[CLSA-2026:1790608989] exim: Fix of CVE-2026-94056
Type:
security
Severity:
Important
Release date:
2026-09-28 15:23:21 UTC
Description:
- CVE-2026-94056: repeat the PROXYv2 header read until all 16 octets have arrived, so the length field is never taken from uninitialised memory
CVEs fixed:
Updated packages:
  • exim-4.99.5-1.el8.tuxcare.els3.x86_64.rpm
    sha:704c58ee9f1ed1448fd4db965c2a2a9efee19546bc6d5e521a343a73a1692149
  • exim-greylist-4.99.5-1.el8.tuxcare.els3.x86_64.rpm
    sha:d16ae5dde664e6b409706c7b19a0bcd1799238063c4497aedd48ce2e0134cdf0
  • exim-mon-4.99.5-1.el8.tuxcare.els3.x86_64.rpm
    sha:b3a349ca93ff4e34b0ee7b13065b244d805c81b10764c1ebff34230a5c3ef97f
  • exim-mysql-4.99.5-1.el8.tuxcare.els3.x86_64.rpm
    sha:c95ef5f289fc4e0d88e7b44d4f736db19998ea62c1a4331d69b8cc6bd97016cf
  • exim-pgsql-4.99.5-1.el8.tuxcare.els3.x86_64.rpm
    sha:4229cd9f3209f6df871431cb8930e3cf43dcaed01bc659364c0a00c748b84aa3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.