{
  "document": {
    "aggregate_severity": {
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "TuxCare License Agreement",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.",
        "title": "Terms of Use"
      },
      {
        "category": "details",
        "text": "* SECURITY UPDATE: out-of-bounds read in DNS name escape decoding when\n     running against musl libc\n     - debian/patches/CVE-2026-40684.patch: rewrite the escape-decoding loop\n       of string_copy_dnsdomain() to consume one, two or three digits as\n       available instead of blindly indexing s[1], s[2], s[3] and advancing\n       four bytes, and drop the second pointer advance in the non-digit\n       branch so a trailing lone backslash cannot read past the terminating\n       NUL\n     - CVE-2026-40684\n   * SECURITY UPDATE: heap out-of-bounds write in JSON string expansions\n     - debian/patches/CVE-2026-40685.patch: in dewrap(), only skip a\n       backslash when a non-NUL character follows it, so a value ending in a\n       single trailing backslash can no longer walk past the end of the\n       string and write beyond the destination buffer\n     - CVE-2026-40685\n   * SECURITY UPDATE: heap read past the end of the input in UTF-8 expansion\n     operators, allowing data exfiltration through an SMTP rejection message\n     - debian/patches/CVE-2026-40686.patch: stop the continuation-byte loop\n       of the GETUTF8INC macro at the terminating NUL, so malformed UTF-8\n       that declares more continuation bytes than are present no longer\n       reads into adjacent heap\n     - CVE-2026-40686\n   * SECURITY UPDATE: uninitialised-memory disclosure and static buffer\n     overflows in the SPA (NTLM) authenticator\n     - debian/patches/CVE-2026-40687.patch: zero the output buffer at the\n       top of spa_base64_to_bits() so a short encoded input no longer leaves\n       previous heap contents in the SPA challenge/response flow, and\n       replace the assert() guards in unicodeToString(), strToUnicode() and\n       toString() with explicit length clamping, since assert() compiles\n       away under NDEBUG and leaves an unchecked write past the end of the\n       1024-byte static buffers; also clamp the length used by the\n       spa_unicode_add_string macro, which states the truncation contract\n       at the call site (spa_bytes_add() already bounds-checks the copy\n       itself)\n     - CVE-2026-40687\n   * SECURITY UPDATE: directory traversal outside the spool area through\n     mishandled named-queue arguments, leading to privilege escalation\n     - debian/patches/CVE-2026-66140.patch: add validate_queue_name() and\n       apply it to both command-line sources of a queue name, -MCG <name>\n       and -q[f][f][l]G<name>, rejecting a name that contains '/', is longer\n       than 32 characters, or collides with one of the reserved spool\n       subdirectories input, db, msglog and scan; mark -MC and every -MCx\n       argument as admin-only and refuse them for a non-admin caller\n     - CVE-2026-66140\n   * SECURITY UPDATE: .forward privilege escalation caused by expansion of\n     the pipe command under force_command\n     - debian/patches/CVE-2026-66141.patch: stop passing addr->local_part\n       through expand_string() in the $address_pipe special case of a pipe\n       transport that has force_command set, so command text supplied by a\n       local user in a .forward file is only dequoted and split into\n       arguments instead of being evaluated with the transport's privileges\n     - CVE-2026-66141",
        "title": "Details"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://tuxcare.com/contact/",
      "name": "TuxCare",
      "namespace": "https://tuxcare.com/"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195",
        "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.tuxcare.com/csaf/v2/els_os/debian11els/advisories/2026/clsa-2026_1789142195.json"
      }
    ],
    "tracking": {
      "current_release_date": "2026-09-11T15:57:50Z",
      "generator": {
        "date": "2026-09-11T15:57:50Z",
        "engine": {
          "name": "pyCSAF"
        }
      },
      "id": "CLSA-2026:1789142195",
      "initial_release_date": "2026-09-11T15:57:50Z",
      "revision_history": [
        {
          "date": "2026-09-11T15:57:50Z",
          "number": "1",
          "summary": "Initial version"
        }
      ],
      "status": "final",
      "version": "1"
    },
    "title": "Fix of 6 CVEs"
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Debian 11",
                "product": {
                  "name": "Debian 11",
                  "product_id": "Debian-11",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:debian:debian_linux:11:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Debian"
          }
        ],
        "category": "vendor",
        "name": "Software in the Public Interest, Inc."
