-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 27 May 2026 18:58:40 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: armel Version: 4.98.2-1+deb13u3 Distribution: trixie-security Urgency: high Maintainer: armel Build Daemon (arm-ubc-04) Changed-By: Andreas Metzler Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.98.2-1+deb13u3) trixie-security; urgency=high . * Cherry-pick fix for EXIM-Security-2026-05-19.1 from 4.99.4. Security: PROXYv2 parser: reject PROXY frames whose declared payload length is too short for the claimed address family (12 bytes for TCPv4/0x11, 36 bytes for TCPv6/0x21). Previously a frame with family=0x21 and len=0 caused 16 bytes of uninitialized stack to be formatted as the sender's IPv6 address and disclosed in the SMTP greeting banner. Affects configurations with SUPPORT_PROXY and `hosts_proxy` set. Reported by Warisjeet Singh (sin99xx). Checksums-Sha1: cc341ae4c23d05f9f544786c0333eb72a40ce1b6 129976 exim4-base-dbgsym_4.98.2-1+deb13u3_armel.deb 976d9cf76ed7cf153e449e12bb703b3cd876bb8d 1139440 exim4-base_4.98.2-1+deb13u3_armel.deb 31d55b1982bf035c8765442aa8db42bc18edb8d4 1656520 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u3_armel.deb 58a1928c561e3376d441d0a93443eab69c97a090 622828 exim4-daemon-heavy_4.98.2-1+deb13u3_armel.deb b39a0f78758da6ebdeda9293a8fdf8b573a426e0 1456184 exim4-daemon-light-dbgsym_4.98.2-1+deb13u3_armel.deb fb8febd707e631cfa11ef7e16ccb542cc3d5ec32 570384 exim4-daemon-light_4.98.2-1+deb13u3_armel.deb d8e26a9d37a71859d51a3929ae984bc8cf1590cd 36412 exim4-dev_4.98.2-1+deb13u3_armel.deb c0504b6d680780e5e5769716d50d0c271c75d707 11176 exim4_4.98.2-1+deb13u3_armel-buildd.buildinfo d17b1e56b1902fd9c905a314cb81e18987fac6e2 137200 eximon4-dbgsym_4.98.2-1+deb13u3_armel.deb 5ce6ff9730de6c2712e6a8a7a8ee504a075fc10b 68788 eximon4_4.98.2-1+deb13u3_armel.deb Checksums-Sha256: 266404b029022e18b1006913833e78c76ab01577b1e6a714d40b9727301a35d3 129976 exim4-base-dbgsym_4.98.2-1+deb13u3_armel.deb 637e75b9ed0a456e2005aba546200d0bed3d8a0ce1b68bf67af3ce6595efb5a0 1139440 exim4-base_4.98.2-1+deb13u3_armel.deb f7ccf92b6f8f5a05528a4ebbfa773aee29cf055c3e578dc6ea6a3d073d1d9912 1656520 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u3_armel.deb ef3dcbcfe4dee81ff9f7589c2ea8c8399795661a589fdafa1dade726f7bce5bd 622828 exim4-daemon-heavy_4.98.2-1+deb13u3_armel.deb 978cae9542b6ef6bd422d1b0245b038cf314e0495431c718aa83629c940e14b7 1456184 exim4-daemon-light-dbgsym_4.98.2-1+deb13u3_armel.deb 3477d0ab680c2c9bb9d14f865c6954d8dc7cb12b92e8f3243f44848e7ce60ff3 570384 exim4-daemon-light_4.98.2-1+deb13u3_armel.deb 3416d6af166c1df7b512ec0cc6353c0aa17e8443dc66d5b587a906e9a6a9711a 36412 exim4-dev_4.98.2-1+deb13u3_armel.deb 99ad05f5e4c39b561f2750b6afdbc4df02b604cef8e07f7e42384ffe61966343 11176 exim4_4.98.2-1+deb13u3_armel-buildd.buildinfo 6af0a4f85dcd5e38b3f6189e1c8e4c9b568ca9c4fbbbbb756be042590c77f108 137200 eximon4-dbgsym_4.98.2-1+deb13u3_armel.deb a4079562a9f87da6f40ea28c6c4344868e7eaec54f31118241286df0f882bcd8 68788 eximon4_4.98.2-1+deb13u3_armel.deb Files: 855b2aa88859823943cd59d54edc4894 129976 debug optional exim4-base-dbgsym_4.98.2-1+deb13u3_armel.deb 2f596d4808b151e3ab1ed2553ac40a5c 1139440 mail optional exim4-base_4.98.2-1+deb13u3_armel.deb 74cb2c077b35076e7fbc098e7e2b5a23 1656520 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u3_armel.deb ca24f7320fd894d123116728d41fd615 622828 mail optional exim4-daemon-heavy_4.98.2-1+deb13u3_armel.deb 6692affcce10cf0b0d825d53d4f801f4 1456184 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u3_armel.deb 6dd43e306e3a34952d628295c9ed88af 570384 mail optional exim4-daemon-light_4.98.2-1+deb13u3_armel.deb db18be0c6503b251e1dec9936163fd54 36412 mail optional exim4-dev_4.98.2-1+deb13u3_armel.deb 42b1aca89734441ce500699cde8588db 11176 mail standard exim4_4.98.2-1+deb13u3_armel-buildd.buildinfo 0a2c624e018ec94d64d3c94b92ea2746 137200 debug optional eximon4-dbgsym_4.98.2-1+deb13u3_armel.deb 383987f27f644ddd753ef30320cd7dac 68788 mail optional eximon4_4.98.2-1+deb13u3_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECx5fXZYVNP9tMtwlK1PZBedPspoFAmoYeD4ACgkQK1PZBedP spoW7hAAnG8t/wrXMNZYtWFw23U/7ZUSUh9AKGFAjXa9x4eqohemk1xwC7RARWJQ EZVZ7CtJiGI/+hSc6gbFPDqyO+O0gMhh6B2HuPRm9rd7ImVQouY6CnVf0m9liI+M 08RPCSSt8j1JM46xaiSQ6/hSkgNvwxpP1kIw7Z6UXGXJpIVbHEeaZjUQiqhIelIg rPFnCFkcsiXWDr8sqEUuj+o69XH+RXxtz0FTfiInndgQUSzkuHxqfBx8wqN8CyCH JAiZqe3EL0VIOgMOQLo3dPm5Gd9eveo5Y3U6Djpnqbxnhvd+NIK5XQBS5LOKAgn4 Ra4X5jNDyiPh+YCFqYotIWzK6Fji7BoszbINAbRgik09wJ8iM0RkgGxWOxvOZKWJ vMlyyvEwYEKn745zBCWeQPKcMPmiSipckjoUV4aTPK63bxLFbqKopsqUxX6IRJaG r+2mUBLUD1ObwbpsRtlTSRfJtyOTaT1vk1woqj3wax0u/JcmYWhD8G92NEFa5nWk B/DsgWS8SnXYoDmSMamfMo7mdeDr8Inet7xbUOTcvlLUvPtNUXqZiusEWfL4MtWj hjn0TbsVWFkxPHcHg66yQ8SrXKjAcrkC4jTmT/jExwu2Yd800USIZeM6fdb0uuwg FBftSJJK1gYg99VjF+GqajT8Y49bOLp8UjCKTAtZMs0tCgmIHBU= =7gQF -----END PGP SIGNATURE-----