CLSA-2026-1781269872

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1781269872
Upstream
  • CVE-2026-45185
Published
2026-06-12T13:13:18Z
Modified
2026-10-26T09:32:05Z
Summary
Fix CVE(s): CVE-2026-45185
Details
  • SECURITY UPDATE: TLS close_notify use-after-free during active BDAT/CHUNKING transfer that can lead to unauthenticated remote code execution
    • debian/patches/CVE-2026-45185.patch: introduce tls_close_notify() that pops the BDAT receive layer, reinstalls plaintext receive callbacks via a new smtp_rcv_cleartext() helper, then re-pushes the BDAT layer before closing the TLS channel; switch the GnuTLS and OpenSSL receive paths from a bare tls_close() to tls_close_notify()
    • CVE-2026-45185
References

Affected packages

TuxCare:Ubuntu:20.04
exim4

Package

Name
exim4
Purl
pkg:deb/tuxcare/exim4?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.93-13ubuntu1.12+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"
exim4-base

Package

Name
exim4-base
Purl
pkg:deb/tuxcare/exim4-base?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.93-13ubuntu1.12+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"
exim4-config

Package

Name
exim4-config
Purl
pkg:deb/tuxcare/exim4-config?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.93-13ubuntu1.12+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"
exim4-daemon-heavy

Package

Name
exim4-daemon-heavy
Purl
pkg:deb/tuxcare/exim4-daemon-heavy?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.93-13ubuntu1.12+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"
exim4-daemon-light

Package

Name
exim4-daemon-light
Purl
pkg:deb/tuxcare/exim4-daemon-light?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.93-13ubuntu1.12+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"
exim4-dev

Package

Name
exim4-dev
Purl
pkg:deb/tuxcare/exim4-dev?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.93-13ubuntu1.12+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"
eximon4

Package

Name
eximon4
Purl
pkg:deb/tuxcare/eximon4?distro=ubuntu-20.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.93-13ubuntu1.12+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1781269872.json"