-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4615-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz June 05, 2026 https://wiki.debian.org/LTS - -------------------------------------------------------------------------
Package : exim4 Version : 4.94.2-7+deb11u6 CVE ID : CVE-2026-48840 Warisjeet Singh discovered that Exim, a mail transport agent, does not properly handle PROXY frames whose declared payload length is too short for the claimed address family, which may result in information disclosure in configurations with SUPPORT_PROXY and 'host_proxy' set. For Debian 11 bullseye, this problem has been fixed in version 4.94.2-7+deb11u6. We recommend that you upgrade your exim4 packages. For the detailed security status of exim4 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/exim4 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmoigaNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcACgkQlvysDTh7 WEcnvw//UUyHZNS6YCe3kg8JJo73fy+7Y62AUNtZowfIBeYft+yWJJU+8hVdAU21 CzgHh5qW7TwhQIikS7RWyBs2jX2NPcoPiwE/mlsR0Ep0LeCQDvz2cujrRoHNlIe4 1K3Na1ZEkgr0Nye5V4l77EhIkZu0OT5D8BloK7ncyZs9qBQsTlyCpW8BlQr1o45l 8oYVthoQoI3sCLm7h+NoPisiA6nxHJZhhKVTLvWX2QwUuUKbVjnrfSdJyIIZx6zP z7rYQKxcTD/9ShKBS7z7RvVAV3gI2uMY4RfyS3DtG5TZFXvvQ5Kp3svLCrpxDbi7 mitN7VxHsb/rmyfgaKYwrb7LOCxChalvmysVQIxOckuWGH0i0vr1BYWJQ/chH+WR WD4gsxUdoo6q512Q87W++/HQOaZT6R6L/mgDPOB8Bds26oXUCyvzhKAWMwvvWS5j jfb5myQ4urT5nmPzVEK5ZUq7jn+9/nijbqCiKvT+HtvrBGgb0elhQ3s/vD+Zq3ru EinOWj42Ajz0F4+Xe+FNcbHDvI8VtBVTGgE+W4f2JX0e9G2YBOQ5+EKPbtL086hK 0UWmYX5HMR9LdVDPEG2rojHNHrjZsB1YtAViPmyNpL/FqakmOQ47f9RkMFMsFzAC vto0M3Rsf6bTHC6Nin1JngYsLC3d+/13y4lzIZh3cW2pmJ3jRyw= =VO/y -----END PGP SIGNATURE-----
