-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 23 Jul 2026 19:04:03 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: riscv64
Version: 4.98.2-1+deb13u4
Distribution: trixie-security
Urgency: high
Maintainer: riscv64 Build Daemon (rv-osuosl-02) <buildd_riscv64-rv-osuosl-02@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Changes:
 exim4 (4.98.2-1+deb13u4) trixie-security; urgency=high
 .
   * Fix two local privilege escalation issues.
     EXIM-Security-2026-06-22.1 (GCVE-25-2026-07-45-1)
     Using command-line arguments intended for transferring queue-name
     through an Exim execution chain, files outside the spool area can be
     accessed.  This can be used for a privilege escalation. CVE-2026-66140
     EXIM-Security-2026-06-22.3 (GCVE-25-2026-07-45-3)
     A local user having a .forward file can use a string-expansion there.
     With certain Exim configurations this can be used as a privilege
     escalation. CVE-2026-66141
Checksums-Sha1:
 d83a7d0e1fbf274b171a00e3d8b2805ec0233e82 131668 exim4-base-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 267c77c038cad3f1ed122d931cc33a3f359549e9 1142420 exim4-base_4.98.2-1+deb13u4_riscv64.deb
 9f9255eba095cc40f60bb03ca65f5463d6ac4c75 1618892 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 247c46247ef90d3eb6a18e100c2db33cbe292145 673416 exim4-daemon-heavy_4.98.2-1+deb13u4_riscv64.deb
 bc72667ed9ae623cefc6943bc19b1cb61acd506f 1427420 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 5d4ade1ea6022fecfd44e5325038c9491faa5407 614640 exim4-daemon-light_4.98.2-1+deb13u4_riscv64.deb
 94d1089171bb2680d1d0c14c32dd1e41db3ae5f1 36628 exim4-dev_4.98.2-1+deb13u4_riscv64.deb
 4dcc9efd61e8a1fbb0357e628d233c82c92f9135 11442 exim4_4.98.2-1+deb13u4_riscv64-buildd.buildinfo
 0aab1748a100824773b0d7d56c8a04edfdeb8d12 132072 eximon4-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 179e71e2960eace6ee899e7749cc9b323a86d2ee 71468 eximon4_4.98.2-1+deb13u4_riscv64.deb
Checksums-Sha256:
 62744a6685ce92c820942bdd00ec0ffa892d2409b6eb9658793ece4994cd977f 131668 exim4-base-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 db051be431f7e322233573802c1ed6fb1ebf764ed4df9f3cf0aabf41f7dcabd2 1142420 exim4-base_4.98.2-1+deb13u4_riscv64.deb
 a4925658e4e2690991db48bfccaac593c677b1d51d7ac0eb4c1623cc3cf745c6 1618892 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 491db69d7742d2d497b8aa8868d5b65ea014c682f46e539bb3a6939aaaddf365 673416 exim4-daemon-heavy_4.98.2-1+deb13u4_riscv64.deb
 5f8f9a23b511c87f4f81f0030ea0cb34ae6d1470365f52dceb2602502a7c6771 1427420 exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 5523bf54358b5d96200fabc1e469d69cf9bcc19e9297b446b7f22519be32b263 614640 exim4-daemon-light_4.98.2-1+deb13u4_riscv64.deb
 f32d0d51edb0b79f77b20c7f7ab78576d54e65f5e97d53119a5e80cefc1eb6fe 36628 exim4-dev_4.98.2-1+deb13u4_riscv64.deb
 b2b5816d9fa18141bbcda87d017c78c4e7a01532aaf64e80743ae1a44356bdb2 11442 exim4_4.98.2-1+deb13u4_riscv64-buildd.buildinfo
 cce5781531781829eb8089ed2f7e8e53246d889d772cfa9805e9046e63faef91 132072 eximon4-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 097c2ea99e73e05fd08c1212cb55623445e3dbadd6eda45e3e92ad9ffc74b8b7 71468 eximon4_4.98.2-1+deb13u4_riscv64.deb
Files:
 b53bf57e33036c58f45fbf69bd6a9cde 131668 debug optional exim4-base-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 fc01e977ed77ada807a83639731a91f0 1142420 mail optional exim4-base_4.98.2-1+deb13u4_riscv64.deb
 8a56af5dc96903ed27c83e5a21805598 1618892 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 a2cf6e028d01114fa3dd08019a334d32 673416 mail optional exim4-daemon-heavy_4.98.2-1+deb13u4_riscv64.deb
 4be3b78cfd77be72d2d33c0b7d23fd4b 1427420 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 91efd3c425723345497af24b532414f4 614640 mail optional exim4-daemon-light_4.98.2-1+deb13u4_riscv64.deb
 6b413012305016cb4ea15641c7d56b66 36628 mail optional exim4-dev_4.98.2-1+deb13u4_riscv64.deb
 5032117bd0d24df99842ade7dcc803be 11442 mail standard exim4_4.98.2-1+deb13u4_riscv64-buildd.buildinfo
 0221527b0405fbf9256cc1ede2c50b72 132072 debug optional eximon4-dbgsym_4.98.2-1+deb13u4_riscv64.deb
 6ff68b27caf50bfe4e71f955e977c118 71468 mail optional eximon4_4.98.2-1+deb13u4_riscv64.deb

-----BEGIN PGP SIGNATURE-----
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=tMbM
-----END PGP SIGNATURE-----