[CLSA-2026:1788260209] exim: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-01 10:57:01 UTC
Description:
- Rebuilt with rebrand to TuxCare ELS - CVE-2026-66140: fixed upstream in 4.99.5 - restrict names permitted for named-queues - CVE-2026-66141: fixed upstream in 4.99.5 - do not expand local_part from a .forward file in a pipe transport under force_command
Updated packages:
  • exim-4.99.5-1.el8.tuxcare.els1.x86_64.rpm
    sha:a42a25179f453565b9280b8f613e6ad6c5168dd3f6507784f0371a977f393e8f
  • exim-greylist-4.99.5-1.el8.tuxcare.els1.x86_64.rpm
    sha:75f447f654baf68dc44376a44c1a0da72ff026870d43cd344e53079ae00294b2
  • exim-mon-4.99.5-1.el8.tuxcare.els1.x86_64.rpm
    sha:d334a164379c55dbee00a0b4bfe276d8a0be0c99fc8b5198da40aa5fc96e280b
  • exim-mysql-4.99.5-1.el8.tuxcare.els1.x86_64.rpm
    sha:b6754701cf8b047916bcb851a0e6683a3880c47f9e0eba8e41799381cbb6de34
  • exim-pgsql-4.99.5-1.el8.tuxcare.els1.x86_64.rpm
    sha:de125ba7488acc1a056f861b51d29c73311591b8596d8477f56ca21c40e93fc9
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.