CLSA-2026-1787664471 Fix CVE(s): CVE-2026-66140, CVE-2026-66141

SECURITY UPDATE: directory traversal via named-queue arguments - debian/patches/CVE-2026-66140.patch: add validatequeuename and apply it to the -MCG and -qfflG command-line queue names, rejecting names containing '/', longer than 32 characters, or colliding with the reserved spool subdirectories;...

CLSA-2026-1787230875 exim: Fix of 2 CVEs

CVE-2026-66140: restrict named-queue names and require admin for -MC command-line options - CVE-2026-66141: do not expand localpart in a pipe transport under forcecommand...

exim: Fix of 2 CVEs

CVE-2026-66140: restrict named-queue names and require admin for -MC command-line options - CVE-2026-66141: do not expand localpart in a pipe transport under forcecommand...

CLSA-2026-1787328725 Fix CVE(s): CVE-2026-66140, CVE-2026-66141

SECURITY UPDATE: directory traversal outside the spool area through mishandled named-queue arguments, leading to privilege escalation - debian/patches/CVE-2026-66140.patch: add validatequeuename and apply it to both command-line sources of a queue name, -MCG and -qfflG, rejecting a name that...

CLSA-2026-1787225012 exim: Fix of 2 CVEs

CVE-2026-66140: restrict named-queue names and require admin for -MC command-line options - CVE-2026-66141: do not expand localpart in a pipe transport under forcecommand...