Exim 4.95 released

--===============1693783551==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="+sAIb9kUpRs4RdLL"
Content-Disposition: inline


--+sAIb9kUpRs4RdLL
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Dear Exim users and maintainers,

we're proud to announce the release of Exim 4.95.

New stuff we've added since 4.94:

- From previous experimental support:
  - fast-ramp queue run
  - native SRS
  - TLS resumption
  - LMDB lookups with single key
- New:
  - smtp transport option "message_linelength_limit"
  - optionally ignore lookup caches
  - quota checking for appendfile transport during message reception
  - sqlite lookups allow a "file=3D<path>" option
  - lsearch lookups allow a "ret=3Dfull" option
  - command line option for the notifier socket
  - faster TLS startup
  - new main config option "proxy_protocol_timeout"
  - expand "smtp_accept_max_per_connection"
  - log selector "queue_size_exclusive"
  - main config option "smtp_backlog_monitor"
  - main config option "hosts_require_helo"
  - main config option "allow_insecure_tainted_data"
- Removed:
  - support for MacOS

All fixes from the 4.94.2+fixes branch (this includes the "21 nails" CVEs) =
are
included too.

If you upgrade from previous versions <4.94: the new taint checks are likel=
y to
make your runtime configuration unusable. Read about the mitigation via the
"allow_insecure_tainted_data" first or make your configuration "taint check
proof".

If you upgrade from 4.94.2, nothing should break.

For those who used 4.95-RC2, a list changes that were introduced since RC2:

    * 780ea2a5c - OpenBSD: disable compiler-time param checking for string_=
sprintf() etc (8 days ago) <Jeremy Harris>
    * 8b78698fa - Docs: fix closed-mailinglist example (8 days ago) <Jeremy=
 Harris>
    * 8f0d0a313 - DCC: fix loop expression (2 weeks ago) <Jeremy Harris>
    * 48505c2b8 - TLS: build dependency for LibreSSL (2 weeks ago) <Renaud =
Allard>
    * 6c706bde1 - Docs: tidying (3 weeks ago) <Jeremy Harris>
    * 889894461 - Fix validation of domain-literals in Message_ID: headers.=
  Bug 2805 (3 weeks ago) <Jeremy Harris>
    * 8dcd5efb1 - Avoid using CLOCK_MONOTONIC for $received_time.  Bug 2615=
 (4 weeks ago) <Jeremy Harris>

Exim 4.95 is available

- as tarball:        https://ftp.exim.org/pub/exim/exim4
- directly via Git:  https://git.exim.org/exim.git
                     tag exim-4.95

The tarball checksums are signed using the same GPG key as I used to
sign this message (Key-ID: D0BFD6B9ECA5694A6F149DCEAF4CC676A6B6C142),
as the tag and tagged commit are.

Thank you and all contributors for your support. Especially thanks to
Jeremy, as he does the vast majority of coding and support.

    Best regards from Dresden/Germany
    Viele Gr=C3=BC=C3=9Fe aus Dresden
    Heiko Schlittermann
--
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -

--+sAIb9kUpRs4RdLL
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAABCgAdFiEE0L/WueylaUpvFJ3Or0zGdqa2wUIFAmFThuUACgkQr0zGdqa2
wUJbyQgAld/7Mi4ghf4esbWEkh/glaOgyT8POVMeJyAWh4b8LuOsd9DZAYHs4dxm
AeaDw4myp6uWgBCG9nkDf1hygwZz0/ib0LzWNKK803g/AJ1+f8s5rozVVnRsf3nB
2SDUn1UNLf9893LIepWyDmybQaVNYlBxVFNpN9mDld50dXP8EMLvpViMT1eY/C6I
qqBNG7CHVr60o5/P6k2ACj643XCsOO0/GRFrluZgjZcjTyIsggdL5T6MnNvHY0JN
ai0KCj/6p7Z3kzdveccFUuqqWKh1HKeyQKVLcndIRMCsCsmDpJzSLJQO0tmPc3aG
3+wdTr0PaTN8j6Z2OQntmG8AieODvQ==
=tHh6
-----END PGP SIGNATURE-----

--+sAIb9kUpRs4RdLL--


--===============1693783551==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
## List details at https://lists.exim.org/mailman/listinfo/exim-announce Exim details at http://www.exim.org/ ##

--===============1693783551==--