This bug was fixed in the package exim4 - 4.99.1-1ubuntu1.4
---------------
exim4 (4.99.1-1ubuntu1.4) resolute-security; urgency=medium
* SECURITY UPDATE: 2026-07 security updates (LP: #2161106)
- debian/patches/202607451-security.patch: Restrict names permitted for
named-queues. in exim_monitor/em_globals.c, src/child.c, src/exim.c,
src/exim_dbmbuild.c, src/exim_dbutil.c, src/functions.h, src/globals.c,
src/globals.h, src/spool_out.c, src/structs.h.
- debian/patches/202607453-security.patch: Do not expand local_part in a
pipe transport under force_command. in src/rda.c, src/transport.c.
- CVE numbers pending
-- Marc Deslauriers <[email protected]> Fri, 17 Jul 2026
10:20:36 -0400
** Changed in: exim4 (Ubuntu Resolute)
Status: New => Fix Released
** Changed in: exim4 (Ubuntu Noble)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2161106
Title:
Exim 2026-07 security update
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/exim4/+bug/2161106/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
