[Git][security-tracker-team/security-tracker][master] CVEs for exim4 issues assigned

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d6010d7d by Salvatore Bonaccorso at 2026-07-24T09:18:21+02:00
CVEs for exim4 issues assigned

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -2,10 +2,6 @@ CVE-2026-6924 (A bug in the entropy initialization for SiWx917 causes the DRBG t
 	NOT-FOR-US: Silicon Labs
 CVE-2026-6454 (The Firelight Lightbox plugin for WordPress is vulnerable to Stored DO ...)
 	NOT-FOR-US: WordPress plugin
-CVE-2026-66141 (Exim before 4.99.5 allows .forward privilege escalation because force_ ...)
-	TODO: check
-CVE-2026-66140 (Exim before 4.99.5 allows directory traversal to access files outside  ...)
-	TODO: check
 CVE-2026-66139 (OpenStack Zaqar through 22.0.0 allows authentication bypass via an EXT ...)
 	TODO: check
 CVE-2026-66138 (In OpenStack Ironic Python Agent through 11.6.0, aproject-scoped user  ...)
@@ -1018,12 +1014,12 @@ CVE-2025-44090 (An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execut
 	TODO: check
 CVE-2025-44089 (An issue in NCH Software ExpressZip v11.29 allows attackers to execute ...)
 	TODO: check
-CVE-2026-XXXX [EXIM-Security-2026-06-22.1]
+CVE-2026-66140 [EXIM-Security-2026-06-22.1]
 	- exim4 4.99.4-2
 	NOTE: https://www.openwall.com/lists/oss-security/2026/07/22/9
 	NOTE: https://www.exim.org/static/doc/security/EXIM-Security-2026-06-22.1/EXIM-Security-2026-06-22.1.txt
 	NOTE: Fixed by: https://code.exim.org/exim/exim/commit/a2ceac7c7e1183f7e35792480cb4a06a71b915ba (exim-4.99.5)
-CVE-2026-XXXX [EXIM-Security-2026-06-22.3]
+CVE-2026-66141 [EXIM-Security-2026-06-22.3]
 	- exim4 4.99.4-2
 	NOTE: https://www.openwall.com/lists/oss-security/2026/07/22/9
 	NOTE: https://www.exim.org/static/doc/security/EXIM-Security-2026-06-22.3/EXIM-Security-2026-06-22.3.txt



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6010d7d216326483a8a257e5aed24412cb56e32

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d6010d7d216326483a8a257e5aed24412cb56e32
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260724/fa1f8d1c/attachment-0001.htm>