-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 27 May 2026 18:52:26 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: s390x Version: 4.96-15+deb12u10 Distribution: bookworm-security Urgency: high Maintainer: s390x Build Daemon (zani) Changed-By: Andreas Metzler Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.96-15+deb12u10) bookworm-security; urgency=high . * Cherry-pick fix for EXIM-Security-2026-05-19.1 from 4.99.4. Security: PROXYv2 parser: reject PROXY frames whose declared payload length is too short for the claimed address family (12 bytes for TCPv4/0x11, 36 bytes for TCPv6/0x21). Previously a frame with family=0x21 and len=0 caused 16 bytes of uninitialized stack to be formatted as the sender's IPv6 address and disclosed in the SMTP greeting banner. Affects configurations with SUPPORT_PROXY and `hosts_proxy` set. Reported by Warisjeet Singh (sin99xx). Checksums-Sha1: ab5b4268d322613701596edbd1e056935fb9f2cf 124388 exim4-base-dbgsym_4.96-15+deb12u10_s390x.deb 43e9309a83d77bd2c839326eccbaeb1a5d9f63d8 1117092 exim4-base_4.96-15+deb12u10_s390x.deb a06861570151a01ef0885db7d726408fa1992d7b 1574956 exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_s390x.deb e41e4ca33d811e574c845fd21920338cf2ee3b5d 599908 exim4-daemon-heavy_4.96-15+deb12u10_s390x.deb d2b7c27b1330a93b080721bd16839f7409f94bcd 1382600 exim4-daemon-light-dbgsym_4.96-15+deb12u10_s390x.deb c7bc842598c5bc8523ed074ca3fd4a39e7774f74 547896 exim4-daemon-light_4.96-15+deb12u10_s390x.deb 8ffe507badb8e54180ff30a19cc68e8bcd0b1c47 39472 exim4-dev_4.96-15+deb12u10_s390x.deb f3d74b52b809c9164bd937f9ee6e3f174e55d8f4 11232 exim4_4.96-15+deb12u10_s390x-buildd.buildinfo 914b65bb64bb45cdfbfe3af0461dacf58d59f2f4 135400 eximon4-dbgsym_4.96-15+deb12u10_s390x.deb 02e72ab530cd786a43d67e390958073ac2837e68 72188 eximon4_4.96-15+deb12u10_s390x.deb Checksums-Sha256: 82448f6da03f5f4013cd7894c0216229b4c54f0a7174220dacb62a2c81895b53 124388 exim4-base-dbgsym_4.96-15+deb12u10_s390x.deb ae9a7b9783fa48ebe70844f275456aeaf4977c9801207bced1dcca26dff1cafa 1117092 exim4-base_4.96-15+deb12u10_s390x.deb ecd3b689bbffc2f56cfa13dd089c1ca51980f98163d65ff7f779e4385e0afe3a 1574956 exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_s390x.deb 76db4834e4ded116bdd3e3c38d0168869c09eb20b3f2be31733bbd621e61dc0e 599908 exim4-daemon-heavy_4.96-15+deb12u10_s390x.deb c686489facb3689c3260197953fff19ec491f8a4c4ee1393f58ef37b4073c9a1 1382600 exim4-daemon-light-dbgsym_4.96-15+deb12u10_s390x.deb 80d44565b551dae04e9beedda201ec5af0f90eaa4b89be9ab913f9e33ccf767b 547896 exim4-daemon-light_4.96-15+deb12u10_s390x.deb 124e1f17078456bb9c956cc116e0ae7785c40f3b250f03aac5137991740a4553 39472 exim4-dev_4.96-15+deb12u10_s390x.deb 8442b43ec324b5e5dd415124c0b81791c86c07e59a8656a065980ac73f2ba87e 11232 exim4_4.96-15+deb12u10_s390x-buildd.buildinfo 1811257b55d8cff3b0a74c65141065bb7433262335ae67caa47241b36c08cbf4 135400 eximon4-dbgsym_4.96-15+deb12u10_s390x.deb 0862fdb911bf9afd8e180703c85282aefe7849898924101f88bb50d299d968d4 72188 eximon4_4.96-15+deb12u10_s390x.deb Files: 5c0bbb520ccd53f93a63fb65ba04dd9f 124388 debug optional exim4-base-dbgsym_4.96-15+deb12u10_s390x.deb bfb8bd7580c6d9238564911f71e6f5ee 1117092 mail optional exim4-base_4.96-15+deb12u10_s390x.deb 33eda270dac0485ec8552416d124d474 1574956 debug optional exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_s390x.deb 2e5c02d2c4ececc9925c93b5d5178277 599908 mail optional exim4-daemon-heavy_4.96-15+deb12u10_s390x.deb b0a0e77fff72efcc6d2406ac6e68e6da 1382600 debug optional exim4-daemon-light-dbgsym_4.96-15+deb12u10_s390x.deb fa7dc9c76a52c0823f7f98057bd86dc0 547896 mail optional exim4-daemon-light_4.96-15+deb12u10_s390x.deb 35d7074ae47756566b3420014908ed87 39472 mail optional exim4-dev_4.96-15+deb12u10_s390x.deb 1a5479008c9899c081d9f8504277a4c1 11232 mail standard exim4_4.96-15+deb12u10_s390x-buildd.buildinfo 759d9e22ac09b2a5fe3d208e2efc7fe5 135400 debug optional eximon4-dbgsym_4.96-15+deb12u10_s390x.deb 844f37b345d2cd554eafa7ca8604e105 72188 mail optional eximon4_4.96-15+deb12u10_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmoYd6EACgkQkaCrxAR3 BY1NCBAAsP6hBnVghvC1Mins1+A3yo+ETrFPptRNTRV0P5saPl2I6jZHw0VHYF37 BhR503R5zygJ8BcBSArtrRXhMZm0UYHNblCkCpNP4yh0hwYooy2USMdyuyV4kqdu NgVe1FRlJb8R+b+rYJw6eX8QirrIMtlYRbvu6ZerPw6s57BNQume8Ddl3TFylvBu lz2aFko2rwQkZvbx0CwQ58Dw8PbOYycpsKZPhlYx+D40MVRM2RUDZiwJpKv7YeDK IprkdPL/rwkMBVzBbUc3llbroEqhKRdrR+G5OO+CjaGjW4fGXoWYd29VAY45fOKN uUSPPemXMo8pqqz11g/ckYxOMxwVDWV3VbxPH755IfXLgS42xH6hgRqcZ1abMT+2 nurzzSscZJrLg4WWRANWUzwLdHEVAi4O2xKqrt2fRXKx9I7rX12bdpUxAwrAcwr/ nxL5kF1z7oKAXjWvYx9iyPDcZFV21GhAo4dAveMHDJP0RNA5gIn+hod55D5wAwuv XJ2z2ryo+ZLxY6t2Z48TSA5TikiMNg6p9Ihwg/XU3tf2aNPal7osfaj9Bh3XEwYs gcNk2OHTVdVC/kjCrk6uQHU2ZTGVSJ8+OzBKiiBRHrwBvdMuNMoX7et3MdK4zczy Vv+sTCfwGkeVyluJbs4BUuuqcx8NuOaxBx6tlvWUT64cVI7meYo= =SOfq -----END PGP SIGNATURE-----