{"id":"CLSA-2026-1781269872","summary":"Fix CVE(s): CVE-2026-45185","details":"   * SECURITY UPDATE: TLS close_notify use-after-free during active BDAT/CHUNKING\n     transfer that can lead to unauthenticated remote code execution\n     - debian/patches/CVE-2026-45185.patch: introduce tls_close_notify() that\n       pops the BDAT receive layer, reinstalls plaintext receive callbacks via\n       a new smtp_rcv_cleartext() helper, then re-pushes the BDAT layer before\n       closing the TLS channel; switch the GnuTLS and OpenSSL receive paths\n       from a bare tls_close() to tls_close_notify()\n     - CVE-2026-45185","modified":"2026-10-26T09:32:05.234068016Z","published":"2026-06-12T13:13:18Z","upstream":["CVE-2026-45185"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1781269872.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45185"}],"affected":[{"package":{"name":"exim4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/exim4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.12+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"}},{"package":{"name":"exim4-base","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/exim4-base?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.12+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"}},{"package":{"name":"exim4-config","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/exim4-config?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.12+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"}},{"package":{"name":"exim4-daemon-heavy","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/exim4-daemon-heavy?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.12+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"}},{"package":{"name":"exim4-daemon-light","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/exim4-daemon-light?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.12+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"}},{"package":{"name":"exim4-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/exim4-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.12+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"}},{"package":{"name":"eximon4","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/eximon4?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.93-13ubuntu1.12+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"}}],"schema_version":"1.9.0"}