[CLSA-2026:1790609038] exim: Fix of CVE-2026-94056
Type:
security
Severity:
Important
Release date:
2026-09-28 15:24:09 UTC
Description:
- CVE-2026-94056: repeat the PROXYv2 header read until all 16 octets have arrived, so the length field is never taken from uninitialised memory
CVEs fixed:
Updated packages:
  • exim-4.99.5-1.el8.tuxcare.els3.x86_64.rpm
    sha:7d7447c3257938eeb1387e57522c208bdf78d382372ca498d7cb03cf7f7faed2
  • exim-greylist-4.99.5-1.el8.tuxcare.els3.x86_64.rpm
    sha:a631ece4b8ebf87b37fd01cfe42e800412b0d84120fc49cc8e1eecb29ae878d4
  • exim-mon-4.99.5-1.el8.tuxcare.els3.x86_64.rpm
    sha:e52cb35a217c7e3069dae14ba6d9a3360881b2956e85cd985331917e7c27f18d
  • exim-mysql-4.99.5-1.el8.tuxcare.els3.x86_64.rpm
    sha:0c44414a84ce8ecb1ec964f4832002abfbd28b2f7153affcf73d24dc190876d6
  • exim-pgsql-4.99.5-1.el8.tuxcare.els3.x86_64.rpm
    sha:dc1a3b43904c6124b8b13a798bb4efc3bcbe729535f78cc91c1f1fcff3495ec2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.