-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 27 May 2026 18:52:26 +0200
Source: exim4
Binary: exim4-base exim4-base-dbgsym exim4-daemon-heavy exim4-daemon-heavy-dbgsym exim4-daemon-light exim4-daemon-light-dbgsym exim4-dev eximon4 eximon4-dbgsym
Architecture: amd64
Version: 4.96-15+deb12u10
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-csail-01) <buildd_amd64-x86-csail-01@buildd.debian.org>
Changed-By: Andreas Metzler <ametzler@debian.org>
Description:
 exim4-base - support files for all Exim MTA (v4) packages
 exim4-daemon-heavy - Exim MTA (v4) daemon with extended features, including exiscan-ac
 exim4-daemon-light - lightweight Exim MTA (v4) daemon
 exim4-dev  - header files for the Exim MTA (v4) packages
 eximon4    - monitor application for the Exim MTA (v4) (X11 interface)
Changes:
 exim4 (4.96-15+deb12u10) bookworm-security; urgency=high
 .
   * Cherry-pick fix for EXIM-Security-2026-05-19.1 from 4.99.4.
     Security: PROXYv2 parser: reject PROXY frames whose declared payload
     length is too short for the claimed address family (12 bytes for
     TCPv4/0x11, 36 bytes for TCPv6/0x21).  Previously a frame with
     family=0x21 and len=0 caused 16 bytes of uninitialized stack to be
     formatted as the sender's IPv6 address and disclosed in the SMTP
     greeting banner.  Affects configurations with SUPPORT_PROXY and
     `hosts_proxy` set.  Reported by Warisjeet Singh (sin99xx).
Checksums-Sha1:
 7f5c2c14eaa27300bce61d0240eda71415349209 139136 exim4-base-dbgsym_4.96-15+deb12u10_amd64.deb
 b3be7727f6fbe6ccde7b1b7a6a6d80f4fc6fd622 1118412 exim4-base_4.96-15+deb12u10_amd64.deb
 20b2d525fdd844769dfd8fc8fc4fe7371921ba00 1614536 exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_amd64.deb
 d8bcaf2a4443b690f0a09b16217351ee7bc25067 665340 exim4-daemon-heavy_4.96-15+deb12u10_amd64.deb
 6e03e637aed522a3ea4221016cf2a0b99e0826ca 1420824 exim4-daemon-light-dbgsym_4.96-15+deb12u10_amd64.deb
 b369b7c7b6b45cc0fefe0eaea3bb6a2a2f001937 605848 exim4-daemon-light_4.96-15+deb12u10_amd64.deb
 d483e94b334b64fd0693e21e43c0c3c79e7556b4 39468 exim4-dev_4.96-15+deb12u10_amd64.deb
 7ac33e5f49449e8a845f631c6dca46cafdb2c2fd 11345 exim4_4.96-15+deb12u10_amd64-buildd.buildinfo
 5115ab8ddf0f5c2f34f2a9c2ff46e2a6bb62fd70 137212 eximon4-dbgsym_4.96-15+deb12u10_amd64.deb
 05f2d734d68c3271a92af1c8d59e9b9666726bdf 74540 eximon4_4.96-15+deb12u10_amd64.deb
Checksums-Sha256:
 5ccbea5862570556919fad7032061be69f355b14a6d1e569cfb2ae25c25aec2a 139136 exim4-base-dbgsym_4.96-15+deb12u10_amd64.deb
 4b60c8f218c5a217e69b25c761c78a568e7263efe59963a8671da15e6a1dbb9d 1118412 exim4-base_4.96-15+deb12u10_amd64.deb
 0e4b2b96fd098c9bde85e6903929e0ecc87db97338ca0a182c837c8788caea3b 1614536 exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_amd64.deb
 8f0ab989d85055684fe27a7a769460c38df1c4efd98acc13c22c33e3afdcbc55 665340 exim4-daemon-heavy_4.96-15+deb12u10_amd64.deb
 dace0faeea65807f82ef4485216ad90bf5e8a66edf303542dbd670e55a95d257 1420824 exim4-daemon-light-dbgsym_4.96-15+deb12u10_amd64.deb
 436a7f5b7d45355b43e4e3a406850a6219b73d26819961dac09879d2234a8dcd 605848 exim4-daemon-light_4.96-15+deb12u10_amd64.deb
 540e5a75513f39cdd014c02ce36e5994016d3d2999696999db8f49c94ae42870 39468 exim4-dev_4.96-15+deb12u10_amd64.deb
 6c3a77efbc8e752d604198328cd524c4036996067810f92e8e0b682e5fd3f31d 11345 exim4_4.96-15+deb12u10_amd64-buildd.buildinfo
 e17e0667a83dbe0177774799e9324931b6dfbc82d1cd31bc2675a3c1aca8257b 137212 eximon4-dbgsym_4.96-15+deb12u10_amd64.deb
 27a604cd25b7e755a0bebda8618c5a2487154158ab1c721fadbbca9208eaa365 74540 eximon4_4.96-15+deb12u10_amd64.deb
Files:
 3d1f509c42347b58a9922532fb7889ed 139136 debug optional exim4-base-dbgsym_4.96-15+deb12u10_amd64.deb
 0d82149ab1e25c6e1f13ce812a332985 1118412 mail optional exim4-base_4.96-15+deb12u10_amd64.deb
 59d057532bf2ff70281e56f616d721dc 1614536 debug optional exim4-daemon-heavy-dbgsym_4.96-15+deb12u10_amd64.deb
 f026082a71c8aec6a116506e3aeb615a 665340 mail optional exim4-daemon-heavy_4.96-15+deb12u10_amd64.deb
 bd301a2a72354fa502d3c30dfe7b2c09 1420824 debug optional exim4-daemon-light-dbgsym_4.96-15+deb12u10_amd64.deb
 36306b70380e52d2a35f69a37136bac6 605848 mail optional exim4-daemon-light_4.96-15+deb12u10_amd64.deb
 02849ac02e34fea92849d32041ddcbca 39468 mail optional exim4-dev_4.96-15+deb12u10_amd64.deb
 8ae07bdf310640ec5bf52cf708020393 11345 mail standard exim4_4.96-15+deb12u10_amd64-buildd.buildinfo
 368781cd2eaed0e09c005f672cad0dab 137212 debug optional eximon4-dbgsym_4.96-15+deb12u10_amd64.deb
 d5f500da2af72ae5aebc70aff3f5e839 74540 mail optional eximon4_4.96-15+deb12u10_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=ETkK
-----END PGP SIGNATURE-----