Salvatore Bonaccorso pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
228e2771 by Salvatore Bonaccorso at 2026-09-27T11:00:02+02:00
Add commit references for exim4 issues
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -8077,17 +8077,21 @@ CVE-2026-94083 (Suricata before 8.0.7 has a DoH2 type
confusion that can cause a
CVE-2026-94057 (Exim before 4.100.1 allows SMTP smuggling in which the
received messag ...)
- exim4 4.100.1-1 (bug #1148506)
NOTE:
https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html
+ NOTE: Fixed by:
https://code.exim.org/exim/exim/commit/fb7ccaa78db25a5816a3c4413d2e6caa44aaf822
CVE-2026-94056 (Exim before 4.100.1, when Proxy-Protocol is used with an
attacker-cont ...)
- exim4 4.100.1-1 (bug #1148506)
NOTE:
https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html
+ NOTE: Fixed by:
https://code.exim.org/exim/exim/commit/2e3b687715f049bab7786c739a168b5842734d29
CVE-2026-94055 (Exim before 4.100.1, when certain non-default TLS settings are
used wi ...)
- exim4 4.100.1-1 (bug #1148506)
[trixie] - exim4 <not-affected> (Vulnerable code not present)
[bookworm] - exim4 <not-affected> (Vulnerable code not present)
NOTE:
https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html
+ NOTE: Fixed by:
https://code.exim.org/exim/exim/commit/1c0c17d134cbf10dce3d883e10455b3aefd491e4
CVE-2026-94054 (Exim before 4.100.1, when Proxy-Protocol is used with an
attacker-cont ...)
- exim4 4.100.1-1 (bug #1148506)
NOTE:
https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html
+ NOTE: Fixed by:
https://code.exim.org/exim/exim/commit/8ead2b003af9225f712e85d246cd5544ef04ef91
CVE-2026-94001 (A flaw was found in the Admin REST API of Keycloak, an
open-source ide ...)
- keycloak <itp> (bug #1088287)
CVE-2026-94000 (A flaw was found in the Admin REST API of Keycloak, an
open-source ide ...)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/228e2771cfbbfb0acf244476a191a9e95baf6f6a
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/228e2771cfbbfb0acf244476a191a9e95baf6f6a
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
