-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 22 Sep 2026 14:13:47 +0200 Source: exim4 Binary: exim4 exim4-base exim4-base-dbgsym exim4-config exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-daemon-mod exim4-daemon-mod-dbgsym exim4-dev exim4-mod-cyrus-sasl exim4-mod-cyrus-sasl-dbgsym exim4-mod-gsasl exim4-mod-gsasl-dbgsym exim4-mod-ldap exim4-mod-ldap-dbgsym exim4-mod-mysql exim4-mod-mysql-dbgsym exim4-mod-pam exim4-mod-pam-dbgsym exim4-mod-perl exim4-mod-perl-dbgsym exim4-mod-postgresql exim4-mod-postgresql-dbgsym exim4-mod-spf exim4-mod-spf-dbgsym eximon4 eximon4-dbgsym Architecture: source amd64 all Version: 4.100.1-1~bpo13+1 Distribution: trixie-backports Urgency: high Maintainer: Exim4 Maintainers <pkg-exim4-maintainers@lists.alioth.debian.org> Changed-By: Andreas Metzler <ametzler@debian.org> Description: exim4 - metapackage to ease Exim MTA (v4) installation exim4-base - support files for all Exim MTA (v4) packages exim4-config - configuration for the Exim MTA (v4) exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-daemon-mod - Exim MTA (v4) daemon with minimal hard dependencies exim4-dev - header files for the Exim MTA (v4) packages exim4-mod-cyrus-sasl - exim4 Cyrus SASL authenticator module exim4-mod-gsasl - exim4 GNU SASL authenticator module exim4-mod-ldap - exim4 LDAP lookup module exim4-mod-mysql - exim4 MariaDB/MySQL lookup module exim4-mod-pam - exim4 pam support module exim4-mod-perl - exim4 embedded perl module exim4-mod-postgresql - exim4 PostgreSQL lookup module exim4-mod-spf - exim4 SPF ACL module eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Closes: 980893 1148506 Changes: exim4 (4.100.1-1~bpo13+1) trixie-backports; urgency=high . * Rebuild for trixie-backports. * Security upload, do not wait for testing migration. . exim4 (4.100.1-1) unstable; urgency=high . * Upload to unstable. * New upstream version. Closes: #1148506 CVE-2026-94054 EXIM-Security-2026-09-12.1 (GCVE-25-2026-09-50-1) Exim before 4.100.1, when Proxy-Protocol is used with an attacker- controlled proxy, has an out-of-bounds write. CVE-2026-94055 EXIM-Security-2026-09-12.3 (GCVE-25-2026-09-51-1) Exim before 4.100.1, when certain non-default TLS settings are used with GnuTLS, has a use-after-free. CVE-2026-94056 EXIM-Security-2026-09-12.2 (GCVE-25-2026-09-55-1) Exim before 4.100.1, when Proxy-Protocol is used with an attacker- controlled proxy, allows attackers to read certain uninitialized data from stack memory. CVE-2026-94057 EXIM-Security-2026-09-12.4 (GCVE-25-2026-09-56-1) Exim before 4.100.1 allows SMTP smuggling in which the received message does not match any sent message, and instead depends on crafted data sent after a rejection during DATA processing. . exim4 (4.100-4) experimental; urgency=low . * Add GNU SASL authenticator module