[CLSA-2026:1791191960] Fix CVE(s): CVE-2026-94056
Type:
security
Severity:
Important
Release date:
2026-10-05 09:19:33 UTC
Description:
* SECURITY UPDATE: uninitialised stack data used as the length of a Proxy Protocol v2 header - debian/patches/CVE-2026-94056.patch: repeat the read of the PROXY v2 length field until the complete 16-byte header has arrived, and abort if the peer closes before that, so the header length is never taken from uninitialised stack memory - debian/patches/CVE-2026-94056-2.patch: fail PROXY reads on peer EOF - CVE-2026-94056
CVEs fixed:
Updated packages:
  • exim4_4.94.2-7+deb11u6+tuxcare.els3_all.deb
    sha:8ea95695bcbcb33e4c653ab828c3df08092a790d
  • exim4-base_4.94.2-7+deb11u6+tuxcare.els3_amd64.deb
    sha:fea0aed892590f7ca4fde3033046f87cd90f8798
  • exim4-config_4.94.2-7+deb11u6+tuxcare.els3_all.deb
    sha:7b2ca259a80f286d0e2b030d77c204dec5ae53df
  • exim4-daemon-heavy_4.94.2-7+deb11u6+tuxcare.els3_amd64.deb
    sha:aa3c815444ca4afd4a787ec3edc1916132ec91ba
  • exim4-daemon-light_4.94.2-7+deb11u6+tuxcare.els3_amd64.deb
    sha:c271d90c06ce4622cef837594946d6fca5085edf
  • exim4-dev_4.94.2-7+deb11u6+tuxcare.els3_amd64.deb
    sha:28dc1157742c400d20da8e0af0c7dfab7d65417d
  • eximon4_4.94.2-7+deb11u6+tuxcare.els3_amd64.deb
    sha:591e503fd7f7fcbf289b400a625c1db43b940c01
  • exim4-base_4.94.2-7+deb11u6+tuxcare.els3_arm64.deb
    sha:6fea12b84148059737b8e4820e18ab0c1b616b25
  • exim4-daemon-heavy_4.94.2-7+deb11u6+tuxcare.els3_arm64.deb
    sha:3a6727ff8b8d4210009eb18bcf86a4d5a8ed9d74
  • exim4-daemon-light_4.94.2-7+deb11u6+tuxcare.els3_arm64.deb
    sha:bc3f43ca440c709b585cd1ad1ed46c23156708c4
  • exim4-dev_4.94.2-7+deb11u6+tuxcare.els3_arm64.deb
    sha:d1ea8c8d9fc79239f3826414f7280021d4eb8476
  • eximon4_4.94.2-7+deb11u6+tuxcare.els3_arm64.deb
    sha:f14a9c78e0b214f8c25f589d5b0d769d80a6dcea
  • exim4-base_4.94.2-7+deb11u6+tuxcare.els3_armel.deb
    sha:3bf8ab50f91a2f69f8ea6e67ff946e1e118d6ffb
  • exim4-daemon-heavy_4.94.2-7+deb11u6+tuxcare.els3_armel.deb
    sha:148f14749dff8fc8c728a49cbe1fbd34927610aa
  • exim4-daemon-light_4.94.2-7+deb11u6+tuxcare.els3_armel.deb
    sha:262c5e7d78c1c7360a577c1c7755bb563486a9e7
  • exim4-dev_4.94.2-7+deb11u6+tuxcare.els3_armel.deb
    sha:bc8f849260befad672d2ec284ae4dce1a6228933
  • eximon4_4.94.2-7+deb11u6+tuxcare.els3_armel.deb
    sha:74e8485db163c694fe133e5edfdf3d78e8e8a5f6
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.