Linux
exim4 security updates
Patch Radar has 123 security fixes for exim4, closing 51 CVEs, 1 of which is being exploited. The newest security fix is exim4 4.97-4ubuntu4.8, released September 29, 2026.
1 exploited CVEs
Latest version
n/a
Release date not known
Security fixes
123
On record in Patch Radar
CVEs
51
Closed by those fixes
Exploited
1
Vendor report or CISA KEV
Security fixes, newest first
| Priority | Fix | Release | Fixed in | CVEs | Exploited | Released |
|---|---|---|---|---|---|---|
| High | exim4 4.97-4ubuntu4.8 | Ubuntu 24.04.5 LTS (noble) | 4.97-4ubuntu4.8 | 3 | Sep 29, 2026 | |
| High | exim4 4.95-4ubuntu2.12 | Ubuntu 22.04.1 LTS (jammy) | 4.95-4ubuntu2.12 | 3 | Sep 29, 2026 | |
| High | DEBIAN-CVE-2026-94056 | Debian 14 | 4.100.1-1 | 1 | Sep 25, 2026 | |
| High | DEBIAN-CVE-2026-94056 | Debian 13.5 (trixie) | 4.98.2-1+deb13u5 | 1 | Sep 25, 2026 | |
| Routine | DEBIAN-CVE-2026-94055 | Debian 14 | 4.100.1-1 | 1 | Sep 25, 2026 | |
| Routine | DEBIAN-CVE-2026-94054 | Debian 14 | 4.100.1-1 | 1 | Sep 25, 2026 | |
| Routine | DEBIAN-CVE-2026-94054 | Debian 13.5 (trixie) | 4.98.2-1+deb13u5 | 1 | Sep 25, 2026 | |
| Routine | DEBIAN-CVE-2026-94057 | Debian 14 | 4.100.1-1 | 1 | Sep 25, 2026 | |
| Routine | DEBIAN-CVE-2026-94057 | Debian 13.5 (trixie) | 4.98.2-1+deb13u5 | 1 | Sep 25, 2026 | |
| High | exim4 4.99.1-1ubuntu1.5 | Ubuntu 26.04.1 LTS (resolute) | 4.99.1-1ubuntu1.5 | 4 | Sep 19, 2026 | |
| High | exim4 4.95-4ubuntu2.11 | Ubuntu 22.04.1 LTS (jammy) | 4.95-4ubuntu2.11 | 2 | Jul 31, 2026 | |
| High | exim4 4.97-4ubuntu4.7 | Ubuntu 24.04.5 LTS (noble) | 4.97-4ubuntu4.7 | 2 | Jul 31, 2026 | |
| High | DEBIAN-CVE-2026-66140 | Debian 13.5 (trixie) | 4.98.2-1+deb13u4 | 1 | Jul 25, 2026 | |
| High | DEBIAN-CVE-2026-66140 | Debian 14 | 4.99.4-2 | 1 | Jul 25, 2026 | |
| High | DEBIAN-CVE-2026-66141 | Debian 13.5 (trixie) | 4.98.2-1+deb13u4 | 1 | Jul 25, 2026 | |
| High | DEBIAN-CVE-2026-66141 | Debian 14 | 4.99.4-2 | 1 | Jul 25, 2026 | |
| High | exim4 4.99.1-1ubuntu1.4 | Ubuntu 26.04.1 LTS (resolute) | 4.99.1-1ubuntu1.4 | 2 | Jul 23, 2026 | |
| Routine | exim4 4.98.2-1ubuntu2.3 | Ubuntu 25.10 (questing) | 4.98.2-1ubuntu2.3 | 1 | Jun 24, 2026 | |
| Routine | exim4 4.97-4ubuntu4.6 | Ubuntu 24.04.5 LTS (noble) | 4.97-4ubuntu4.6 | 1 | Jun 24, 2026 | |
| Routine | exim4 4.95-4ubuntu2.9 | Ubuntu 22.04.1 LTS (jammy) | 4.95-4ubuntu2.9 | 1 | Jun 24, 2026 | |
| Urgent | exim4 4.93-13ubuntu1.12+esm1 | Ubuntu 20.04 LTS (focal) | 4.93-13ubuntu1.12+esm1 | 5 | Jun 24, 2026 | |
