[CLSA-2026:1787230875] exim: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-08-22 10:43:04 UTC
Description:
- CVE-2026-66140: restrict named-queue names and require admin for -MC* command-line options - CVE-2026-66141: do not expand local_part in a pipe transport under force_command
CVEs fixed:
Updated packages:
  • exim-4.92.3-3.el6.tuxcare.els9.x86_64.rpm
    sha:c6eacb9c78141243ad0e813855dfc3bc6f016506bec0979be782e5631aa97675
  • exim-greylist-4.92.3-3.el6.tuxcare.els9.x86_64.rpm
    sha:b690ddfcfb54553b5ff3e37bb95fed9e3c74c1e0cfe10697895a077b39fbfbf3
  • exim-mon-4.92.3-3.el6.tuxcare.els9.x86_64.rpm
    sha:3d3499656d6794bcac837c1acd25686623906ceb1ad6a3f7f979692269706c64
  • exim-mysql-4.92.3-3.el6.tuxcare.els9.x86_64.rpm
    sha:dff0b7de7c33005462bf02765e9954fa274a5163f32bdeae4ecfd9761b3cdda5
  • exim-pgsql-4.92.3-3.el6.tuxcare.els9.x86_64.rpm
    sha:81a16d7148ea49fac241780fe024b505ba2ab4afce997468dc9376971e628246
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.