Release date:
2026-10-01 11:06:23 UTC
Description:
* SECURITY UPDATE: heap out-of-bounds read and NUL write in Proxy
Protocol v1 header parsing
- debian/patches/CVE-2026-94054.patch: size the heap copy of the
received PROXY v1 line by its string length instead of by the
number of bytes read, so the search for the terminating CR and the
NUL written there stay inside the copy
- CVE-2026-94054
Updated packages:
-
exim4_4.94.2-7+deb11u6+tuxcare.els2_all.deb
sha:054897d3d5196a7d7749d67df61e5c08fec20311
-
exim4-base_4.94.2-7+deb11u6+tuxcare.els2_amd64.deb
sha:66d476ae4b5ee0e006f30f60ebd25184fc849a45
-
exim4-config_4.94.2-7+deb11u6+tuxcare.els2_all.deb
sha:4b1e79f2bb45d3c8130703aada9d6e8c18afc0ca
-
exim4-daemon-heavy_4.94.2-7+deb11u6+tuxcare.els2_amd64.deb
sha:6855ca6f8d15f1e6ec8c85220622aab63dcabb61
-
exim4-daemon-light_4.94.2-7+deb11u6+tuxcare.els2_amd64.deb
sha:f79485a86e7b78cf8aab247ea9cc9c1cf5f9c171
-
exim4-dev_4.94.2-7+deb11u6+tuxcare.els2_amd64.deb
sha:fe13b88afe9e0c3340295462f331fb6a985a6a5b
-
eximon4_4.94.2-7+deb11u6+tuxcare.els2_amd64.deb
sha:821348228e305a8efa79ce7e1c819d72490423a2
-
exim4-base_4.94.2-7+deb11u6+tuxcare.els2_arm64.deb
sha:1d74f9094fc08032353fd5eb0a5eafbb925c47df
-
exim4-daemon-heavy_4.94.2-7+deb11u6+tuxcare.els2_arm64.deb
sha:5f6c5918971d2e478eaea4586721d5ec9ab48d98
-
exim4-daemon-light_4.94.2-7+deb11u6+tuxcare.els2_arm64.deb
sha:ef8571784b30b3175e34418d1f6b58d2943c71c5
-
exim4-dev_4.94.2-7+deb11u6+tuxcare.els2_arm64.deb
sha:965ebc6c7f45195ea70f762a060d45b06c5c5504
-
eximon4_4.94.2-7+deb11u6+tuxcare.els2_arm64.deb
sha:0a1f9a3741162d05b421ee2a114aec494f226dfc
-
exim4-base_4.94.2-7+deb11u6+tuxcare.els2_armel.deb
sha:adb2b330a3b6131e30e74e608bcc4510117bf6e7
-
exim4-daemon-heavy_4.94.2-7+deb11u6+tuxcare.els2_armel.deb
sha:1388219c45517e33be48a20e990e3eed27055c5e
-
exim4-daemon-light_4.94.2-7+deb11u6+tuxcare.els2_armel.deb
sha:5c1f3b0a9e9a0aaf14a48b562413046268bfcc58
-
exim4-dev_4.94.2-7+deb11u6+tuxcare.els2_armel.deb
sha:575de79abbcb560cc5f366eb534cfe2cb573108f
-
eximon4_4.94.2-7+deb11u6+tuxcare.els2_armel.deb
sha:2f0688033d59da185905619ab97b994d708869d3
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
