-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 02 May 2026 11:31:20 +0200 Source: exim4 Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym Architecture: ppc64el Version: 4.98.2-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-conova-01) Changed-By: Andreas Metzler Description: exim4-base - support files for all Exim MTA (v4) packages exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac exim4-daemon-light - lightweight Exim MTA (v4) daemon exim4-dev - header files for the Exim MTA (v4) packages eximon4 - monitor application for the Exim MTA (v4) (X11 interface) Closes: 1134984 Changes: exim4 (4.98.2-1+deb13u1) trixie; urgency=medium . * Fix GnuTLS hostname verify of a server certificate with a zero-length Subject. Patch from upstream GIT master (Closes: #1134984) * Pull CVE-fixes from 4.99.2 +CVE-2026-40684 Possible crash with malicious DNS data when using musl libc On systems using musl libc (not glibc) due to an oddity in octal printing it is possible to crash the connection instance when malformed DNS data is present in PTR records. +CVE-2026-40685 Possible OOB read/write on corrupt JSON in header configurations using json operators on invalid externally-provided input could trigger heap corruption. +CVE-2026-40686 Possible OOB read with large UTF8 trailing characters configurations using utf8 operators on malformed utf8 in headers could trigger OOB reads and might trigger some data leak if error messages are required for subsequent emails in the current connection and similar malformed headers are present. +CVE-2026-40687 Possible OOB read/write with SPA authenticator in configurations using the SPA authentication driver to a hostile/compromised external SPA/NTLM connection it is possible to trigger an OOB read/write and crash the connection instance or possibly leak heap data to the instance. Checksums-Sha1: 3c8d5415ed1504e378f749e68cade6b97d2761d9 132984 exim4-base-dbgsym_4.98.2-1+deb13u1_ppc64el.deb fd8a6abe7a6d64f83b0e15396564edcb094c22b0 1144496 exim4-base_4.98.2-1+deb13u1_ppc64el.deb 493f1dc3bf84343db702c5f363dad7d4b33a3014 1735592 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u1_ppc64el.deb a382eef8dc2321f9df20654c81e18853db467e86 703312 exim4-daemon-heavy_4.98.2-1+deb13u1_ppc64el.deb c5f6473006f5a49cbb56f2de54b3101ec18e2b50 1527168 exim4-daemon-light-dbgsym_4.98.2-1+deb13u1_ppc64el.deb f226ca576df3295eb7f9b3f15f94eecba44fbdc3 641564 exim4-daemon-light_4.98.2-1+deb13u1_ppc64el.deb fe3cfa0203774491d4072d360972300928da67e8 36040 exim4-dev_4.98.2-1+deb13u1_ppc64el.deb c46cb5630019e2bc285ace8570b0a0a748376327 11305 exim4_4.98.2-1+deb13u1_ppc64el-buildd.buildinfo 015cb7b525fc6657603dda60e4a98ba894a2c9b8 142532 eximon4-dbgsym_4.98.2-1+deb13u1_ppc64el.deb 280107d5b85b73747c673e4ab68b5ecd0d9b5642 74404 eximon4_4.98.2-1+deb13u1_ppc64el.deb Checksums-Sha256: 874a5ddf26d9e8e11471944c34f17b6f5d97b74164345a92ae885c2be4f48a7c 132984 exim4-base-dbgsym_4.98.2-1+deb13u1_ppc64el.deb 