-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 27 May 2026 18:58:40 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: s390x Version: 4.98.2-1+deb13u3 Distribution: trixie-security Urgency: high Maintainer: s390x Build Daemon (ziehrer) Changed-By: Andreas Metzler Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.98.2-1+deb13u3) trixie-security; urgency=high . * Cherry-pick fix for EXIM-Security-2026-05-19.1 from 4.99.4. Security: PROXYv2 parser: reject PROXY frames whose declared payload length is too short for the claimed address family (12 bytes for TCPv4/0x11, 36 bytes for TCPv6/0x21). Previously a frame with family=0x21 and len=0 caused 16 bytes of uninitialized stack to be formatted as the sender's IPv6 address and disclosed in the SMTP greeting banner. Affects configurations with SUPPORT_PROXY and `hosts_proxy` set. Reported by Warisjeet Singh (sin99xx). Checksums-Sha1: 1b31e38d2d5ef57a101a84db8d378b87756ab9c6 128556 exim4-base-dbgsym_4.98.2-1+deb13u3_s390x.deb ef57993c056faa6de41725f4724361e6a73b66a0 1141804 exim4-base_4.98.2-1+deb13u3_s390x.deb 1e7a1a0000da480284872ba5a52dbc812e8d6d71 1692080 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u3_s390x.deb 20edcba669696652a6fc56404116b723d9628c10 668448 exim4-daemon-heavy_4.98.2-1+deb13u3_s390x.deb d2c005c641126ca24a6126764dd32afc182a5e57 1491628 exim4-daemon-light-dbgsym_4.98.2-1+deb13u3_s390x.deb 881f8f72476655df742cebe3b115ba2d8ca71dfa 610996 exim4-daemon-light_4.98.2-1+deb13u3_s390x.deb 277fc0abea8b97a387157eb514f178b6165e1b05 36400 exim4-dev_4.98.2-1+deb13u3_s390x.deb 229b23cdf93566be2ea61d2651a7601dbff5c0a1 11186 exim4_4.98.2-1+deb13u3_s390x-buildd.buildinfo 2081ce3380c6e204f925b937f03aae3ad119f36b 140080 eximon4-dbgsym_4.98.2-1+deb13u3_s390x.deb f51e51ce52fba1d96d715cf45d07c0f161f385d8 72440 eximon4_4.98.2-1+deb13u3_s390x.deb Checksums-Sha256: e683add0d69cad454a9bca02dff9151b84c4714f5401e8a73c954248ac88bba1 128556 exim4-base-dbgsym_4.98.2-1+deb13u3_s390x.deb 940538d9c67c711b21a6d15cf821da4ab30d4ecd9c01304a04cb680241a0b5ba 1141804 exim4-base_4.98.2-1+deb13u3_s390x.deb d7bcd1e8b7c347bc7bfe65068dede3fbe3ab93c4f987e8aebe9f1ab4d5342819 1692080 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u3_s390x.deb 19f0a26386944e3571a107b48d6aae0de644ec6c8b32a5c15ce7e8ab7b4f1e43 668448 exim4-daemon-heavy_4.98.2-1+deb13u3_s390x.deb 40d38baa94199d717e0756a81aaf8567fafa4ab7e50cdfc0b907c07d605486ca 1491628 exim4-daemon-light-dbgsym_4.98.2-1+deb13u3_s390x.deb d9b73fd9d8547ae2b48e7ec08b5719fa4410906ca9175818e675d7b9b884991f 610996 exim4-daemon-light_4.98.2-1+deb13u3_s390x.deb c8ad5704bcacae9b912074f2d48990fc9107ad577b8f31e8a5d0754ffa1abed1 36400 exim4-dev_4.98.2-1+deb13u3_s390x.deb bbfa5ddbc4467fc056af52ede75263546af4485b6ec684d2d7dc42d590dbf3a3 11186 exim4_4.98.2-1+deb13u3_s390x-buildd.buildinfo e8677bc54efab77e08f04b692f568200b3d1adc183c8b2c32354c29bc1ff232d 140080 eximon4-dbgsym_4.98.2-1+deb13u3_s390x.deb ec09f0b31b3c127591b2f1e44860e137c5db61462f0533ffdcb772fc69f345f1 72440 eximon4_4.98.2-1+deb13u3_s390x.deb Files: dd5ab3aa9092784b2aa4bd8bf28a203c 128556 debug optional exim4-base-dbgsym_4.98.2-1+deb13u3_s390x.deb a1c910b86f6bd214f41a59b70c53e7d5 1141804 mail optional exim4-base_4.98.2-1+deb13u3_s390x.deb 2470b58a5aeb5607136b4323d711ae33 1692080 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u3_s390x.deb e1f330a168c12d5cc012cb805fa9b736 668448 mail optional exim4-daemon-heavy_4.98.2-1+deb13u3_s390x.deb 7e71a257c04d1acd3ef8d35901540626 1491628 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u3_s390x.deb 3aad156b8f49e623746aa4e55eec403f 610996 mail optional exim4-daemon-light_4.98.2-1+deb13u3_s390x.deb ef7d21186da068b760593a964cf20449 36400 mail optional exim4-dev_4.98.2-1+deb13u3_s390x.deb adcb26ae5fcd1f4bd069177b0d58ef0c 11186 mail standard exim4_4.98.2-1+deb13u3_s390x-buildd.buildinfo dd7b4e52ae26147e9b164c6be1973b6a 140080 debug optional eximon4-dbgsym_4.98.2-1+deb13u3_s390x.deb 9b7ecf9a49d6fb30ac3a85cc05fc45cd 72440 mail optional eximon4_4.98.2-1+deb13u3_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEl0BM/nR+Oj597wRWMWUFebkHnoQFAmoYd8wACgkQMWUFebkH noSQ9Q//d6g3RcsQGAUZNNDgMWNBlosordGzy0BWVULVoM8iEaczH9jCUy2YmYuw B7wnji1v5RRSJLOZkv0Imvrb9oivpoT5GDLz9ql99aGl0nsviuXPa4s/t8IUpbPP m/z4F3sJdrR6YkI8rPwl84Oo81imG2JKUqcGMfXZkZYxIWsKuW769KR3HrTaqCQP TWU74TpPfw+jQPBgvm0/hHQRup9JR9lJG93KHlQEd0lbjIWLvlU8e1v/0N35rakd vgmLXvOBJsiCnz//4Ik8VqJ1ZS4uCVz9/8XJ8J1QjjvPhbPiTN3k6S3z0ltGEeWW k4H7OqlZYS5aPvDC/1r1c2+9t8oKssAv2ouSUmQTXqPNwpEcYV0JmJsEC+w+M6i4 VZdTnqecq5P4Cd8kYHYG2YarSYdmmhHniCIFNss63m1YkSI7s/9pM+EdKWdH1Y0w zONw8rSUBs3uBGNm7sGK3ZAhNCNBBraSXAiF88vs+omM+lFE0J6i9MTez7s3ABTq xRV99L6hP1HYr/rQkT6jq//rblrvt2LBHK6vLopcMUB7QOl6IqVUHdiZqpB9QOFf 7AH+d47x4Cnt07dWU99qOoIxY/ORdIw5dRZJavkZs7SLsN/DkesgdCp81m0rCvyI zKBQzniJESIeh1x1McJ/iJipoF1ke1y2oj9YtwRtat2eEM/VkMg= =Auyv -----END PGP SIGNATURE-----