-2026-94055 is not relevant - TLS Early banner support was
     introduced in 4.99.)
Checksums-Sha1:
 f9dddc341114c01e4f34105bf613627536a6c8d4 128652 exim4-base-dbgsym_4.98.2-1+deb13u5_s390x.deb
 2172acebc44b7b4a36869ace199b4b62c5292951 1142588 exim4-base_4.98.2-1+deb13u5_s390x.deb
 4c6cd4f18411058a4157c88836cc099aec571d30 1692416 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_s390x.deb
 ab1b181eab4e241ffad55a0354f563c2af6ad6ed 669560 exim4-daemon-heavy_4.98.2-1+deb13u5_s390x.deb
 4075ea7338dd7d12f5435730299beaa4336bb584 1491952 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_s390x.deb
 70338abd6270311de0c9eec42585bf1f4ec26029 612340 exim4-daemon-light_4.98.2-1+deb13u5_s390x.deb
 63d01d95aa8d08efadec77f3170c237461633679 36900 exim4-dev_4.98.2-1+deb13u5_s390x.deb
 f1b98fa5a6ee416efaface986d0132ad641d7662 11385 exim4_4.98.2-1+deb13u5_s390x-buildd.buildinfo
 d3714d98d60583bdce0c228f49abc715f40ddc88 140068 eximon4-dbgsym_4.98.2-1+deb13u5_s390x.deb
 e80c6a21939d6a01ce5aac2820e5d6e6c3c1cf07 73120 eximon4_4.98.2-1+deb13u5_s390x.deb
Checksums-Sha256:
 0990b3967c66218e5cee2950c7b0ac5fd3ec969227130aeb491efb35d30b7720 128652 exim4-base-dbgsym_4.98.2-1+deb13u5_s390x.deb
 42b8f5348e4d6349d3b6f7d755c7a1877844a517a33f88a7e0649d18def2d69e 1142588 exim4-base_4.98.2-1+deb13u5_s390x.deb
 3cc6a1b5b1e0b7193b932c3298b9a56a307f81cff7338093928c35ac0f9914dd 1692416 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_s390x.deb
 a82134a82babf8c2ad3b6d853f3750010b6c82c5e8177cc1b88ec5b87d9e5079 669560 exim4-daemon-heavy_4.98.2-1+deb13u5_s390x.deb
 a2a76f21a1335ef3addeebf7a7d48c431531364a68d04ebb8c7bc732bf8f3596 1491952 exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_s390x.deb
 9d0b467305319625f4450ed40bf2ca7151e8e67da926dcd083aac8cd77ba8ceb 612340 exim4-daemon-light_4.98.2-1+deb13u5_s390x.deb
 29803f11a719097d8f2b346bdd66cdaf1b2cf17fd7972552e1a33d267f9efcc1 36900 exim4-dev_4.98.2-1+deb13u5_s390x.deb
 817a348fcf1b6cba5a3599b480870e7863495f09900e86cda2b8ae16a0f3ac27 11385 exim4_4.98.2-1+deb13u5_s390x-buildd.buildinfo
 734698908726429c49d38656027ff2665c27e07a68b2e0027268bb24e161ad4f 140068 eximon4-dbgsym_4.98.2-1+deb13u5_s390x.deb
 1a1fb9506c501f9c55ac20dc004d10d980ba88cc3f934aa1e1a586c1b9e19f1a 73120 eximon4_4.98.2-1+deb13u5_s390x.deb
Files:
 a588037c0a9d3702ee3fd94bf3445223 128652 debug optional exim4-base-dbgsym_4.98.2-1+deb13u5_s390x.deb
 e3102ba613eec066c0dcacb075dd1c94 1142588 mail optional exim4-base_4.98.2-1+deb13u5_s390x.deb
 6dbac003e06b72f749fffb3ef3bad9f5 1692416 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u5_s390x.deb
 cb9a09f5a53bd3c2315d319fbcc3f200 669560 mail optional exim4-daemon-heavy_4.98.2-1+deb13u5_s390x.deb
 0a0935eaa852e0ed66772ef9a3b86357 1491952 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u5_s390x.deb
 fe1545bdb8e06d4e7fd047651792395b 612340 mail optional exim4-daemon-light_4.98.2-1+deb13u5_s390x.deb
 fe9bb9c49aeff264504ec5e65f7a1844 36900 mail optional exim4-dev_4.98.2-1+deb13u5_s390x.deb
 264b9a0868cd12cd8d6505fc72862f4e 11385 mail standard exim4_4.98.2-1+deb13u5_s390x-buildd.buildinfo
 eaebd5c62758f8140807a5c8dd4cfdea 140068 debug optional eximon4-dbgsym_4.98.2-1+deb13u5_s390x.deb
 e7e9db55c5a62d70b3e372b772cd18b3 73120 mail optional eximon4_4.98.2-1+deb13u5_s390x.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEfUKc1SwkyxlVJBiWHOd5r2LlPicFAmq46EwACgkQHOd5r2Ll
PicPHw/+O8/5PS4G1qoruDIRjIBJDtMOPMDTbl5NJlVB1CRG2rlv0gnNIxcUGjRx
VoxVY8vb2yDeMGbemP1Cci8tw63U0wbMmgECS4VeYSoSgvtKCCRmla9Q19pfilOI
j1sSmC9ehmqr+XiupKZHuxEInPx8qoFmV9QWLt6hd0OAnrk3vziveWF2sHVJ2xN4
SjYehcJ2jV8+7kTpubMfjNRT3J+WBKste+rB4ToxWIEWfpp0KzkbZqIIJRxu0tqS
2xMhcJBmg+DxDbzmjM0UhMtb8d0FDPVz9mTXkJLToc6t6czJnSyCkuRdEY1WebDB
1MWe+Mh/Pmf7APjgzomspccKHMCS36zk0g8TFB01G4GOl2XQQojjuSCjXZhe4Rp3
FTzz3TksYP2kyHZxtOjsxB0Us7n5TdcDWpUjpeVZ6E/4gN78K/5JKVfFBscbD3bQ
kGrJOxRHx7jIPXgt21vbL4xWTzaKDegBCxw7UChwARB0MTBj8NePTTiCe4akbVn9
M1zndn3t7PFJwdrG29Ko9OTkcwEQjGTEj+/5c28DF13dMTKorV4FA5tngJwPYwfD
VrHfv3ylkFQWX19TNKfTr5y6iBIviHWrQje7bJ0J37JjjrpfhETlaJCWdQzyzOr6
RT5zHln7CdcopNaWfaiHkwdlF/qofwnzvWw61fzkLFx3kpxSdwM=
=ORRZ
-----END PGP SIGNATURE-----