Release date:
2026-09-24 23:01:08 UTC
Description:
- CVE-2026-94054: in proxy_protocol_setup(), size the copy of the PROXY v1
header line by its own NUL-terminated length instead of the raw byte count
read from the socket, so the following memchr() cannot read past the
allocation and the CR terminator cannot be written outside it
Updated packages:
-
exim-4.99.5-1.el8.tuxcare.els2.x86_64.rpm
sha:e3b9c1d1eaa2f7adeb8618d1904ae2774f6a76d96d757340fdcdca3c72ea606b
-
exim-greylist-4.99.5-1.el8.tuxcare.els2.x86_64.rpm
sha:24795a16ca52324d3ed020ea050ba99c3d0d6d2f1ebe46425722cbbf11a6504e
-
exim-mon-4.99.5-1.el8.tuxcare.els2.x86_64.rpm
sha:8c89349d1b5580a61a29c5338123186910384d3a773ee3f57db0113463fba581
-
exim-mysql-4.99.5-1.el8.tuxcare.els2.x86_64.rpm
sha:f828d10eb9d38b980adb65f7fdb5a233e0b2447c9d064c74e1e64e18b39362fa
-
exim-pgsql-4.99.5-1.el8.tuxcare.els2.x86_64.rpm
sha:c9ed4ceea6d28e8d4a5d1f0261b2e17ddfff4120aee5ed8545b7ae127bee6cdb
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
