From foo@bar Sun May 10 18:20:02 2026 Format: 1.8 Date: Wed, 29 Apr 2026 18:31:55 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-daemon-mod exim4-daemon-mod-dbgsym exim4-dev exim4-mod-cyrus-sasl exim4-mod-cyrus-sasl-dbgsym exim4-mod-ldap exim4-mod-ldap-dbgsym exim4-mod-mysql exim4-mod-mysql-dbgsym exim4-mod-pam exim4-mod-pam-dbgsym exim4-mod-perl exim4-mod-perl-dbgsym exim4-mod-postgresql exim4-mod-postgresql-dbgsym exim4-mod-spf exim4-mod-spf-dbgsym eximon4 eximon4-dbgsym Architecture: m68k Version: 4.99.2-1 Distribution: sid Urgency: high Maintainer: m68k Build Daemon (m68k-gandi-02) Changed-By: Andreas Metzler Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-daemon-mod - Exim MTA (v4) daemon with minimal hard dependencies exim4-dev - header files for the Exim MTA (v4) packages exim4-mod-cyrus-sasl - exim4 Cyrus SASL authenticator module exim4-mod-ldap - exim4 LDAP lookup module exim4-mod-mysql - exim4 MySQL lookup module exim4-mod-pam - exim4 pam supprt module exim4-mod-perl - exim4 embedded perl module exim4-mod-postgresql - exim4 PostgreSQL lookup module exim4-mod-spf - exim4 SPF ACL module eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.99.2-1) unstable; urgency=high . * Update Jeremy's key to get new signing subkey. Adds 745A3503EC71104253C5D4490F04D14A28EAFA16 * New upstream security release. +CVE-2026-40684 Possible crash with malicious DNS data when using musl libc On systems using musl libc (not glibc) due to an oddity in octal printing it is possible to crash the connection instance when malformed DNS data is present in PTR records. +CVE-2026-40685 Possible OOB read/write on corrupt JSON in header configurations using json operators on invalid externally-provided input could trigger heap corruption. +CVE-2026-40686 Possible OOB read with large UTF8 trailing characters configurations using utf8 operators on malformed utf8 in headers could trigger OOB reads and might trigger some data leak if error messages are required for subsequent emails in the current connection and similar malformed headers are present. +CVE-2026-40687 Possible OOB read/write with SPA authenticator in configurations using the SPA authentication driver to a hostile/compromised external SPA/NTLM connection it is possible to trigger an OOB read/write and crash the connection instance or possibly leak heap data to the instance. Checksums-Sha1: 47d8583ddd6278d8d3ca393843ad40830ff3e356 120108 exim4-base-dbgsym_4.99.2-1_m68k.deb edb2316371a4efe297219958942a04577c115b7a 1087516 exim4-base_4.99.2-1_m68k.deb 1057c5925ffb166f4729fb0689408ce821ae8685 1575616 exim4-daemon-heavy-dbgsym_4.99.2-1_m68k.deb 5d7a1919d3de4d2c9b450ca4babe42ffa23d3b29 520892 exim4-daemon-heavy_4.99.2-1_m68k.deb 386e6beb4927e7b6a16319dbc7eaf87d9021abeb 1387404 exim4-daemon-light-dbgsym_4.99.2-1_m68k.deb f4a850b5b406c7b39010ce358b7372e148f0c1e3 476040 exim4-daemon-light_4.99.2-1_m68k.deb 5581ebca8ecfac13a95a26705fe1c2fd14754b8b 1498052 exim4-daemon-mod-dbgsym_4.99.2-1_m68k.deb 57204e6a41558cb93b4aea2877841024f27c8cb9 529376 exim4-daemon-mod_4.99.2-1_m68k.deb 6e35ff0a0261024aafa3432045b8b7528b28e401 24652 exim4-dev_4.99.2-1_m68k.deb 8fe37aa1eb916c16fb9b50c36cac8275299751ec 12772 exim4-mod-cyrus-sasl-dbgsym_4.99.2-1_m68k.deb d26431d9aa55bfdbace50d14e5fbbb393b32747c 