[CLSA-2026:1787322589] exim: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-08-21 14:30:01 UTC
Description:
- CVE-2026-66140: fix directory traversal via mishandled queue-name arguments (local privilege escalation) - CVE-2026-66141: fix .forward privilege escalation via mishandled force_command for a pipe transport
Updated packages:
  • exim-4.97.1-1.el7.tuxcare.els4.x86_64.rpm
    sha:f376bb962be4b4d96c351effd899ab90956f3a5939c77087f4f55efd15a6acb1
  • exim-greylist-4.97.1-1.el7.tuxcare.els4.x86_64.rpm
    sha:62f70cac6a29c9f27625c00e205e7b8cdc6476735b096623bd904fc346848b46
  • exim-mon-4.97.1-1.el7.tuxcare.els4.x86_64.rpm
    sha:6e494ef375da2c142c379adfd0edb60eb4f8a802758abb67c96cb5f4b86995f0
  • exim-mysql-4.97.1-1.el7.tuxcare.els4.x86_64.rpm
    sha:395cf588402c5136f7361e6bf03872a5dfdc013dc037ec9d9d2e19e84f309fea
  • exim-pgsql-4.97.1-1.el7.tuxcare.els4.x86_64.rpm
    sha:88abd55d5e8074045f33f641a508e7e4a51fcdfb66ab1287aac902164322dea4
  • exim-sysvinit-4.97.1-1.el7.tuxcare.els4.noarch.rpm
    sha:9d997698da906617ba4e447d7e7693d9f677c4ceefbac0972466a9a2137c2772
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.