I have uploaded Exim 4.89 RC7 to:
https://ftp.exim.org/pub/exim/exim4/test/
Over RC6, this fixes a few different crash bugs and fixes ${extract }
corrupting an enclosing ${reduce } $value.
Please note that we are seeing OpenSSL issues which require 1.0.2
minimum build up in our backlog for fixing after Exim 4.89, so if you
are intending to stick with older OpenSSL releases for the time being,
then Exim 4.89 is probably the last Exim release which will work with
your unsupported-by-OpenSSL-project OpenSSL libraries. You thus have a
Very Strong Interest in ensuring that 4.89 works for you.
Please test this RC.
If you are testing and experience a segfault still, then after I finish
crying like a baby, I'm going to ask for debugging information.
So please build with CFLAGS+=-ggdb and do not strip the binary; if you
experience crashes, look into what's needed to enable setuid programs to
generate core files on your platform, and then we'll want, minimally, a
backtrace.
Additionally, if you experience issues, then setting the new
main-section configuration option "debug_store", which is a bool, may
turn some issues into assertion failures (so Exim will still crash, but
closer to the root cause).
At this point, we're really close; some of the issues fixed in 4.89 are
issues introduced in 4.88, others are potentially long-standing issues.
https://git.exim.org/exim.git/blob/exim-4_89_RC6:/src/README.UPDATING
https://git.exim.org/exim.git/blob/exim-4_89_RC6:/doc/doc-txt/ChangeLog
https://git.exim.org/exim.git/blob/exim-4_89_RC6:/doc/doc-txt/NewStuff
https://git.exim.org/exim.git/blob/exim-4_89_RC6:/doc/doc-txt/openssl.txt
The files are signed with the PGP key 0x4D1E900E14C1CC04, which has a
uid "Phil Pennock <pdp@???>". Please use your own discretion in
assessing what trust paths you might have to this uid. Note that I have
two signing sub-keys and have signed with both; if you have an ancient
GnuPG release, you should get unimplemented warnings for one signature.
If this causes you inability to verify, please let me know; but if you
can verify with the other signature then that's expected behavior.
Checksums below. Detached PGP signatures in .asc files are available
alongside the tarballs.
Please report issues in reply to this email.
Thank you for your testing and feedback,
-Phil Pennock, pp The Exim Maintainers.
SHA256(exim-4.89_RC7.tar.bz2)= 5231996bc3e5ac46ab16322f3fa4e2cc75f4d24e83ce5b30fa4395ab9dad71fb
SHA256(exim-4.89_RC7.tar.gz)= 4fa8b0cfef6487229b27a24fbc55b28bef561d013681261a219028f844ccc5ef
SHA256(exim-4.89_RC7.tar.xz)= 0cffd4b7afa45523fc2f2f5fecf8056d098abcb3f8608a1b8688ffb1f350f137
SHA256(exim-html-4.89_RC7.tar.bz2)= afc71c46a9a19727a63ce60a5410b6bcced27c6643f67290655cde8439e5d0b7
SHA256(exim-html-4.89_RC7.tar.gz)= 228a0c863d6a8346b25f57268062f1b6e7ada5374cd41bbe644be50e5fdb18d7
SHA256(exim-html-4.89_RC7.tar.xz)= ccc9dba152de57676a7d5e3421d0534346098da44e11f22a626961dceb9778cc
SHA256(exim-pdf-4.89_RC7.tar.bz2)= e654f1c07bd9fc3018721d67bc8156df2b6fd452d7b8392c1bc1277a0ad63243
SHA256(exim-pdf-4.89_RC7.tar.gz)= 9edd0d853224fe61428f7de25605ff0382c53ec52d95088c77bd814b8bd5ce44
SHA256(exim-pdf-4.89_RC7.tar.xz)= a9dbbd1f7f7310c21171cfc93c9359583030515936a4a91991b7675431cb459b
SHA256(exim-postscript-4.89_RC7.tar.bz2)= e997f059e6f4c3c810f726a35a209e0b490d7514ed3551297d0ede1f597975a0
SHA256(exim-postscript-4.89_RC7.tar.gz)= 8261457a94a29ae962a3a14860c80f063896841b2135be00ef99db64609de660
SHA256(exim-postscript-4.89_RC7.tar.xz)= e44698bf11695b890d3cd88c1f399b271a2501ea1b455dc318bd6dad184a67f1
SIZE(exim-4.89_RC7.tar.bz2)= 1843600
SIZE(exim-4.89_RC7.tar.gz)= 2331545
SIZE(exim-4.89_RC7.tar.xz)= 1686524