5716 exim4-mod-cyrus-sasl_4.99.2-1_m68k.deb a0da48076b4f3d7967f2e22813d9aebc27ff2287 21268 exim4-mod-ldap-dbgsym_4.99.2-1_m68k.deb c0ba1b7dc1f2432d066db40deef24ff9e45444ac 9588 exim4-mod-ldap_4.99.2-1_m68k.deb 421087c6c7b3d22b284ff066dadd672135000af3 21092 exim4-mod-mysql-dbgsym_4.99.2-1_m68k.deb 7fac3c33a461634e17dd63369d6465a72cc5eeed 4784 exim4-mod-mysql_4.99.2-1_m68k.deb 20cc3d5dd95de793f0565e0ff12245db3fc0cba8 6360 exim4-mod-pam-dbgsym_4.99.2-1_m68k.deb b7d1de86e5507e6aea30c033b7da340ea120a17c 3220 exim4-mod-pam_4.99.2-1_m68k.deb d1991c0b62e98008b63711f6e7f0d4b97905876b 33796 exim4-mod-perl-dbgsym_4.99.2-1_m68k.deb 7460e9cdfe693f8bffc66a47eea1d28bb2596e9d 5672 exim4-mod-perl_4.99.2-1_m68k.deb cf1cd402ee17a9c6dee828cd19cc73a158d959db 12184 exim4-mod-postgresql-dbgsym_4.99.2-1_m68k.deb 22df7f78426899544a4502cd8e5c8781db416d0a 4708 exim4-mod-postgresql_4.99.2-1_m68k.deb 3b96af9a7a21d8d0007b5ce152289eaa9aac890d 18524 exim4-mod-spf-dbgsym_4.99.2-1_m68k.deb db1425330c6111d8619ffaf85aaa9c09decc1879 6932 exim4-mod-spf_4.99.2-1_m68k.deb b6b6e75e66b1786a1355eebc9b358e11a563d9bb 15089 exim4_4.99.2-1_m68k.buildinfo 27e53efdf74b43538d26ed0af5d4c920913d47b0 128920 eximon4-dbgsym_4.99.2-1_m68k.deb 4b2d18c22549f48ec24332c56f444149ff9ce736 50352 eximon4_4.99.2-1_m68k.deb Checksums-Sha256: 8034c4bfdcbe4473c2f787c7d8ee0ab0f5841700f05206943b5801648c61195d 120108 exim4-base-dbgsym_4.99.2-1_m68k.deb 3de721ef97d20ae0a68d580d8bd5f14948a4970578ac0fc3c3da9a103d39ecff 1087516 exim4-base_4.99.2-1_m68k.deb 3057104f4faf21551ad7a2ec0a2dc6f0164770c441301fec2338fd103becd7ba 1575616 exim4-daemon-heavy-dbgsym_4.99.2-1_m68k.deb 2c439b6166a740460cb27f385a7c87c4ac277476d47a4c442fdde02ee3ff6483 520892 exim4-daemon-heavy_4.99.2-1_m68k.deb f84a4cb4c5239890cd00ee1e2c6305e9db093959adebc0179cd19888afdf5d0d 1387404 exim4-daemon-light-dbgsym_4.99.2-1_m68k.deb 7df0d4eef6ac3655569e7657f5a8068dca3ad0f1f2200bf8195aaaec5fd15211 476040 exim4-daemon-light_4.99.2-1_m68k.deb be870ee82153bd17793d94fe27916ed608f9c852dc272c468bcb659d3fe08a09 1498052 exim4-daemon-mod-dbgsym_4.99.2-1_m68k.deb de036a723f586f318fc6eb7cf12910ec1f01ed6ba9b413d28b97234430235583 529376 exim4-daemon-mod_4.99.2-1_m68k.deb 81ea648d2c4d52fbe25731d3f1d5be3b20dbfc0f21f2c93dcd46746b087b0dcf 24652 exim4-dev_4.99.2-1_m68k.deb 744c6fa13b80e5a02e84c4df458c864c47a5ecc66c3c0901e0d2a53f19da09f4 12772 exim4-mod-cyrus-sasl-dbgsym_4.99.2-1_m68k.deb fc5853c8c2b83b3876d8802cfb0ce6d73a2154a1610c7f696cbfdd6ea09b429a 5716 exim4-mod-cyrus-sasl_4.99.2-1_m68k.deb 4eb0cf8b2d3cc38242e1b2ffd6291b3837d0c8e9d7d8d03f14ac593be948051e 21268 exim4-mod-ldap-dbgsym_4.99.2-1_m68k.deb 6727846c95acc259dea71e09f314af66dcde31b6e34b14bd8d66029010ec106f 9588 exim4-mod-ldap_4.99.2-1_m68k.deb b67d16ce7aeb1b211549d70a3f14da15ecaca39264fefa2e6ec7bbc8d91908fc 21092 exim4-mod-mysql-dbgsym_4.99.2-1_m68k.deb 19b235528b60107230ffdbeb8aa3cef111035b4ccfb450272bf0e5b723298ca7 4784 exim4-mod-mysql_4.99.2-1_m68k.deb 0aeca244d782f770acf317bbea3cf78ae903156083bfe7af25af99188afd8d64 6360 exim4-mod-pam-dbgsym_4.99.2-1_m68k.deb 4047df4b99c572cc72deeac07f1c285e7b1e34b3f02478e0434d41364da02c16 3220 exim4-mod-pam_4.99.2-1_m68k.deb 433a3124d3cd553032567d37f24ac706ab62624639b793a048ffaf80ef30c23b 33796 exim4-mod-perl-dbgsym_4.99.2-1_m68k.deb 