-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 27 May 2026 18:52:26 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: mipsel Version: 4.96-15+deb12u10 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Andreas Metzler Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Changes: exim4 (4.96-15+deb12u10) bookworm-security; urgency=high . * Cherry-pick fix for EXIM-Security-2026-05-19.1 from 4.99.4. Security: PROXYv2 parser: reject PROXY frames whose declared payload length is too short for the claimed address family (12 bytes for TCPv4/0x11, 36 bytes for TCPv6/0x21). Previously a frame with family=0x21 and len=0 caused 16 bytes of uninitialized stack to be formatted as the sender's IPv6 address and disclosed in the SMTP greeting banner. Affects configurations with SUPPORT_PROXY and `hosts_proxy` set. Reported by Warisjeet Singh (sin99xx). Checksums-Sha1: 92ca1aadd95fa5fc28a60ab0c16536f597e3fd61 130396 exim4-base-dbgsym_4.96-15+deb12u10_mipsel.deb 6d753fe5edba2ab2c007bec66e69bdec58708ba4 1117960 exim4-base_4.96-15+deb12u10_mipsel.deb fec87bb81de96d88f4ddbb2443bb8660a4bd60a1 1648732 exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_mipsel.deb e7551c9f64be67f041c9b497273113ce401c0f8c 590976 exim4-daemon-heavy_4.96-15+deb12u10_mipsel.deb b6420afe788a61e218509f02b48bd9152a703c16 1450368 exim4-daemon-light-dbgsym_4.96-15+deb12u10_mipsel.deb 9b8fe4d3809d45a174842c4c608005cb78eff79d 539016 exim4-daemon-light_4.96-15+deb12u10_mipsel.deb 395429a04804efb5e1b02daddcdaf8a8dbed0f52 39472 exim4-dev_4.96-15+deb12u10_mipsel.deb 8c7826abef6fafae45b9395828679910441934ef 11147 exim4_4.96-15+deb12u10_mipsel-buildd.buildinfo 7fb3a498a80032673faf15f59e7cfa987baa55e1 140608 eximon4-dbgsym_4.96-15+deb12u10_mipsel.deb adf32d42d2295d2c6e0988a489a54fe097964f82 71816 eximon4_4.96-15+deb12u10_mipsel.deb Checksums-Sha256: 6124b895aafec91d5e78821edd4ec3d618cf3cfb802f92463d1baaef0c8fece6 130396 exim4-base-dbgsym_4.96-15+deb12u10_mipsel.deb 848b2f6c110d65e9d9c0e4c9f06cc36f5ed26b28601628fcbb4ff6b51f740a10 1117960 exim4-base_4.96-15+deb12u10_mipsel.deb 2830089d49f79ca88b17ba74b9c350027a8bde87546ea9cfdfae82ac62f68b52 1648732 exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_mipsel.deb 85f97a14b296dec0dfe60a829504295c8c3742290fa72e8c8deaba8d794b0b73 590976 exim4-daemon-heavy_4.96-15+deb12u10_mipsel.deb b8a77443fe080bac079b3fdd1a9f5d1b3cea897b4d470b37df7b2089115c8f2f 1450368 exim4-daemon-light-dbgsym_4.96-15+deb12u10_mipsel.deb cddda1896e6397ec89e052c7b94bdaa550106e790df6bc5b8e313f389f3f86db 539016 exim4-daemon-light_4.96-15+deb12u10_mipsel.deb af8ff18fbdfc1270e7cee0e5d70c03fa4c3fe853855b9b1d0f805a4cb3f7b568 39472 exim4-dev_4.96-15+deb12u10_mipsel.deb 07282c977f06e40a0e0e40dddc4fea8d77a218c6220f26774a3306421cd86acf 11147 exim4_4.96-15+deb12u10_mipsel-buildd.buildinfo 5cc82130ebb81c2edcb0ccfc11668f0d36f88d31802fd54af1c4907e3e6f026d 140608 eximon4-dbgsym_4.96-15+deb12u10_mipsel.deb 4159bda10f7fec4b0372fcad1aaa853242a4e9f76d95c1faa1e052385760253e 71816 eximon4_4.96-15+deb12u10_mipsel.deb Files: 107282b197a9ccea8b8c916b17a2a753 130396 debug optional exim4-base-dbgsym_4.96-15+deb12u10_mipsel.deb 0661c2977a2ba378444a597a7a15ada0 1117960 mail optional exim4-base_4.96-15+deb12u10_mipsel.deb 9bb57fd8556f715dc3ea07203d70c242 1648732 debug optional exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_mipsel.deb 7ac3a4b18c71f2994c3489123df2f446 590976 mail optional exim4-daemon-heavy_4.96-15+deb12u10_mipsel.deb 32c5e886bb5cd11968eae07ece9942aa 1450368 debug optional exim4-daemon-light-dbgsym_4.96-15+deb12u10_mipsel.deb 2d42e70ae3899db9a6c7c7d18a28fd42 539016 mail optional exim4-daemon-light_4.96-15+deb12u10_mipsel.deb 985eb162973ae63c516b333c124256ea 39472 mail optional exim4-dev_4.96-15+deb12u10_mipsel.deb c58ccccd5302dba9a23308872742793c 11147 mail standard exim4_4.96-15+deb12u10_mipsel-buildd.buildinfo 1e9f07a993a1ad80d5d7d60f5e9b161a 140608 debug optional eximon4-dbgsym_4.96-15+deb12u10_mipsel.deb afa92cc99b3e5fdc28bcd91a909b4278 71816 mail optional eximon4_4.96-15+deb12u10_mipsel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4ZxaH3zEHAF/GhnCHrk2gTKeWggFAmoYeLUACgkQHrk2gTKe WghJRxAAq6xYwMq+5j8yQHVBzK5Fy8NTEojcskDtoyoLtD9X7uJkok+5IBamLCMg 7S/jTjIPpWgztfiiTx2IMgCZRwFj60xuMkaaqQ7fkfrPmz+PHjse4YjytZWPaSPl nE7RUoAVBw18krTEIHPbbDFq8x3O49Q27PTxGh7qQGRD1jeNQ937WKJ4THWFZuO5 RilokD0Oj/0PY3CsEtNAOQC34lqEBCNw7UIzKWVuCUCj36zcqSeqvv8tlwOwFOOf RHmttOJIWkY2rGduNBMK8eTzo93VjPBLt2/wLLNV4r/DlV/ao9WImJEAZs0VvHLK bv0M1zEDvqj7nJ+PktEZkDlCiCdWfU9B57XHDZOzTRSGYw4RxuNFwzd9oqG2dT7r Ohlse6Y70DBoSQxTxmlR4umMzyt8WE+JCz3DKQwIliSwExTxPD2W3LGcZY2hK1zq oNo3Ly83DuviVnTEBBrxfCSmgXJPSRHV+EI3I+kUwXXk1lUZTnYEmf65rVthDs2+ q/t5/qSmvGFPH52JOs+L2K+Fdi928MDm2bdU0uELwGApQKTJ5sIKgsAdb01xbrN4 PiPNVThNaRUOZG0MMlg6eK76GlllQkBpoOYznQLNtVHLFInDZ3w4ockm0onGFxtp Ph94La9NXTIcPBjHE+hUoYViz9PZgD+6jYrMhXo/jd1WYIOA9bQ= =FE36 -----END PGP SIGNATURE-----