CLSA-2026-1787322589

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1787322589.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1787322589
Upstream
CVE (2)
  • CVE-2026-66140
  • CVE-2026-66141
Published
2026-08-21T14:30:01Z
Modified
2026-10-26T09:31:42Z
Summary
exim: Fix of 2 CVEs
Details
  • CVE-2026-66140: fix directory traversal via mishandled queue-name arguments (local privilege escalation)
  • CVE-2026-66141: fix .forward privilege escalation via mishandled force_command for a pipe transport
References

Affected packages

TuxCare:CentOS:7
exim

Package

Name
exim
Purl
pkg:rpm/tuxcare/exim?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.97.1-1.el7.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1787322589.json"
exim-greylist

Package

Name
exim-greylist
Purl
pkg:rpm/tuxcare/exim-greylist?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.97.1-1.el7.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1787322589.json"
exim-mon

Package

Name
exim-mon
Purl
pkg:rpm/tuxcare/exim-mon?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.97.1-1.el7.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1787322589.json"
exim-mysql

Package

Name
exim-mysql
Purl
pkg:rpm/tuxcare/exim-mysql?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.97.1-1.el7.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1787322589.json"
exim-pgsql

Package

Name
exim-pgsql
Purl
pkg:rpm/tuxcare/exim-pgsql?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.97.1-1.el7.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1787322589.json"
exim-sysvinit

Package

Name
exim-sysvinit
Purl
pkg:rpm/tuxcare/exim-sysvinit?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.97.1-1.el7.tuxcare.els4

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1787322589.json"