for exim4-daemon-mod. (Closes: #980893) * Run wrap-and-sort -ast. * Upload to experimental. * Add DEP-5 copyright file. Generated with cp debian/copyright.template debian/copyright && cme update dpkg-copyright This is partially broken due to #1135671 and #1139580. Retain old version in exim4-base's /usr/share/doc/exim4-base/debian/copyright.readable.gz. . exim4 (4.100-3) unstable; urgency=medium . * Drop executable bit from old (formerly dpatch) files. * Renumber patch files. * Cherry-pick fix for dovecot 2.4.3 AUTH compat. Checksums-Sha1: 3f031bddd13e052a165430fea2d5df1d465e2179 3489 exim4_4.100.1-1~bpo13+1.dsc 94fc5f995c6c137c4362084072be26309d6fd03d 463300 exim4_4.100.1-1~bpo13+1.debian.tar.xz fcb60367263b05916d88f8d34a2437f016e72270 189432 exim4-base-dbgsym_4.100.1-1~bpo13+1_amd64.deb 9e23ac4b45f531c1cf155a3d8103ed69846dc831 1123612 exim4-base_4.100.1-1~bpo13+1_amd64.deb 71d2d3e923498fba984ef89e1e80e5267ed28bf3 253240 exim4-config_4.100.1-1~bpo13+1_all.deb 8564ce357d85a2287957d7a4d05bb1a240a14a9d 1930268 exim4-daemon-heavy-dbgsym_4.100.1-1~bpo13+1_amd64.deb df744f2dc09559092985bf60ef7dec41c8dea5d8 751476 exim4-daemon-heavy_4.100.1-1~bpo13+1_amd64.deb df28f54c515deea631109af315509accae9893b4 1717284 exim4-daemon-light-dbgsym_4.100.1-1~bpo13+1_amd64.deb d61e1cfb8cac1f2a778fbf42cd81450d09ff758b 689628 exim4-daemon-light_4.100.1-1~bpo13+1_amd64.deb b1dcad048ba4071a22944f5ddff2cd9fa751f9fb 1844592 exim4-daemon-mod-dbgsym_4.100.1-1~bpo13+1_amd64.deb d6fb5067232728e01130475e55393640930ac5cc 758200 exim4-daemon-mod_4.100.1-1~bpo13+1_amd64.deb ea84ce6635409f0c69f21b5202fb634986feba1d 40140 exim4-dev_4.100.1-1~bpo13+1_amd64.deb 6fc7143b06e836b693b46b7fca0a1c6f86c4a3f6 14908 exim4-mod-cyrus-sasl-dbgsym_4.100.1-1~bpo13+1_amd64.deb a8ded97fd956f1aa08e8f6546e28ff7cec87ea63 6884 exim4-mod-cyrus-sasl_4.100.1-1~bpo13+1_amd64.deb 4c88f7a1525827d79be19a16d8af9d844ef1a6cd 23740 exim4-mod-gsasl-dbgsym_4.100.1-1~bpo13+1_amd64.deb ca19e7c9f05d2487136d39b2e3e5e62ddc276560 9692 exim4-mod-gsasl_4.100.1-1~bpo13+1_amd64.deb a36c4a70530370d08d565afbae7ddb857a8af534 25608 exim4-mod-ldap-dbgsym_4.100.1-1~bpo13+1_amd64.deb e079b8e14fc15412d1f79543d38b98df51352f34 11324 exim4-mod-ldap_4.100.1-1~bpo13+1_amd64.deb 9f2d1fa34c050c7967cb1fb95c5bc3bf5ac647b1 22068 exim4-mod-mysql-dbgsym_4.100.1-1~bpo13+1_amd64.deb 49e355fd0e7b6c416b8f4c4c29deaa08f323ed5e 5596 exim4-mod-mysql_4.100.1-1~bpo13+1_amd64.deb 483c5b6626a2483b711bb975890e44931397911d 6468 exim4-mod-pam-dbgsym_4.100.1-1~bpo13+1_amd64.deb 588d7f84cc0d1d79f6a653aa303a301b423f6e9e 3444 exim4-mod-pam_4.100.1-1~bpo13+1_amd64.deb 6676ea5229b3cae6af565ca997979d4d518b3408 35048 exim4-mod-perl-dbgsym_4.100.1-1~bpo13+1_amd64.deb a6216c2e122aa6920ae03eb033ef2fb04fda6fde 6108 exim4-mod-perl_4.100.1-1~bpo13+1_amd64.deb c58f4070b805a157966717e4471fc12e07fcd7a0 