This bug was fixed in the package exim4 - 4.95-4ubuntu2.11
---------------
exim4 (4.95-4ubuntu2.11) jammy-security; urgency=medium
* SECURITY UPDATE: 2026-07 security updates (LP: #2161106)
- debian/patches/202607451-security-pre1.patch: constification in
src/deliver.c, src/exim.c, src/filtertest.c, src/functions.h,
src/globals.c, src/globals.h, src/malware.c, src/queue.c, src/readconf.c,
src/spool_in.c, src/spool_out.c, src/log.c.
- debian/patches/202607451-security.patch: Restrict names permitted for
named-queues. in exim_monitor/em_globals.c, src/child.c, src/exim.c,
src/exim_dbmbuild.c, src/exim_dbutil.c, src/functions.h, src/globals.c,
src/globals.h, src/spool_out.c.
- debian/patches/202607453-security.patch: Do not expand local_part in a
pipe transport under force_command. in src/rda.c, src/transport.c.
- CVE numbers pending
-- Marc Deslauriers <[email protected]> Fri, 17 Jul 2026
10:40:28 -0400
** Changed in: exim4 (Ubuntu Jammy)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2161106
Title:
Exim 2026-07 security update
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/exim4/+bug/2161106/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