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                "product": {
                  "name": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                  "product_id": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-base@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=arm64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                "product": {
                  "name": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                  "product_id": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-dev@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=arm64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                "product": {
                  "name": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                  "product_id": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/eximon4@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=arm64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                "product": {
                  "name": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                  "product_id": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-daemon-light@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=arm64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                "product": {
                  "name": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                  "product_id": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-daemon-heavy@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=arm64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                "product": {
                  "name": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                  "product_id": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-base@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=armel"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                "product": {
                  "name": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                  "product_id": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-dev@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=armel"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                "product": {
                  "name": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                  "product_id": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/eximon4@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=armel"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                "product": {
                  "name": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                  "product_id": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-daemon-light@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=armel"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                "product": {
                  "name": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                  "product_id": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-daemon-heavy@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=armel"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "armel"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                "product": {
                  "name": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                  "product_id": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-base@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=amd64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                "product": {
                  "name": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                  "product_id": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-dev@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=amd64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                "product": {
                  "name": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                  "product_id": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/eximon4@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=amd64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                "product": {
                  "name": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                  "product_id": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-daemon-light@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=amd64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                "product": {
                  "name": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                  "product_id": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-daemon-heavy@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=amd64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
                "product": {
                  "name": "exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
                  "product_id": "exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4-config@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=all"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
                "product": {
                  "name": "exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
                  "product_id": "exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
                  "product_identification_helper": {
                    "purl": "pkg:deb/tuxcare/exim4@4.94.2-7%2Bdeb11u6%2Btuxcare.els1?arch=all"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "all"
          }
        ],
        "category": "vendor",
        "name": "TuxCare"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64 as a component of Debian 11",
          "product_id": "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64"
        },
        "product_reference": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel as a component of Debian 11",
          "product_id": "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
        },
        "product_reference": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64 as a component of Debian 11",
          "product_id": "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64"
        },
        "product_reference": "exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64 as a component of Debian 11",
          "product_id": "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64"
        },
        "product_reference": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64 as a component of Debian 11",
          "product_id": "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64"
        },
        "product_reference": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel as a component of Debian 11",
          "product_id": "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
        },
        "product_reference": "exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64 as a component of Debian 11",
          "product_id": "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64"
        },
        "product_reference": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel as a component of Debian 11",
          "product_id": "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
        },
        "product_reference": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64 as a component of Debian 11",
          "product_id": "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64"
        },
        "product_reference": "eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel as a component of Debian 11",
          "product_id": "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
        },
        "product_reference": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64 as a component of Debian 11",
          "product_id": "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64"
        },
        "product_reference": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64 as a component of Debian 11",
          "product_id": "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64"
        },
        "product_reference": "exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all as a component of Debian 11",
          "product_id": "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all"
        },
        "product_reference": "exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64 as a component of Debian 11",
          "product_id": "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64"
        },
        "product_reference": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel as a component of Debian 11",
          "product_id": "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
        },
        "product_reference": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64 as a component of Debian 11",
          "product_id": "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64"
        },
        "product_reference": "exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
        "relates_to_product_reference": "Debian-11"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all as a component of Debian 11",
          "product_id": "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all"