13468 exim4-mod-postgresql-dbgsym_4.100.1-1~bpo13+1_amd64.deb 48b3f1d8dfa8580835e8ca0e46131ad8001cd185 5632 exim4-mod-postgresql_4.100.1-1~bpo13+1_amd64.deb c9b7b80b7501fb5a39492dca43b8bf3b91be9f46 21164 exim4-mod-spf-dbgsym_4.100.1-1~bpo13+1_amd64.deb 84a744c27f3f79ac71ba7ebdb06267f4b682dde6 8036 exim4-mod-spf_4.100.1-1~bpo13+1_amd64.deb 275d4e571efab1bfba54a340a023c626fae941f9 7204 exim4_4.100.1-1~bpo13+1_all.deb 4764e19d89448b2b930e0e56d4e0e905b121f56f 18028 exim4_4.100.1-1~bpo13+1_amd64.buildinfo 7f5c223fa0d4a73763f43c0e3908ddca5477bfcc 141324 eximon4-dbgsym_4.100.1-1~bpo13+1_amd64.deb 8092ab3a6f557d60fab3f60f97a5b99aaa547dfe 76160 eximon4_4.100.1-1~bpo13+1_amd64.deb Checksums-Sha256: 19820b2a6146ad9000bc8d067831b20e6786f2cd5eac3eea83aa3996afcb81aa 3489 exim4_4.100.1-1~bpo13+1.dsc 3f9161e1f6ead4fa170494ae7062e3be333ca318bee162180e5b7f632367b523 463300 exim4_4.100.1-1~bpo13+1.debian.tar.xz 3668e436be51a922b458414e7e9da4b560671c72964ce67173ccd596c155dfb4 189432 exim4-base-dbgsym_4.100.1-1~bpo13+1_amd64.deb 1eb1a00267a69d4f1100e7b423357d7a37e87499814af0ddbfb9c4a632a6be5a 1123612 exim4-base_4.100.1-1~bpo13+1_amd64.deb 7e33ce8c4b2accfbf776cd0554b574443a06bfae7a80f9c404153d5faf3ea9b6 253240 exim4-config_4.100.1-1~bpo13+1_all.deb a15ad4eb4077bfde15ca80800c501622e96caea1797d13a12020a093e0232fb1 1930268 exim4-daemon-heavy-dbgsym_4.100.1-1~bpo13+1_amd64.deb 48e8723ec165275ac89c3d710b3d55a0797cb0a8aa6ac6c2be9934950b3d882b 751476 exim4-daemon-heavy_4.100.1-1~bpo13+1_amd64.deb c1e5e5328824f26d240251857f8314d4bc68dc0133797dbcbdb457e3d9c8e334 1717284 exim4-daemon-light-dbgsym_4.100.1-1~bpo13+1_amd64.deb f422f3419ea700869a367284b63716249364933452500f140d481cb1c5ad9c30 689628 exim4-daemon-light_4.100.1-1~bpo13+1_amd64.deb 4b3167ca56b15bf0021a1159ad918bc7e6779053798bd523a5ebecd2f51e7af4 1844592 exim4-daemon-mod-dbgsym_4.100.1-1~bpo13+1_amd64.deb 087a354400ca1d870d38c2f02c6cf0b61c5eb9d39f51b1d155d7be06ed1b09be 758200 exim4-daemon-mod_4.100.1-1~bpo13+1_amd64.deb 5bc914e64087b44871cd6faee1665c21fec862e4c6f89087fd57812ea390c7ff 40140 exim4-dev_4.100.1-1~bpo13+1_amd64.deb abfeec2ed1826392f286071860edae81d32fbce31d7f957d0463daeb94ad07a6 14908 exim4-mod-cyrus-sasl-dbgsym_4.100.1-1~bpo13+1_amd64.deb 7ef656463a9996f75b108aeae8b4253e217974b2993fc02f65d699bca21038fb 6884 exim4-mod-cyrus-sasl_4.100.1-1~bpo13+1_amd64.deb d867aae611cac9c31985d74629a1d4d4cb0dd8f338523d4f1a66d790644fcc5d 23740 exim4-mod-gsasl-dbgsym_4.100.1-1~bpo13+1_amd64.deb e21a167434e9baf1d79791b6871d23ddcd44f3ab0af9becf5a1292121a0ac564 9692 exim4-mod-gsasl_4.100.1-1~bpo13+1_amd64.deb fd9b42d8966de112bb785ac2637169966bfb7445dc6002b2ccd98eed6a72a209 25608 exim4-mod-ldap-dbgsym_4.100.1-1~bpo13+1_amd64.deb bbda4628e06ffd001f576fac09766aacff94e8a6a69629e441d236a3e0a60197 11324 exim4-mod-ldap_4.100.1-1~bpo13+1_amd64.deb