CLSA-2026-1788260209 exim: Fix of 2 CVEs

Rebuilt with rebrand to TuxCare ELS - CVE-2026-66140: fixed upstream in 4.99.5 - restrict names permitted for named-queues - CVE-2026-66141: fixed upstream in 4.99.5 - do not expand localpart from a .forward file in a pipe transport under forcecommand...

CLSA-2026-1788259973 exim: Fix of 2 CVEs

Rebuilt with rebrand to TuxCare ELS - CVE-2026-66140: fixed upstream in 4.99.5 - restrict names permitted for named-queues - CVE-2026-66141: fixed upstream in 4.99.5 - do not expand localpart from a .forward file in a pipe transport under forcecommand...

CLSA-2026-1787398969 exim: Fix of 2 CVEs

Rebuilt with rebrand to TuxCare ELS - CVE-2026-66140: fixed upstream in 4.99.5 - restrict names permitted for named-queues - CVE-2026-66141: fixed upstream in 4.99.5 - do not expand localpart from a .forward file in a pipe transport under forcecommand...

CLSA-2026-1787230875 exim: Fix of 2 CVEs

CVE-2026-66140: restrict named-queue names and require admin for -MC command-line options - CVE-2026-66141: do not expand localpart in a pipe transport under forcecommand...

exim: Fix of 2 CVEs

CVE-2026-66140: restrict named-queue names and require admin for -MC command-line options - CVE-2026-66141: do not expand localpart in a pipe transport under forcecommand...

CLSA-2026-1787315165 exim: Fix of 2 CVEs

Rebuilt with rebrand to TuxCare ELS - CVE-2026-66140: fixed upstream in 4.99.5 - restrict names permitted for named-queues - CVE-2026-66141: fixed upstream in 4.99.5 - do not expand localpart from a .forward file in a pipe transport under forcecommand...

CLSA-2026-1787225012 exim: Fix of 2 CVEs

CVE-2026-66140: restrict named-queue names and require admin for -MC command-line options - CVE-2026-66141: do not expand localpart in a pipe transport under forcecommand...

CVE-2019-13917

Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...

CVE-2019-13917: Undefined Security Weakness

Exim 4.85 through 4.92 fixed in 4.92.1 allows remote code execution as root in some unusual configurations that use the $sort expansion for items that can be controlled by an attacker e.g., $localpart or $domain...