Dear Exim users and maintaers,
We are pleased to announce the availability of release 4.98 of Exim.
Thanks to everybody who tested release-candidates. There are no substantive changes since RC3
Security Changes:
* Fixed CVE-2024-39929 - Incorrect parsing of multiline rfc2231 header filename
This release also contains the previous fixes for CVE-2023-51766 in 4.97.1
New stuff we've added since 4.97:
* The dkim_status ACL condition may now be used in data ACLs
* The dkim_verbose logging control also enables logging of signing
* The dkim_timestamps signing option now accepts zero to include a current
timestamp but no expiry timestamp. Code by Simon Arlott; testsuite additions by jgh.
* The recipients_max main option is now expanded.
* Setting variables for "exim -be" can set a tainted value.
* A dns:fail event.
* The dsearch lookup supports search for a sub-path.
* Include mailtest utility for simple connection checking.
* Add SMTP WELLKNOWN extension.
* Sqlite3 can be used for the hints databases (vs. DBD, NDB, GBDM, TDB).
Add "USE_SQLITE = y" and "DBMLIB = -lsqlite3" in Local/Makefile, to override
the settings done in the OS/Makefile-<platform> file.
Notable changes:
* Fix TLS resumption for TLS-on-connect.
* Tighten up parsing of DKIM DNS records.
For other changes, please see the ChangeLog file. Where possible the
documentation has been marked up with changebars.
Exim 4.98 is available
* as tarball: https://ftp.exim.org/pub/exim/exim4
* directly via Git: https://git.exim.org/exim.git
tag exim-4.98
The signatures on the release tarballs should be,
* key ID 0xBCE58C8CE41F32DF
* Email: jgh@???
FTP site verification:
SIZE(00-sha256sums.txt)= 1180
SIZE(00-sha512sums.txt)= 1948
SIZE(00-sizes.txt)= 470
SIZE(exim-4.98.tar.bz2)= 2099901
SIZE(exim-4.98.tar.gz)= 2655731
SIZE(exim-4.98.tar.xz)= 1936984
SIZE(exim-html-4.98.tar.bz2)= 650008
SIZE(exim-html-4.98.tar.gz)= 1288570
SIZE(exim-html-4.98.tar.xz)= 575720
SIZE(exim-pdf-4.98.tar.bz2)= 2186363
SIZE(exim-pdf-4.98.tar.gz)= 2212291
SIZE(exim-pdf-4.98.tar.xz)= 2148892
SIZE(exim-postscript-4.98.tar.bz2)= 1150095
SIZE(exim-postscript-4.98.tar.gz)= 1548956
SIZE(exim-postscript-4.98.tar.xz)= 1145484
SHA2-256(00-sha256sums.txt)= d5a1d8a1dbaed4f26a17d57cf65f80011758898b502bcac0e4eb63a49c1add10
SHA2-256(00-sha512sums.txt)= 9387d3fd80115a55aa481695fc999a4fac1d35ed2e6f57adcfece8354f734935
SHA2-256(00-sizes.txt)= 6dfc5e4f305b9f1748f2d9a9bc2d16cedc2a6d77f788775a580c77e79eab29b2
SHA2-256(exim-4.98.tar.bz2)= acfd93f6e4a38e4887867614770ea062b2453ed93e355772adeae6c6598b0d92
SHA2-256(exim-4.98.tar.gz)= 28f2bc0943f3196760391501e7929ccdd49596fb4de93234453584616342c1c2
SHA2-256(exim-4.98.tar.xz)= 0ebc108a779f9293ba4b423c20818f9a3db79b60286d96abc6ba6b85a15852f7
SHA2-256(exim-html-4.98.tar.bz2)= 89a4f17a18461f7156d0f7779a292612a547cedb13e5eb10fc70b0973d0a1001
SHA2-256(exim-html-4.98.tar.gz)= b883d1fe3ad8586bc503c7bbb8a49feede29ff4a8b5de6eef44ce5c499cc3c7a
SHA2-256(exim-html-4.98.tar.xz)= 28434993c97f62df8384e5044b6484f0d211ea9eac8c556528ae7d706b08d9a0
SHA2-256(exim-pdf-4.98.tar.bz2)= 90def6b48a47d3dab0513dcb61b5a7c896eeca8f233b1d412d441b1067ca7e0d
SHA2-256(exim-pdf-4.98.tar.gz)= 2fb4331bfe7f48b20acf076e57b4b714a9531b2683e378bbca91858f488d203e
SHA2-256(exim-pdf-4.98.tar.xz)= a5db367be145dff4282566acafbfb00c6c5e4d6ec59a6243e762943bb24432ae
SHA2-256(exim-postscript-4.98.tar.bz2)= 8d405ef9024d72255534c7ab7af3da98d5e1a83acbf528d97cbddfb014e24a5c
SHA2-256(exim-postscript-4.98.tar.gz)= 55c868f72f5c4b041213b4bd9aa2090c68e74341efc1caf362fa3d634e787ddd
SHA2-256(exim-postscript-4.98.tar.xz)= 2e1f2497af25b30ac110efb5d1e3c21e8f40e82d16c76dacfbcf6275de6cd614
--
Bernard Quatermass
--
## subscription configuration (requires account):
##
https://lists.exim.org/mailman3/postorius/lists/exim-announce.lists.exim.org/
## unsubscribe (doesn't require an account):
## exim-announce-unsubscribe@???
## Exim details at
http://www.exim.org/
## Please use the Wiki with this list -
http://wiki.exim.org/
