Release date:
2026-09-24 23:01:11 UTC
Description:
- CVE-2026-94054: in proxy_protocol_setup(), size the copy of the PROXY v1
header line by its own NUL-terminated length instead of the raw byte count
read from the socket, so the following memchr() cannot read past the
allocation and the CR terminator cannot be written outside it
Updated packages:
-
exim-4.99.5-1.el8.tuxcare.els2.x86_64.rpm
sha:b3359e8ec7ba3fc11f628b1716e324d7008704bc1b0409e6fd725a9c9196a71c
-
exim-greylist-4.99.5-1.el8.tuxcare.els2.x86_64.rpm
sha:e7c46f2586929b37f490ba9c9982192ca48f54e5f5444cf09bddad6d3bd54ce9
-
exim-mon-4.99.5-1.el8.tuxcare.els2.x86_64.rpm
sha:53b88a2cc5524da2dc5d765a166bc93e82e22ee2eb3d062ceec12b93ed39bd31
-
exim-mysql-4.99.5-1.el8.tuxcare.els2.x86_64.rpm
sha:d4c84d87440cc75070fe6a972aade652f95d60b100d5ceddc10374edf5c8c95f
-
exim-pgsql-4.99.5-1.el8.tuxcare.els2.x86_64.rpm
sha:6170f9abf2dc86bbf5a33be4a6ffbaafb8aba2935ffaa74cdb7cfc5ae08ee062
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