        },
        "product_reference": "exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
        "relates_to_product_reference": "Debian-11"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-66141",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "notes": [
        {
          "category": "description",
          "text": "Exim before 4.99.5 allows .forward privilege escalation because force_command for a pipe transport is mishandled.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-66141"
        },
        {
          "category": "external",
          "summary": "https://openwall.com/lists/oss-security/2026/07/22/9",
          "url": "https://openwall.com/lists/oss-security/2026/07/22/9"
        }
      ],
      "release_date": "2026-07-24T05:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-11T15:56:36.860664Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195",
          "product_ids": [
            "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-40684",
      "cwe": {
        "id": "CWE-684",
        "name": "Incorrect Provision of Specified Functionality"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Exim before 4.99.2, on systems using musl libc (not glibc), an attacker can crash the connection instance when malformed DNS data is present in PTR records. This is caused by a dn_expand oddity in octal printing.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-40684"
        },
        {
          "category": "external",
          "summary": "https://code.exim.org/exim/exim/commit/628bbaca7672748d941a12e7cd5f0122a4e18c81",
          "url": "https://code.exim.org/exim/exim/commit/628bbaca7672748d941a12e7cd5f0122a4e18c81"
        },
        {
          "category": "external",
          "summary": "https://exim.org/static/doc/security/CVE-2026-40684.txt",
          "url": "https://exim.org/static/doc/security/CVE-2026-40684.txt"
        },
        {
          "category": "external",
          "summary": "https://exim.org/static/doc/security/cve-2026-04.1/CVE2026-40684.assessment",
          "url": "https://exim.org/static/doc/security/cve-2026-04.1/CVE2026-40684.assessment"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/30/21",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/30/21"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/05/01/11",
          "url": "http://www.openwall.com/lists/oss-security/2026/05/01/11"
        }
      ],
      "release_date": "2026-04-30T22:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-11T15:56:36.860664Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195",
          "product_ids": [
            "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-40687",
      "cwe": {
        "id": "CWE-909",
        "name": "Missing Initialization of Resource"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Exim before 4.99.2, when the SPA authentication driver is used with an adversarial SPA resource, there can be an out-of-bounds write that crashes the connection instance, or erroneous data processing that divulges data from uninitialized heap memory.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-40687"
        },
        {
          "category": "external",
          "summary": "https://code.exim.org/exim/exim/commit/68b963b9f75ca27b38e1c0f8c87037990199f505",
          "url": "https://code.exim.org/exim/exim/commit/68b963b9f75ca27b38e1c0f8c87037990199f505"
        },
        {
          "category": "external",
          "summary": "https://exim.org/static/doc/security/CVE-2026-40687.txt",
          "url": "https://exim.org/static/doc/security/CVE-2026-40687.txt"
        },
        {
          "category": "external",
          "summary": "https://exim.org/static/doc/security/cve-2026-04.1/CVE2026-40687.assessment",
          "url": "https://exim.org/static/doc/security/cve-2026-04.1/CVE2026-40687.assessment"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/30/21",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/30/21"
        }
      ],
      "release_date": "2026-04-30T22:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-11T15:56:36.860664Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195",
          "product_ids": [
            "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2026-66140",
      "cwe": {
        "id": "CWE-24",
        "name": "Path Traversal: '../filedir'"
      },
      "notes": [
        {
          "category": "description",
          "text": "Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because arguments related to queue-name are mishandled.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-66140"
        },
        {
          "category": "external",
          "summary": "https://openwall.com/lists/oss-security/2026/07/22/9",
          "url": "https://openwall.com/lists/oss-security/2026/07/22/9"
        }
      ],
      "release_date": "2026-07-24T05:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-11T15:56:36.860664Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195",
          "product_ids": [
            "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ]
    },
    {
      "cve": "CVE-2026-40685",
      "cwe": {
        "id": "CWE-684",
        "name": "Incorrect Provision of Specified Functionality"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Exim before 4.99.2, when JSON lookup is enabled, an out-of-bounds heap write can occur when a JSON operator encounters malformed JSON in an untrusted header, because of an incorrect implementation of \\ skipping.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-40685"
        },
        {
          "category": "external",
          "summary": "https://code.exim.org/exim/exim/commit/9fdc057e71b87c87a0d3d2288b2810a0efaaba57",
          "url": "https://code.exim.org/exim/exim/commit/9fdc057e71b87c87a0d3d2288b2810a0efaaba57"
        },
        {
          "category": "external",
          "summary": "https://exim.org/static/doc/security/CVE-2026-40685.txt",
          "url": "https://exim.org/static/doc/security/CVE-2026-40685.txt"
        },
        {
          "category": "external",
          "summary": "https://exim.org/static/doc/security/cve-2026-04.1/CVE2026-40685.assessment",
          "url": "https://exim.org/static/doc/security/cve-2026-04.1/CVE2026-40685.assessment"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/30/21",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/30/21"
        }
      ],
      "release_date": "2026-04-30T22:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-11T15:56:36.860664Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195",
          "product_ids": [
            "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ]
    },
    {
      "cve": "CVE-2026-40686",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Exim before 4.99.2, when utf8 operators are enabled, there is an out-of-bounds read if large UTF-8 trailing characters are present (malformed UTF-8 header data). Information might be divulged within an error message produced during handling of an unrelated e-mail message.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "fixed": [
          "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
          "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://cve.tuxcare.com/els/cve/CVE-2026-40686"
        },
        {
          "category": "external",
          "summary": "https://code.exim.org/exim/exim/commit/f2570bde16fb4d4a1242ff363a4c4eecf6372efc",
          "url": "https://code.exim.org/exim/exim/commit/f2570bde16fb4d4a1242ff363a4c4eecf6372efc"
        },
        {
          "category": "external",
          "summary": "https://exim.org/static/doc/security/CVE-2026-40686.txt",
          "url": "https://exim.org/static/doc/security/CVE-2026-40686.txt"
        },
        {
          "category": "external",
          "summary": "https://exim.org/static/doc/security/cve-2026-04.1/CVE2026-40686.assessment",
          "url": "https://exim.org/static/doc/security/cve-2026-04.1/CVE2026-40686.assessment"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/30/21",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/30/21"
        }
      ],
      "release_date": "2026-04-30T22:16:00Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-09-11T15:56:36.860664Z",
          "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195",
          "product_ids": [
            "Debian-11:exim4-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-base-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-config-0:4.94.2-7+deb11u6+tuxcare.els1.all",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-heavy-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-daemon-light-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:exim4-dev-0:4.94.2-7+deb11u6+tuxcare.els1.armel",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.amd64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.arm64",
            "Debian-11:eximon4-0:4.94.2-7+deb11u6+tuxcare.els1.armel"
          ],
          "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1789142195"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ]
    }
  ]
}