| Routine | exim4 4.90.1-1ubuntu1.10+esm6 | Ubuntu 18.04.6 LTS (bionic) | 4.90.1-1ubuntu1.10+esm6 | 1 | Jun 24, 2026 | |
| Routine | DEBIAN-CVE-2026-48840 | Debian 12.15 (bookworm) | 4.96-15+deb12u10 | 1 | Jun 24, 2026 | |
| Routine | DEBIAN-CVE-2026-48840 | Debian 13.5 (trixie) | 4.98.2-1+deb13u3 | 1 | Jun 24, 2026 | |
| Routine | DEBIAN-CVE-2026-48840 | Debian 14 | 4.99.3-2 | 1 | Jun 24, 2026 | |
| Routine | exim4 4.99.1-1ubuntu1.3 | Ubuntu 26.04.1 LTS (resolute) | 4.99.1-1ubuntu1.3 | 1 | May 29, 2026 | |
| Urgent | exim4 4.98.2-1ubuntu2.2 | Ubuntu 25.10 (questing) | 4.98.2-1ubuntu2.2 | 1 | May 27, 2026 | |
| Urgent | exim4 4.95-4ubuntu2.8 | Ubuntu 22.04.1 LTS (jammy) | 4.95-4ubuntu2.8 | 1 | May 27, 2026 | |
| Urgent | exim4 4.97-4ubuntu4.5 | Ubuntu 24.04.5 LTS (noble) | 4.97-4ubuntu4.5 | 1 | May 27, 2026 | |
| Urgent | exim4 4.98.2-1ubuntu2.1 | Ubuntu 25.10 (questing) | 4.98.2-1ubuntu2.1 | 3 | May 15, 2026 | |
| Urgent | exim4 4.97-4ubuntu4.4 | Ubuntu 24.04.5 LTS (noble) | 4.97-4ubuntu4.4 | 3 | May 15, 2026 | |
| Urgent | exim4 4.95-4ubuntu2.7 | Ubuntu 22.04.1 LTS (jammy) | 4.95-4ubuntu2.7 | 3 | May 15, 2026 | |
| Urgent | DEBIAN-CVE-2026-45185 | Debian 12.15 (bookworm) | 4.96-15+deb12u9 | 1 | May 15, 2026 | |
| Urgent | DEBIAN-CVE-2026-45185 | Debian 13.5 (trixie) | 4.98.2-1+deb13u2 | 1 | May 15, 2026 | |
| Urgent | DEBIAN-CVE-2026-45185 | Debian 14 | 4.99.2-2 | 1 | May 15, 2026 | |
| Urgent | DEBIAN-CVE-2026-40687 | Debian 12.15 (bookworm) | 4.96-15+deb12u9 | 1 | May 15, 2026 | |
| Urgent | DEBIAN-CVE-2026-40687 | Debian 13.5 (trixie) | 4.98.2-1+deb13u2 | 1 | May 15, 2026 | |
| Urgent | DEBIAN-CVE-2026-40687 | Debian 14 | 4.99.2-1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-40684 | Debian 12.15 (bookworm) | 4.96-15+deb12u9 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-40684 | Debian 13.5 (trixie) | 4.98.2-1+deb13u2 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-40684 | Debian 14 | 4.99.2-1 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-40685 | Debian 12.15 (bookworm) | 4.96-15+deb12u9 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-40685 | Debian 13.5 (trixie) | 4.98.2-1+deb13u2 | 1 | May 15, 2026 | |
| High | DEBIAN-CVE-2026-40685 | Debian 14 | 4.99.2-1 | 1 | May 15, 2026 | |
| Routine | DEBIAN-CVE-2026-40686 | Debian 12.15 (bookworm) | 4.96-15+deb12u9 | 1 | May 15, 2026 | |
| Routine | DEBIAN-CVE-2026-40686 | Debian 13.5 (trixie) | 4.98.2-1+deb13u2 | 1 | May 15, 2026 | |
| Routine | DEBIAN-CVE-2026-40686 | Debian 14 | 4.99.2-1 | 1 | May 15, 2026 | |
