[ubuntu/jammy-security] exim4 4.95-4ubuntu2.7 (Accepted)

Marc Deslauriers marc.deslauriers at canonical.com
Mon May 4 11:43:07 UTC 2026


exim4 (4.95-4ubuntu2.7) jammy-security; urgency=medium

  * SECURITY UPDATE: Multiple security issues
    - debian/patches/CVE-2026-4068*.patch: backported upstream fixes.
    - CVE-2026-40685 - Possible OOB read/write on corrupt JSON in header
    - CVE-2026-40686 - Possible OOB read with large UTF8 trailing chars
    - CVE-2026-40687 - Possible OOB read/write with SPA authenticator

Date: 2026-04-29 18:13:24.944084+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/exim4/4.95-4ubuntu2.7
-------------- next part --------------
Sorry, changesfile not available.


More information about the jammy-changes mailing list