-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 27 May 2026 18:52:26 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: i386 Version: 4.96-15+deb12u10 Distribution: bookworm-security Urgency: high Maintainer: all / amd64 / i386 Build Daemon (x86-conova-02) Changed-By: Andreas Metzler Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.96-15+deb12u10) bookworm-security; urgency=high . * Cherry-pick fix for EXIM-Security-2026-05-19.1 from 4.99.4. Security: PROXYv2 parser: reject PROXY frames whose declared payload length is too short for the claimed address family (12 bytes for TCPv4/0x11, 36 bytes for TCPv6/0x21). Previously a frame with family=0x21 and len=0 caused 16 bytes of uninitialized stack to be formatted as the sender's IPv6 address and disclosed in the SMTP greeting banner. Affects configurations with SUPPORT_PROXY and `hosts_proxy` set. Reported by Warisjeet Singh (sin99xx). Checksums-Sha1: b13ab634ca5661bccae0589e6b2c8cff4f2a8446 128008 exim4-base-dbgsym_4.96-15+deb12u10_i386.deb c6739954abb7058af3c4fba81f5a328fd308016b 1119248 exim4-base_4.96-15+deb12u10_i386.deb 506540a7ffb139ec7eedd3b0b6253bfefe8ebf45 1458156 exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_i386.deb ec4bf636b8bcacab3a8ff0c7ad33fda73fe96c25 684520 exim4-daemon-heavy_4.96-15+deb12u10_i386.deb db851be70ad803590ee93867faf3d68d684b1532 1282624 exim4-daemon-light-dbgsym_4.96-15+deb12u10_i386.deb acffda27ec8e23cca35878569013591ecc1752aa 624352 exim4-daemon-light_4.96-15+deb12u10_i386.deb a8369a7487843983dceef2ee1a39a1f9ffd1fd1f 39472 exim4-dev_4.96-15+deb12u10_i386.deb 361369975e85e9d70d6ef3435261a6be32f4d7b9 11248 exim4_4.96-15+deb12u10_i386-buildd.buildinfo 14d5d2941a0e94611c7112b1ee72187faf7f6722 125508 eximon4-dbgsym_4.96-15+deb12u10_i386.deb 574aac8daedec6ca666de5c4311776fa92821b8d 75696 eximon4_4.96-15+deb12u10_i386.deb Checksums-Sha256: 29247c3819ab3e7cddab413ffe3f571901967fe0e745c9697f2d7a9f272c1840 128008 exim4-base-dbgsym_4.96-15+deb12u10_i386.deb 63585f3ab8049598f7339df61a95cdbd54aad4a5bc9ba8805bf127591cfac160 1119248 exim4-base_4.96-15+deb12u10_i386.deb 4beb64ef1533dd8f550c339059a1421c23566b547866d39b80478be515b71513 1458156 exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_i386.deb 9d75526dc939da6d135ba1ca30f20e11c2fc0e1e2db8c00c06b30dc2ae80b924 684520 exim4-daemon-heavy_4.96-15+deb12u10_i386.deb 8f88083f91527f8fa560ff8c64420d154b51cfc029cfa448e057e7dc5fea24ad 1282624 exim4-daemon-light-dbgsym_4.96-15+deb12u10_i386.deb ac9927f0a78ac1231e79c88021af51af1d735cca81be0653ff022b1fcd3b5026 624352 exim4-daemon-light_4.96-15+deb12u10_i386.deb 26e937879ec7d6c68cd1aa1a9af876d9a7d1d7a6e31eb33aa01d6d3e1c2398b0 39472 exim4-dev_4.96-15+deb12u10_i386.deb ff580828acdd33fc8ace9897b0def7fbdcbe66c92260d2f355aacb0f2cc9f9d1 11248 exim4_4.96-15+deb12u10_i386-buildd.buildinfo 34a36799746a04d27e225625c2f44c5f94cd99cc12a4d8718ff2f6a8a9f7d1e4 125508 eximon4-dbgsym_4.96-15+deb12u10_i386.deb 72e431167b76c95d49a083d5ce7496fb0088f1df3f517364026edb8d7ddbd3fd 75696 eximon4_4.96-15+deb12u10_i386.deb Files: 7041746ffe968c3bbbb2fd71d165d35e 128008 debug optional exim4-base-dbgsym_4.96-15+deb12u10_i386.deb f2671f7cb25e658c34fac0cbaff45463 1119248 mail optional exim4-base_4.96-15+deb12u10_i386.deb c0101e017fbc0fb2ae1346b36d7bafae 1458156 debug optional exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_i386.deb aee644b8ed89e0ce38f95eb37e142603 684520 mail optional exim4-daemon-heavy_4.96-15+deb12u10_i386.deb 6a3ea054df5c65b5b670e96a2d8a9d0a 1282624 debug optional exim4-daemon-light-dbgsym_4.96-15+deb12u10_i386.deb 8847265a7e4f7f42e10d0eceddef7fda 624352 mail optional exim4-daemon-light_4.96-15+deb12u10_i386.deb bc0c6295af8482333c0021027404b1b1 39472 mail optional exim4-dev_4.96-15+deb12u10_i386.deb 878ec8290873a07d1fcc04a2dc5ca600 11248 mail standard exim4_4.96-15+deb12u10_i386-buildd.buildinfo 6932d7abbce1855f49d7c810bfdffb6b 125508 debug optional eximon4-dbgsym_4.96-15+deb12u10_i386.deb 9d8d60b97a94f5f390a2011a4a31f167 75696 mail optional eximon4_4.96-15+deb12u10_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+i/sCsF3puL4e7qIGNGWmfrqILEFAmoYeCMACgkQGNGWmfrq ILFoVw//d0cxFcD0CnTZtNrTW5Tdce6a8lapDCnXXJ4HpAFIBDwv0+dPtaGQLKsC I2qDwAx+xoHFL0h8PMUG4POxcawIm0AWfbNIf4GK00gvW5LORc4HxxX6WPrpAq7b nhG6ixkiXzN8gwI1xsnStNv3aYfCDi4h356m8UpsUQz3A/G9x1m+rGKPd5WXQPc+ HL+mOavSA12eJJoldOVpUYJhLYTko8ST8Q4hN+K5ful+9wwFyupXGWS4/7jn6c3L 2t5BJRnZKTGx7FptSHUiBgBv4wNHQSugwuCx6T9P7wKGTweHm+o7UdhrKz0LLyvm uWcplGeWI1rZqbGBUlVnvW1O7ZKT4e/co/86iHWdeon9Ka/m3xN9fDBnWRqcrM9e wOZzi+2Axf0qUsoChtVTpTHL8qSgqGFPhKe5f8iYATBS1wIQC1tfPkSjpw3ecHGq SimADHmAIufH3kpsxWmFxUcSdgeHxRV5ACPigI5YXokJSimDr2pMY0L1EccW7t51 KVPw0ltFpX2SFfc8SVetkFMj21lWatTPu+DOKEuCvBPZPsYNFpFH6Tdvf11vcyGE MUhQc3/Gk7H8iG8fBfRuNP/eKTMLtHrmcLAKrWzAzxkQfZGmot04FXZQVR7Y2ETg 1CVK9S6257zEV27RdC971Wjn/8weZuSVAJEQhzECKDzsX9w5lF4= =eCQg -----END PGP SIGNATURE-----