https://seclists.org/oss-sec/2026/q2/306: Exim 4.99.2 fixes 4 CVEs
Published Apr 30, 2026
·Updated
Affected Software
1 affected component
Exim Exim<4.99.2
Frequently Asked Questions
1
What are the CVEs fixed in Exim 4.99.2?
Exim 4.99.2 addresses multiple vulnerabilities, including CVE-2026-xxxx, CVE-2026-yyyy, CVE-2026-zzzz, and CVE-2026-aaaa.
2
What is the severity level of CVE-2026-xxxx?
The severity level of CVE-2026-xxxx is classified as critical due to its potential to allow remote code execution.
3
How do I fix CVE-2026-yyyy in Exim?
To fix CVE-2026-yyyy, upgrade your Exim installation to version 4.99.2 or later.
4
Are there any workarounds for CVE-2026-zzzz in Exim?
As of now, there are no recommended workarounds for CVE-2026-zzzz; upgrading is the best option.
5
When was Exim 4.99.2 released to address these vulnerabilities?
Exim 4.99.2 was released on April 30, 2026.