Exim release 4.89 is now available from the primary download site:
- https://ftp.exim.org/pub/exim/exim4/exim-4.89.tar.xz
- https://ftp.exim.org/pub/exim/exim4/exim-4.89.tar.gz
- https://ftp.exim.org/pub/exim/exim4/exim-4.89.tar.bz2
Exim 4.89 is primarily a stabilisation release.
This release fixes a number of issues in CHUNKING support; per "README.UPDATING" inside the release, there is also a new util script which can try to repair undeliverable mails stuck in your queue as a result of some issues fixed in this release.
Proxy Protocol support now works with TLS-on-connect and is generally more robust; IDNA2008 support is now available. DKIM handling is more robust.
A number of crash bugs have been fixed; new debugging options are available; include files can now be specified with relative pathnames; release files are available using .xz compression, not just .gz & .bz2.
My thanks to Jeremy Harris and Heiko Schlittermann who have done the lion's share of the work for this release, and to everyone who has helped with bug-reports and testing: most especially, to those who endured multiple release candidates and patiently tried each one. Thank you!
Please note that we are seeing OpenSSL issues which require 1.0.2 minimum build up in our backlog for fixing after Exim 4.89, so if you are intending to stick with older OpenSSL releases for the time being, then Exim 4.89 is probably the last Exim release which will work with your unsupported-by-OpenSSL-project OpenSSL libraries.
Per our previous announcement: the Exim Project does not support use of Exim with versions of OpenSSL not supported by the OpenSSL project. OpenSSL release series 0.9.8, 1.0.0 and 1.0.1 are all now unsupported. OpenSSL 1.0.2 is an LTS release.
You can use GnuTLS. For OpenSSL, if you're using OS packages, keep using the OS packages. If you're building Exim from source, then you should be prepared to also keep your OpenSSL up-to-date too. The doc/ directory now contains a file "openssl.txt" which might be helpful.
The primary ftp server is in Cambridge, England. There is a list of mirrors in:
The master ftp server is ftp.exim.org, with content also available via both https and http on that same hostname.
The files are signed with the PGP key 0x4D1E900E14C1CC04, which has a uid "Phil Pennock pdp@exim.org". Please use your own discretion in assessing what trust paths you might have to this uid. Note that I have two signing sub-keys and have signed with both; if you have an ancient GnuPG release, you should get unimplemented warnings for one signature. If this causes you inability to verify, please let me know; but as long as you can verify with the other signature then this is expected behaviour.
The distribution contains an ASCII copy of the 4.89 manual and other documents. Other formats of the documentation are also available:-
- https://ftp.exim.org/pub/exim/exim4/exim-html-4.89.tar.xz
- https://ftp.exim.org/pub/exim/exim4/exim-pdf-4.89.tar.xz
- https://ftp.exim.org/pub/exim/exim4/exim-postscript-4.89.tar.xz
The .gz and .bz2 versions of these tarbundles are also available.
The ChangeLog for this, and several previous releases, is included in the distribution. Individual change log files are also available on the ftp site, the current one being:-
- https://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.89
- https://ftp.exim.org/pub/exim/ChangeLogs/ChangeLog-4.89.xz
Brief documentation for new features is available in the NewStuff file in the distribution. Individual NewStuff files are also available on the ftp site, the current one being:- - https://ftp.exim.org/pub/exim/ChangeLogs/NewStuff-4.89
- https://ftp.exim.org/pub/exim/ChangeLogs/NewStuff-4.89.xz
Release Checksums
SHA256(exim-4.89.tar.bz2)= 912f2ee03c8dba06a3a4c0ee40522d367e1b65dc59e38dfcc1f5d9eecff51ab0
SHA256(exim-4.89.tar.gz)= 0ecb90622fac9edea2670e25070a4d4a4879c3fb8541a0b96a880dfac86ccf1c
SHA256(exim-4.89.tar.xz)= 0c490a1ca97bbb22d6079d2896de19af48ac3af109ea5f307dbc6b49c66e9626
SHA256(exim-html-4.89.tar.bz2)= 5a5d4f715e651b65ed4ad69eded29b4752cd5105131cdcb724b165a6d943835b
SHA256(exim-html-4.89.tar.gz)= ed78562ac660ca0cc91761fdbfed8c48e7eefa2175f924ec7a001cc1995c084d
SHA256(exim-html-4.89.tar.xz)= b509284a9e92b80a4711490a00eb05dd2ec3dff6efff61d864005a287b4275af
SHA256(exim-pdf-4.89.tar.bz2)= 17d70ef5b2814f725633efcf339bcb49ac9564ecd648e0e3d010b5e43d6c167d
SHA256(exim-pdf-4.89.tar.gz)= efd16d9c1cfba30f07540d893f7d63bfbe1920218e220c0ef07bcbd10b1e1e6a
SHA256(exim-pdf-4.89.tar.xz)= 5eab61cc5f3670bccef786f99835427468c9e91f920acbdd6ed625dbb4cc4098
SHA256(exim-postscript-4.89.tar.bz2)= 88ac7a556520e1ba54337347e5c8e68f54de1b9d4e822b1b60e669b597da253d
SHA256(exim-postscript-4.89.tar.gz)= 82eb7fc60c6f9a658894e25676936398563a82106e63b639efb8888a342037e1
SHA256(exim-postscript-4.89.tar.xz)= 8ff8fcc49798506aad9c587686e3d5ceb22866fa4c2ba66d3a7fb258b862da8c
SIZE(exim-4.89.tar.bz2)= 1844430
SIZE(exim-4.89.tar.gz)= 2331598
SIZE(exim-4.89.tar.xz)= 1686652
-Phil Pennock, pp The Exim Maintainers.
GITHUB NOTE:
The tarballs offered automatically by GitHub are of the entire development repository, which does not reflect the release tarballs and has a different directory layout. Please use the PGP-signed release tarballs.