[CLSA-2026:1790608554] Fix CVE(s): CVE-2026-94054, CVE-2026-94056
Type:
security
Severity:
Important
Release date:
2026-09-28 15:16:07 UTC
Description:
* SECURITY UPDATE: uninitialised stack data use in Proxy Protocol v2 - debian/patches/CVE-2026-94056.patch: repeat reads until the complete 16-byte PROXY v2 header, including the length field, has been received, and abort if the peer closes before that. - CVE-2026-94056
CVEs fixed:
Updated packages:
  • exim4_4.90.1-1ubuntu1.10+tuxcare.els9_all.deb
    sha:3ba3c70752d6ae87a8c669167d672ba42ba45185
  • exim4-base_4.90.1-1ubuntu1.10+tuxcare.els9_amd64.deb
    sha:8a6396802dba492aa118ed6ce72832987dd30e86
  • exim4-config_4.90.1-1ubuntu1.10+tuxcare.els9_all.deb
    sha:14af121af76796ec86f953d5be23758b311c5a4c
  • exim4-daemon-heavy_4.90.1-1ubuntu1.10+tuxcare.els9_amd64.deb
    sha:ddc583ebf185f0f80647d5a560356837065697f9
  • exim4-daemon-light_4.90.1-1ubuntu1.10+tuxcare.els9_amd64.deb
    sha:66fdf588fa838ebe8ecc4ae9b1d52f578a69b020
  • exim4-dev_4.90.1-1ubuntu1.10+tuxcare.els9_amd64.deb
    sha:1942c7298f24020af9c83c8455c30bac6d342c41
  • eximon4_4.90.1-1ubuntu1.10+tuxcare.els9_amd64.deb
    sha:a546b6b34704bfbd30d70f0165bca5ebd151b492
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.