[CLSA-2026:1790759113] exim: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-30 09:05:25 UTC
Description:
- CVE-2026-94054: recompute the PROXY protocol v1 header length from the copied line in proxy_protocol_host(), so the following memchr() and end-of-line store cannot read or write past the allocation - CVE-2026-94057: make read_message_data_smtp() honour the strict-CRLF state of the current message when receive_swallow_smtp() drains input after a DATA rejection, preventing further SMTP smuggling variants
Updated packages:
  • exim-4.99.5-1.el9.tuxcare.els2.aarch64.rpm
    sha:5ff96297e5e6947e9a5a01bac8fc7cbdcdf7861b48ea1c982fcdddbf9bccd9aa
  • exim-4.99.5-1.el9.tuxcare.els2.i686.rpm
    sha:76e13ed272255f465ddca00ede6c4709a55616f044685db9461138543cf51bca
  • exim-4.99.5-1.el9.tuxcare.els2.x86_64.rpm
    sha:ee8a93e487f7f922e0df6a4ec0037ee246aee0df4b5671da86873b1fcc4cc01e
  • exim-greylist-4.99.5-1.el9.tuxcare.els2.aarch64.rpm
    sha:78a7941d7212936735491644ac08d665dc473a3b5b12abbdd8bf88257708e0d2
  • exim-greylist-4.99.5-1.el9.tuxcare.els2.i686.rpm
    sha:62a92274798d7e8277db2b873762af0643ca678c05e4d856cbf97f8e7698001d
  • exim-greylist-4.99.5-1.el9.tuxcare.els2.x86_64.rpm
    sha:5ac85b417feb96ff8a0f2ca1bf4c73cd07751ac09a48527e927029ecf67b618e
  • exim-mon-4.99.5-1.el9.tuxcare.els2.aarch64.rpm
    sha:4763db2a258a7169cc4fa7401c70f63d7bd91290ce2bf7dadc49b578adc619db
  • exim-mon-4.99.5-1.el9.tuxcare.els2.i686.rpm
    sha:44dd278c4ef173d613d41c9017358d78acd783babd06a1ae4d577fb9b6b34650
  • exim-mon-4.99.5-1.el9.tuxcare.els2.x86_64.rpm
    sha:2cd28ae0db21257343907bd3e5d80ead71c7c102d66849f2768d6db0cba88b28
  • exim-mysql-4.99.5-1.el9.tuxcare.els2.aarch64.rpm
    sha:b6949d4fa5a823d6c603faa185509a3950a024b5b39349d0faab83b6b47f7209
  • exim-mysql-4.99.5-1.el9.tuxcare.els2.i686.rpm
    sha:ca121d9ea1d1e9942b7d631529bacdb9fd69ce6076e1874d4eb550fcab184eb6
  • exim-mysql-4.99.5-1.el9.tuxcare.els2.x86_64.rpm
    sha:bcc6775abadaf29677e1dda67885bdea80a31ffeff993e74cf0b041988c959ff
  • exim-pgsql-4.99.5-1.el9.tuxcare.els2.aarch64.rpm
    sha:7d0c2d43a8373caca1129b27fce443628490ac253eb5c98612e6ae0e7d5ab467
  • exim-pgsql-4.99.5-1.el9.tuxcare.els2.i686.rpm
    sha:0069e2b67ae12bfd1fd2399f107c78f4ef2dae8af1fdef1922ae86b017b49a0b
  • exim-pgsql-4.99.5-1.el9.tuxcare.els2.x86_64.rpm
    sha:60eb63822500bb9820c49af1d54309314160a0c24ba10eb3c4c9bacb05f1ead2
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.