[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index] [SECURITY] [DSA 6400-1] exim4 security update To: debian-security-announce@lists.debian.org Subject: [SECURITY] [DSA 6400-1] exim4 security update From: Salvatore Bonaccorso <carnil@debian.org> Date: Fri, 24 Jul 2026 21:41:25 +0000 Message-id: <[🔎] E1wnNe1-000000073xl-0T37@seger.debian.org> Reply-to: debian-security-announce-request@lists.debian.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-6400-1 security@debian.org https://www.debian.org/security/ Salvatore Bonaccorso July 24, 2026 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : exim4 CVE ID : CVE-2026-66140 CVE-2026-66141 Two vulnerabilities were discovered in Exim, a mail transport agent, which may result in privilege escalation for a local attacker. For the stable distribution (trixie), these problems have been fixed in version 4.98.2-1+deb13u4. We recommend that you upgrade your exim4 packages. For the detailed security status of exim4 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/exim4 Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmpj24hfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0QPMg//VAIzX3JllP+BeHD4LHPfuFE8algZyoZar4pM5PaYO7ygb0Y4S15lXjfh fc8JZe35P3bYgzV1KHFDjWoX0zkFsaMc3IfQx05xj5YybtGXKIY+fN31CnJbi7yc zNwFQDl7FBLTrOrCFRIG/QUMo7MKAyhM+9Hq+wiED8uqjnTwOXX6gvSEMTgHWsqG R6DV8gLTMk5JrIFy3sPY+ETk4mXEqZv1W3QGsqNneUhkt9cQPGwngTK6rROZtgzf 1z+1XU0fgoIbI5dz1JvYzLUMjN5rD/Zhvw3Cqb+2s9D2YDcX4aPrItKye1JMs9Kq DVktxHV23WSvWaRhDRt0ggLZ6XTzvDHkjfNQnqRRiQu2g+U6gVvVGHwyZ00kQdRW Iiil0rNhEd6ORMsLV5BOAmkvCqWSRkwJqXl6sRv2rJf6W3S3oZ3PRcx8KVJk5mzR FNlVuunDpdWDbWGN4G3ZCPSVJTbEn+GRii3o8cqwM7VSHNtPIqUPArmfx2hfho8Q 4KhqnawT8NsbYnRLNbTRdqExhVdFFdVhdVqNw3rTlyIw68ZGdgBtmdtB85F5C5pT RTwvY3eBSGmV6s936f0wQkdMSERIp60IGT4jf9x5TP0UZ0fIxRpQmchTBYyfVKm8 T14PxonwEmp0LHt5TaIt0BknwKLhpt9bxeNXyPz+X5kP+2vtpfY= =goUb -----END PGP SIGNATURE----- Reply to: debian-security-announce@lists.debian.org Salvatore Bonaccorso (on-list) Salvatore Bonaccorso (off-list) Prev by Date: [SECURITY] [DSA 6399-1] wordpress security update Previous by thread: [SECURITY] [DSA 6399-1] wordpress security update Index(es): Date Thread