I have built, signed and uploaded RC3 of Exim 4.90 to the ftp site:
ftp://ftp.exim.org/pub/exim/exim4/test/
Sha256 sums:
bf4ff09ba8d045e01dc559bddc50fb21888ef861d4fa59ff6c858236f3877092 exim-4.90_RC3.tar.bz2
8e95198b19d7a1698ee1dd71415f01172cc87ccdcd8edfb5cc5fdf4f4c09259a exim-4.90_RC3.tar.gz
cf3066564b1ddff84beb2f25d3c86d6e04c0d5800e6e4b8bff7997fcf5f00d37 exim-4.90_RC3.tar.xz
8551592f9425eca499521c6b977e67c522d557fc0c7e48a5797b5a604129eeb0 exim-pdf-4.90_RC3.tar.bz2
5a5ca4b754b62c79b45d74cf14c6f22124c22e042bec03c1c8ef2a956dfdea45 exim-pdf-4.90_RC3.tar.gz
835e9c50e58924e944b5dc93cef92640f5b4f57eb596c745abd52197e9e7e5f6 exim-pdf-4.90_RC3.tar.xz
765f571c4c9df2aaaa43a2ffd3b4c37bbe504daf84f17d7848eba90553769802 exim-postscript-4.90_RC3.tar.bz2
329522a67ab362d4bce1b7afbd974dcbd5c94ca43aaef7259f98ad0f848b386c exim-postscript-4.90_RC3.tar.gz
b403fc13589463a2a5701e8eb8b2abe3d74d64fe051c614324caf68ac84e0db0 exim-postscript-4.90_RC3.tar.xz
Only stopper bugs will be accepted between now and final release of 4.90.
Possibly this will be the final RC.
Changes of interest since RC1:
Bug 2199: Fix a use-after-free while reading smtp input for header lines.
A crafted sequence of BDAT commands could result in in-use memory beeing
freed. CVE-2017-16943
Bug 2201: Fix checking for leading-dot on a line during headers reading
from SMTP input. Previously it was always done; now only done for DATA
and not BDAT commands. CVE-2017-16944.
Please report issues here in the exim-dev or
exim-users mailinglist, or by raising bugs
on
http://bugs.exim/org
- --
Cheers,
Jeremy