caa0c162b8da250e3a3e4ee49ee8d536d223a37f84da7c9826ba3d7464829bd0 22068 exim4-mod-mysql-dbgsym_4.100.1-1~bpo13+1_amd64.deb 2187256e6e71326be7a8374774e2ff5538af2a2811ff5e8e7f55c2f1d9c1b49c 5596 exim4-mod-mysql_4.100.1-1~bpo13+1_amd64.deb 8f49ef4a90b0aad80c6fc949b52a5f885e2a0cdb3cdd5e15d82ececda2251726 6468 exim4-mod-pam-dbgsym_4.100.1-1~bpo13+1_amd64.deb baafeeb6fb3a730b126d68fa5e6be2c974bdf9464af600405645bb40519f7b9b 3444 exim4-mod-pam_4.100.1-1~bpo13+1_amd64.deb 73dcd5793cd55ea68ae025f46a00e642de685e8aeceddef785febb7792d018cf 35048 exim4-mod-perl-dbgsym_4.100.1-1~bpo13+1_amd64.deb c53d081a495dec8b46b93d1bd603901611e083e6204c01cb490f2626c959e2b5 6108 exim4-mod-perl_4.100.1-1~bpo13+1_amd64.deb 7f4ff5754d14d4485b0a75a1dad369a4db78831856df0e10355f19326d9a3e30 13468 exim4-mod-postgresql-dbgsym_4.100.1-1~bpo13+1_amd64.deb f7c0143760078a8f1c0a8ff637c2aceaa1a49c54c3a476df87673e53b4965d2e 5632 exim4-mod-postgresql_4.100.1-1~bpo13+1_amd64.deb a4406b9e0b3ccf1f586cb622fe031d29a779f2acc3ea012e9565c435bf63c7a3 21164 exim4-mod-spf-dbgsym_4.100.1-1~bpo13+1_amd64.deb e39b13c91cde84a615f2dbeeb8f7523ad86a5ce5b21a0519bc9f9b724400f791 8036 exim4-mod-spf_4.100.1-1~bpo13+1_amd64.deb 08593f8a678ce9dfa899dcbfb81689b597b3a66a09638ec815d2bf90ad1dc59b 7204 exim4_4.100.1-1~bpo13+1_all.deb c9f6f782ca9312026c6294e14838cecb7779cd72829a506768dc98b5482d01c7 18028 exim4_4.100.1-1~bpo13+1_amd64.buildinfo 6a8ee73f6e8cadd26b2f91d49be14187ee52b31065a651d7c7b3fc8e49b78058 141324 eximon4-dbgsym_4.100.1-1~bpo13+1_amd64.deb 2d224ea290a88a1092108e7072528292282419cec1e25850423d3c6e2e6239fe 76160 eximon4_4.100.1-1~bpo13+1_amd64.deb Files: bba72766129c5a9a351d2317b122b57d 3489 mail standard exim4_4.100.1-1~bpo13+1.dsc 022d8ca602fd9b5a7c09dea3b9d2dd4b 463300 mail standard exim4_4.100.1-1~bpo13+1.debian.tar.xz 96a92b7a6b164f5b2e2e309863c26aae 189432 debug optional exim4-base-dbgsym_4.100.1-1~bpo13+1_amd64.deb be37e90eee37fe619a6cfb2f70365c27 1123612 mail optional exim4-base_4.100.1-1~bpo13+1_amd64.deb fc3c023199e5ffa95394ae152941b482 253240 mail optional exim4-config_4.100.1-1~bpo13+1_all.deb 8ef2d96fb0ce13cfd172658b93a6b0c0 1930268 debug optional exim4-daemon-heavy-dbgsym_4.100.1-1~bpo13+1_amd64.deb acde4e4621bb50151eaaa7b232d3929f 751476 mail optional exim4-daemon-heavy_4.100.1-1~bpo13+1_amd64.deb da1b9afa62b698447f7d9d86e823c4b4 1717284 debug optional exim4-daemon-light-dbgsym_4.100.1-1~bpo13+1_amd64.deb 899ec71ff224f3eca3e4a1ebd7cd01a8 689628 mail optional exim4-daemon-light_4.100.1-1~bpo13+1_amd64.deb ec3e441152e95a802b476888f546680c 1844592 debug optional exim4-daemon-mod-dbgsym_4.100.1-1~bpo13+1_amd64.deb ee17f55905b39b9da1fdd79c22a7b743 758200 mail optional exim4-daemon-mod_4.100.1-1~bpo13+1_amd64.deb 7cc4ed432b1a0e889ba8dd2901981d79 40140 mail optional exim4-dev_4.100.1-1~bpo13+1_amd64.deb 