315442a6834747f836cf7d4d0479622d634cf31cb7b5bfeda07fa591b8ad13f4 5672 exim4-mod-perl_4.99.2-1_m68k.deb 887c5d67268644019331408acc92b5ff1cc047d26b3ee1c1709dd4363429623d 12184 exim4-mod-postgresql-dbgsym_4.99.2-1_m68k.deb e250f9d5d063c640dd88d5c29c4061fb9aeef67de569b7ea15b9594ad33804d9 4708 exim4-mod-postgresql_4.99.2-1_m68k.deb c91318eb70ae8a2755dd0466746266139a6baa7b0140b874693b9d448662daed 18524 exim4-mod-spf-dbgsym_4.99.2-1_m68k.deb c65d7567570d13439bf538a96382218f1a2745e40f414f4aa2967025faef94e6 6932 exim4-mod-spf_4.99.2-1_m68k.deb a02570fa28503a084f58fd36297c2082444d5fe8ffa2d1cc11275e13f9a88031 15089 exim4_4.99.2-1_m68k.buildinfo 06d69a4bba6b34b90faf048d41b090e9c2c0906f1c9c57a3ed903a1459f1b2bf 128920 eximon4-dbgsym_4.99.2-1_m68k.deb 87f7e0abf6d6c0c3f2d12db5b406c8283393a38b03004468f30cc6dc05f010cc 50352 eximon4_4.99.2-1_m68k.deb Files: 1ed685c01a7305c288909ca437860623 120108 debug optional exim4-base-dbgsym_4.99.2-1_m68k.deb 10c7cbde88995d808576013072f3805d 1087516 mail optional exim4-base_4.99.2-1_m68k.deb 1d435c8c0f4b411675baefa9bcd3b732 1575616 debug optional exim4-daemon-heavy-dbgsym_4.99.2-1_m68k.deb 777346f8f7c57ddb99b855817d744a02 520892 mail optional exim4-daemon-heavy_4.99.2-1_m68k.deb e6ee69979f4199825bcc906ffd7c0232 1387404 debug optional exim4-daemon-light-dbgsym_4.99.2-1_m68k.deb bdfa7ee5a0d5985e8ec75179d8870be1 476040 mail optional exim4-daemon-light_4.99.2-1_m68k.deb 09b2b6af63a363c18882aa3167053cb8 1498052 debug optional exim4-daemon-mod-dbgsym_4.99.2-1_m68k.deb da3a9a46ad48ee41ac2cd924e3d3ae00 529376 mail optional exim4-daemon-mod_4.99.2-1_m68k.deb 6256567a171607e1a1fc4942ba309b99 24652 mail optional exim4-dev_4.99.2-1_m68k.deb 1f193a7e2d2dacbd566e8fba654bf72c 12772 debug optional exim4-mod-cyrus-sasl-dbgsym_4.99.2-1_m68k.deb 3ee5eddbc03620deac2de572dc70ba1b 5716 mail optional exim4-mod-cyrus-sasl_4.99.2-1_m68k.deb 55530ad7a3d751b5d47d70cb4abb2875 21268 debug optional exim4-mod-ldap-dbgsym_4.99.2-1_m68k.deb a6434cfdc01b350a27ca69c8e9f9f6bd 9588 mail optional exim4-mod-ldap_4.99.2-1_m68k.deb c4e9a6503c6376b28369602495a4e110 21092 debug optional exim4-mod-mysql-dbgsym_4.99.2-1_m68k.deb 4206a8a9b775a67f151ebd73f13e1d4d 4784 mail optional exim4-mod-mysql_4.99.2-1_m68k.deb bc8c0149e687371cc6a63dfb0d411d3f 6360 debug optional exim4-mod-pam-dbgsym_4.99.2-1_m68k.deb 66992d449dd88f461e88265e584b2941 3220 mail optional exim4-mod-pam_4.99.2-1_m68k.deb e2e91846ce5441dc3edb2e3de6929dbb 33796 debug optional exim4-mod-perl-dbgsym_4.99.2-1_m68k.deb 00a47616a0a1f7428e23ac92269d1975 5672 mail optional exim4-mod-perl_4.99.2-1_m68k.deb be8f8d6e2de43b2282f8a4ba39cb3816 12184 debug optional exim4-mod-postgresql-dbgsym_4.99.2-1_m68k.deb 76669943a79fedc5736333a9e631780d 4708 mail optional exim4-mod-postgresql_4.99.2-1_m68k.deb b675a880cf008287dc5bd49edcf0ed8e 18524 debug optional exim4-mod-spf-dbgsym_4.99.2-1_m68k.deb 3d2c3b10ec8374cc2007fd1b01816275 6932 mail optional exim4-mod-spf_4.99.2-1_m68k.deb ef15a8bb08d4c69643b5512a14f854e9 15089 mail standard exim4_4.99.2-1_m68k.buildinfo b4be1f85d685e263028a01ff4936f4ac 128920 debug optional eximon4-dbgsym_4.99.2-1_m68k.deb b37034a9541e43d5d948a6f4585e2f46 50352 mail optional eximon4_4.99.2-1_m68k.deb Signed-By: Debian buildd autosigning key for m68k-gandi-02