[DSA 6400-1] exim4 security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6400-1                   [email protected]
https://www.debian.org/security/                     Salvatore Bonaccorso
July 24, 2026                         https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : exim4
CVE ID         : CVE-2026-66140 CVE-2026-66141

Two vulnerabilities were discovered in Exim, a mail transport agent,
which may result in privilege escalation for a local attacker.

For the stable distribution (trixie), these problems have been fixed in
version 4.98.2-1+deb13u4.

We recommend that you upgrade your exim4 packages.

For the detailed security status of exim4 please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/exim4

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=goUb
-----END PGP SIGNATURE-----