[Git][security-tracker-team/security-tracker][master] Add commit references for exim4 issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
228e2771 by Salvatore Bonaccorso at 2026-09-27T11:00:02+02:00
Add commit references for exim4 issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8077,17 +8077,21 @@ CVE-2026-94083 (Suricata before 8.0.7 has a DoH2 type confusion that can cause a
 CVE-2026-94057 (Exim before 4.100.1 allows SMTP smuggling in which the received messag ...)
 	- exim4 4.100.1-1 (bug #1148506)
 	NOTE: https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html
+	NOTE: Fixed by: https://code.exim.org/exim/exim/commit/fb7ccaa78db25a5816a3c4413d2e6caa44aaf822
 CVE-2026-94056 (Exim before 4.100.1, when Proxy-Protocol is used with an attacker-cont ...)
 	- exim4 4.100.1-1 (bug #1148506)
 	NOTE: https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html
+	NOTE: Fixed by: https://code.exim.org/exim/exim/commit/2e3b687715f049bab7786c739a168b5842734d29
 CVE-2026-94055 (Exim before 4.100.1, when certain non-default TLS settings are used wi ...)
 	- exim4 4.100.1-1 (bug #1148506)
 	[trixie] - exim4 <not-affected> (Vulnerable code not present)
 	[bookworm] - exim4 <not-affected> (Vulnerable code not present)
 	NOTE: https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html
+	NOTE: Fixed by: https://code.exim.org/exim/exim/commit/1c0c17d134cbf10dce3d883e10455b3aefd491e4
 CVE-2026-94054 (Exim before 4.100.1, when Proxy-Protocol is used with an attacker-cont ...)
 	- exim4 4.100.1-1 (bug #1148506)
 	NOTE: https://lists.exim.org/lurker/message/20260918.121220.0f87338e.en.html
+	NOTE: Fixed by: https://code.exim.org/exim/exim/commit/8ead2b003af9225f712e85d246cd5544ef04ef91
 CVE-2026-94001 (A flaw was found in the Admin REST API of Keycloak, an open-source ide ...)
 	- keycloak <itp> (bug #1088287)
 CVE-2026-94000 (A flaw was found in the Admin REST API of Keycloak, an open-source ide ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/228e2771cfbbfb0acf244476a191a9e95baf6f6a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/228e2771cfbbfb0acf244476a191a9e95baf6f6a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260927/9c2e43d1/attachment.htm>