78ee39d7d284ebfd7a4563374ed15400af58af994d66ceaa5b8c0a54316c2a09 1144496 exim4-base_4.98.2-1+deb13u1_ppc64el.deb 3d3ffe807a27c85c7309fe68c6b9e8e6163e01901aff3181fb0c70babd1d4267 1735592 exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u1_ppc64el.deb d8cc3a82d3461d08ee465b565c5b2b3849edcea32b43515edfab5cb703b3f6bc 703312 exim4-daemon-heavy_4.98.2-1+deb13u1_ppc64el.deb a1201755d6d73212d936c83a433c0743c23b4bdfea5cc9cdf9686224b4861c25 1527168 exim4-daemon-light-dbgsym_4.98.2-1+deb13u1_ppc64el.deb 98282ab4a7d8e0beedf8ab7f680c073cf03dfdb5b92ae2439569befbaa2fff35 641564 exim4-daemon-light_4.98.2-1+deb13u1_ppc64el.deb 54648138d49e9da7580d7f02becc269d1c8f7ffdfe73a7f0180ffc6355eb413e 36040 exim4-dev_4.98.2-1+deb13u1_ppc64el.deb 47c0c2a356db27b0c94702a6d4ea2a35565a6ef8632cb77bc8728d8830b832a5 11305 exim4_4.98.2-1+deb13u1_ppc64el-buildd.buildinfo f095d062d8de4e115d0daea759ed32888b6b52f6c8e0110e9d85fded9b48c97c 142532 eximon4-dbgsym_4.98.2-1+deb13u1_ppc64el.deb 4f1010afdc3eb462515fffcb0d66dd8ffcdb41600914eb1c1bf4fc12aa0b61d1 74404 eximon4_4.98.2-1+deb13u1_ppc64el.deb Files: bcd4f86a40c20a1e1fc001d361c64ac7 132984 debug optional exim4-base-dbgsym_4.98.2-1+deb13u1_ppc64el.deb 81596cd6e9ece44551f2f35ebd093f7c 1144496 mail optional exim4-base_4.98.2-1+deb13u1_ppc64el.deb 3ad7dd23c6ad4993ca0d69724ea6c805 1735592 debug optional exim4-daemon-heavy-dbgsym_4.98.2-1+deb13u1_ppc64el.deb 8ebb49a8236e2543ec744901176dc4f6 703312 mail optional exim4-daemon-heavy_4.98.2-1+deb13u1_ppc64el.deb e3a3a6078df5ab8152158d0b98f727e7 1527168 debug optional exim4-daemon-light-dbgsym_4.98.2-1+deb13u1_ppc64el.deb 5526bdc0b869fadcca422e68ebfce877 641564 mail optional exim4-daemon-light_4.98.2-1+deb13u1_ppc64el.deb b136721f64e07eaf500d144b2de86a43 36040 mail optional exim4-dev_4.98.2-1+deb13u1_ppc64el.deb 0aa5a947d76160e9dd823f74ab1537d0 11305 mail standard exim4_4.98.2-1+deb13u1_ppc64el-buildd.buildinfo 16c56a0fb2e0dc9f8fbf9a762afa2e0f 142532 debug optional eximon4-dbgsym_4.98.2-1+deb13u1_ppc64el.deb cf243ff42f72776fa2f06a4aa54e5c3b 74404 mail optional eximon4_4.98.2-1+deb13u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEDoRc43uRWMOoIqIgDNLUPhbmg7MFAmn3hV0ACgkQDNLUPhbm g7NAexAAmeEqqukavE0vHqcIMydM8CzHwz/NCkeTymt6vIv8WFmz0pqM6WE0nFhW Ra0I1nZFZvAEFbO+9tPQt6AJSjLZk9Z+uic9kmMrcaFON6J25HkpB7J2QQ2NLTog 9xdmfvjJlXEwa22O6tIFrQVitv5g6sfh+T74N3zl/c+lJdlWdhjEVUYoaLsEPhfy 9umYOvRfWJYEvAx0KlTE/jUWz3RJpGXk0t5N+ke3TOoIDshK4OD+m/4ykH7kazdV US6KnR0SvIPVvBujxYf+d5pW8cGQUZ7jSYqZYUjs2CWpPwH3nxqc47qo8C5FgiFe NChfSnTvCyxQqKwH+kS/+qPfc2662j+ByP6tc0cGXgzkjkjB+ZDxhLZjpxoZIy6d JsvAFS97xMaoQv2F1dkJwnZXFDQZF2V7NXnQVet8hO+Fo4LgImnBvgJPBgI938H9 z5MV8JmWJ8nEe5uaon4gVlt6OKKcM9bv7cCXOUHS8qJuLB0/+mknVR3DuH2LpXDK LaCZhB7z2+VAMdr4VvM70EjMmeg8IPkdl9CaLJAGjTPaAXSceNmUFENf2UFvtVpF NvtI8Az8QqQzyZiTHZwpNbENnmF96stbD03BcllhJv0dt3/YbAYzSCYRyDBBdg2J avqTgubZwNehvYU9DuqUMzme5YZfRJwbsK7nONRqLucFWkHvUEQ= =lQAQ -----END PGP SIGNATURE-----