| Urgent | exim4 4.99.1-1ubuntu1.2 | Ubuntu 26.04.1 LTS (resolute) | 4.99.1-1ubuntu1.2 | 1 | May 12, 2026 | |
| Urgent | exim4 4.99.1-1ubuntu1.1 | Ubuntu 26.04.1 LTS (resolute) | 4.99.1-1ubuntu1.1 | 3 | Apr 29, 2026 | |
| High | exim4 4.98-1ubuntu2.1 | Ubuntu 24.10 (oracular) | 4.98-1ubuntu2.1 | 1 | Jan 16, 2026 | |
| Routine | exim4 4.97-3 | Ubuntu 25.04 (plucky) | 4.97-3 | 1 | Jan 16, 2026 | |
| Routine | exim4 4.97-3 | Ubuntu 24.10 (oracular) | 4.97-3 | 1 | Jan 16, 2026 | |
| Urgent | DEBIAN-CVE-2025-67896 | Debian 14 | 4.99-7 | 1 | Dec 14, 2025 | |
| High | DEBIAN-CVE-2025-30232 | Debian 13.5 (trixie) | 4.98.1-2 | 1 | Mar 28, 2025 | |
| High | DEBIAN-CVE-2025-30232 | Debian 14 | 4.98.1-2 | 1 | Mar 28, 2025 | |
| High | exim4 4.97-4ubuntu4.3 | Ubuntu 24.04.5 LTS (noble) | 4.97-4ubuntu4.3 | 1 | Mar 26, 2025 | |
| High | DSA-5887-1 | Debian 12.15 (bookworm) | 4.96-15+deb12u7 | 1 | Mar 26, 2025 | |
| Urgent | DEBIAN-CVE-2025-26794 | Debian 13.5 (trixie) | 4.98-4 | 1 | Feb 21, 2025 | |
| Urgent | DEBIAN-CVE-2025-26794 | Debian 14 | 4.98-4 | 1 | Feb 21, 2025 | |
| Routine | DLA-3938-1 | Debian 11.6 (bullseye) | 4.94.2-7+deb11u4 | 1 | Oct 28, 2024 | |
| Routine | DSA-5728-1 | Debian 11.6 (bullseye) | 4.94.2-7+deb11u3 | 1 | Jul 10, 2024 | |
| Routine | DSA-5728-1 | Debian 12.15 (bookworm) | 4.96-15+deb12u5 | 1 | Jul 10, 2024 | |
| Routine | DEBIAN-CVE-2024-39929 | Debian 13.5 (trixie) | 4.98~RC3-2 | 1 | Jul 4, 2024 | |
| Routine | DEBIAN-CVE-2024-39929 | Debian 14 | 4.98~RC3-2 | 1 | Jul 4, 2024 | |
| Routine | exim4 4.90.1-1ubuntu1.10+esm5 | Ubuntu 18.04.6 LTS (bionic) | 4.90.1-1ubuntu1.10+esm5 | 1 | Jul 4, 2024 | |
| Routine | exim4 4.93-13ubuntu1.12 | Ubuntu 20.04 LTS (focal) | 4.93-13ubuntu1.12 | 1 | Jul 4, 2024 | |
| Routine | exim4 4.95-4ubuntu2.6 | Ubuntu 22.04.1 LTS (jammy) | 4.95-4ubuntu2.6 | 1 | Jul 4, 2024 | |
| Routine | exim4 4.97-4ubuntu4.1 | Ubuntu 24.04.5 LTS (noble) | 4.97-4ubuntu4.1 | 1 | Jul 4, 2024 | |
| Urgent | DEBIAN-CVE-2023-42116 | Debian 12.15 (bookworm) | 4.96-15+deb12u2 | 1 | May 3, 2024 | |
| Urgent | DEBIAN-CVE-2023-42116 | Debian 13.5 (trixie) | 4.97~RC1-2 | 1 | May 3, 2024 | |
| Urgent | DEBIAN-CVE-2023-42116 | Debian 14 | 4.97~RC1-2 | 1 | May 3, 2024 | |
| High | DEBIAN-CVE-2023-42115 | Debian 12.15 (bookworm) | 4.96-15+deb12u2 | 1 | May 3, 2024 | |
| High | DEBIAN-CVE-2023-42115 | Debian 13.5 (trixie) | 4.97~RC1-2 | 1 | May 3, 2024 | |
| High | DEBIAN-CVE-2023-42115 | Debian 14 | 4.97~RC1-2 | 1 | May 3, 2024 | |
