Bug#1140099: exim4-daemon-heavy: regression in 4.98.2-1+deb13u3 - bare filename in router domains condition no longer treated as implicit lsearch

Adam D. Barratt adam at adam-barratt.org.uk
Mon Jun 15 20:43:50 BST 2026


On Mon, 2026-06-15 at 13:24 -0500, Terry Roy wrote:
> The security update to exim4 4.98.2-1+deb13u3 (trixie-security,
> installed 2026-06-15) introduced a regression in virtual alias
> routing for sites using a bare filename in the `domains` condition of
> Exim routers.

As a data point, the entire diffstat for the update is:

 changelog                                                             |   13 +
 patches/83-Security-fix-PROXYv2-uninitialised-stack-disclosure-.patch |   90 ++++++++++
 patches/series                                                        |    1 

where the patch's diffstat is:

+ doc/ChangeLog | 14 ++++++++++++++
+ src/proxy.c       | 12 ++++++++++++
+ 2 files changed, 26 insertions(+)

Right now, that diff is available at
https://release.debian.org/proposed-updates/trixie_diffs/exim4_4.98.2-1+deb13u3.debdiff

As you can see, nothing in the update touches functionality outside of
the PROXY module.

Regards,

Adam



More information about the Pkg-exim4-maintainers mailing list