9652747d59a6be7b21c2cb9a7258d3d2 14908 debug optional exim4-mod-cyrus-sasl-dbgsym_4.100.1-1~bpo13+1_amd64.deb 46d9a153173305120c97c6cfa5f48875 6884 mail optional exim4-mod-cyrus-sasl_4.100.1-1~bpo13+1_amd64.deb 648d98e57f220d156227c85e53801096 23740 debug optional exim4-mod-gsasl-dbgsym_4.100.1-1~bpo13+1_amd64.deb 032af3ef25613970b91e16fce9cbf834 9692 mail optional exim4-mod-gsasl_4.100.1-1~bpo13+1_amd64.deb 2ac63093738142f958156f205a8ed3da 25608 debug optional exim4-mod-ldap-dbgsym_4.100.1-1~bpo13+1_amd64.deb 4e9dda2c87968743cc8b78d43a600fc9 11324 mail optional exim4-mod-ldap_4.100.1-1~bpo13+1_amd64.deb 8661e7f59c970ab0eaeeed4b975315e6 22068 debug optional exim4-mod-mysql-dbgsym_4.100.1-1~bpo13+1_amd64.deb d22238ae8da60efb1bd6f398b4cd76a7 5596 mail optional exim4-mod-mysql_4.100.1-1~bpo13+1_amd64.deb 47ca4300299c394ffd47687434c456b0 6468 debug optional exim4-mod-pam-dbgsym_4.100.1-1~bpo13+1_amd64.deb ef6f39e99fe45cd8d0e2f384be055687 3444 mail optional exim4-mod-pam_4.100.1-1~bpo13+1_amd64.deb 484df92f798533bffacf48fe9664374e 35048 debug optional exim4-mod-perl-dbgsym_4.100.1-1~bpo13+1_amd64.deb ecdb3a6fee4b9394d576a573f116b133 6108 mail optional exim4-mod-perl_4.100.1-1~bpo13+1_amd64.deb d0f77ccd3d29b5697ba17639a7f9ea29 13468 debug optional exim4-mod-postgresql-dbgsym_4.100.1-1~bpo13+1_amd64.deb 8b0517b4207dd4a4c63ff5a28f151117 5632 mail optional exim4-mod-postgresql_4.100.1-1~bpo13+1_amd64.deb 20b86979f6343d53ac5f781509a544e8 21164 debug optional exim4-mod-spf-dbgsym_4.100.1-1~bpo13+1_amd64.deb 50479a053c513c357272281c67b83419 8036 mail optional exim4-mod-spf_4.100.1-1~bpo13+1_amd64.deb 9ca71d0da398990a642976d9029df2f0 7204 mail optional exim4_4.100.1-1~bpo13+1_all.deb 0a6493cb5f0c63f3f82e07a3aae470e5 18028 mail standard exim4_4.100.1-1~bpo13+1_amd64.buildinfo 597703011fb15ad1590260c460ef6428 141324 debug optional eximon4-dbgsym_4.100.1-1~bpo13+1_amd64.deb e229a85c40a48dea438f1e758db15d63 76160 mail optional eximon4_4.100.1-1~bpo13+1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0uCSA5741Jbt9PpepU8BhUOCFIQFAmqyc1wACgkQpU8BhUOC FIQXZQ//RDFKDO0iW6Usd7hQSdK9shokw6KPKzFMd/wG8pf54GSnM8Gou0w6IMAI zc9vlzRmWqHsAXumqzaH/el+ZBXfN6PoWxQeiZW14HlL3ISV5N8wJHIqyUTFMS20 WiS8bOCv4p3WeyZzoTBCAh2OxoF2x7JBfTP8pN2Iqm39hqDeYLG4XW5nvtYi0otv Cb0lu0JZtNzgg7G5TJ5kOahQYPH+M80uF+OTmCXQTLO9PCxHO47aDlz1bx0QBNyq zD6CMO9TRUSStspfxdIlPEeKObzQHktQ2Y7m5/A0v/iMs+1O+y/Yzz3ngOEtLz5t 0nZQ1daSZz6Mk6vMnxGEh6986tV6JsSZlh/S4RUCKojnno5PpQHkgUKe5mqJBiz6 upSxlamZCcVYhQ+P/UesZSuhW3g8WVUIno1bacvXE6dZlZS3aH2iUadFNVU/IDTR nmHWPlyMrVVNvJn4/krgdFKw7ByX5flP3kZGSQdoEvpIPyORKhGr/sH7B2YRRQ+/ yCGQmHd+eiXo6asogdDClZZgxA9+nwZQr4L34l+xw7FwqoWShiT7IXIQqKf2W2Qz tVP7eWNkt/KZn2cJBcwzCAqHnPAhqrBXA7j9HRtw3ieLk90dV2Iq7DPATgqdQZQo vt9myxoqZr3xHKSSl/Z7TgBZRuRfSFTkf9Sc9MJbh/8G+OdzzgQ= =npLJ -----END PGP SIGNATURE-----