| High | DEBIAN-CVE-2023-42117 | Debian 12.15 (bookworm) | 4.96-15+deb12u3 | 1 | May 3, 2024 | |
| High | DEBIAN-CVE-2023-42117 | Debian 13.5 (trixie) | 4.97~RC2-2 | 1 | May 3, 2024 | |
| High | DEBIAN-CVE-2023-42117 | Debian 14 | 4.97~RC2-2 | 1 | May 3, 2024 | |
| Routine | DEBIAN-CVE-2023-42119 | Debian 12.15 (bookworm) | 4.96-15+deb12u3 | 1 | May 3, 2024 | |
| Routine | DEBIAN-CVE-2023-42119 | Debian 13.5 (trixie) | 4.97~RC2-2 | 1 | May 3, 2024 | |
| Routine | DEBIAN-CVE-2023-42119 | Debian 14 | 4.97~RC2-2 | 1 | May 3, 2024 | |
| Routine | DEBIAN-CVE-2023-42114 | Debian 13.5 (trixie) | 4.97~RC1-2 | 1 | May 3, 2024 | |
| Routine | DEBIAN-CVE-2023-42114 | Debian 14 | 4.97~RC1-2 | 1 | May 3, 2024 | |
| Routine | DSA-5597-1 | Debian 11.6 (bullseye) | 4.94.2-7+deb11u2 | 1 | Jan 4, 2024 | |
| Routine | DSA-5597-1 | Debian 12.15 (bookworm) | 4.96-15+deb12u4 | 1 | Jan 4, 2024 | |
| Routine | DEBIAN-CVE-2023-51766 | Debian 13.5 (trixie) | 4.97-3 | 1 | Dec 24, 2023 | |
| Routine | DEBIAN-CVE-2023-51766 | Debian 14 | 4.97-3 | 1 | Dec 24, 2023 | |
| Routine | exim4 4.90.1-1ubuntu1.10+esm3 | Ubuntu 18.04.6 LTS (bionic) | 4.90.1-1ubuntu1.10+esm3 | 1 | Dec 23, 2023 | |
| Routine | exim4 4.93-13ubuntu1.10 | Ubuntu 20.04 LTS (focal) | 4.93-13ubuntu1.10 | 1 | Dec 23, 2023 | |
| Routine | exim4 4.95-4ubuntu2.5 | Ubuntu 22.04.1 LTS (jammy) | 4.95-4ubuntu2.5 | 1 | Dec 23, 2023 | |
| Routine | DSA-5512-1 | Debian 11.6 (bullseye) | 4.94.2-7+deb11u1 | 1 | Oct 2, 2023 | |
| Routine | DSA-5512-1 | Debian 12.15 (bookworm) | 4.96-15+deb12u2 | 1 | Oct 2, 2023 | |
| Urgent | exim4 4.93-13ubuntu1.8 | Ubuntu 20.04 LTS (focal) | 4.93-13ubuntu1.8 | 3 | Sep 27, 2023 | |
| Urgent | exim4 4.95-4ubuntu2.3 | Ubuntu 22.04.1 LTS (jammy) | 4.95-4ubuntu2.3 | 3 | Sep 27, 2023 | |
| Urgent | exim4 4.90.1-1ubuntu1.10+esm1 | Ubuntu 18.04.6 LTS (bionic) | 4.90.1-1ubuntu1.10+esm1 | 2 | Sep 27, 2023 | |
| High | exim4 4.90.1-1ubuntu1.10+esm2 | Ubuntu 18.04.6 LTS (bionic) | 4.90.1-1ubuntu1.10+esm2 | 2 | Sep 27, 2023 | |
| High | exim4 4.93-13ubuntu1.9 | Ubuntu 20.04 LTS (focal) | 4.93-13ubuntu1.9 | 2 | Sep 27, 2023 | |
| High | exim4 4.95-4ubuntu2.4 | Ubuntu 22.04.1 LTS (jammy) | 4.95-4ubuntu2.4 | 2 | Sep 27, 2023 | |
| Urgent | DEBIAN-CVE-2022-3620 | Debian 12.15 (bookworm) | 4.96-7 | 1 | Oct 20, 2022 | |
| Urgent | DEBIAN-CVE-2022-3620 | Debian 13.5 (trixie) | 4.96-7 | 1 | Oct 20, 2022 | |
| Urgent | DEBIAN-CVE-2022-3620 | Debian 14 | 4.96-7 | 1 | Oct 20, 2022 |
Showing the newest 100 of 123 fixes.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.