Exim 4.99.1 Released (security release)

Heiko Schlittermann via Exim-announce <[email protected]> Wed, 17 Dec 2025 16:15:48 +0100
Newsgroups gmane.mail.exim.announce
Organization schlittermann -- internet & unix support
Message-ID <[email protected]>
--===============7709109450834861181==
Content-Type: multipart/signed; micalg=pgp-sha512;
	protocol="application/pgp-signature"; boundary="5qBSAbWcBT2/Ott0"
Content-Disposition: inline


--5qBSAbWcBT2/Ott0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Dear Exim users and maintainers,

we are pleased to announce the availability of release 4.99.1 of Exim.

This is a security release. It fixes CVE-2025-67896 (aka
EXIM-Security-2025-12-09.1), which was introduced with 4.99. Older Exim
versions may or may not be vulnerable and are not activly maintained
anymore by the Exim maintainers. (To the best of our knowledge, 4.98.1
should be safe.)

Configurations using SQlite for lookups and hintdb were vulnerable.
Details: https://code.exim.org/exim/exim/src/branch/exim-4.99+fixes/doc/doc=
-txt/exim-security-2025-12-09.1/report.txt

Exim 4.99.1 is available:

 * as tarball
   * https://ftp.exim.org/pub/exim/exim4/
   * https://code.exim.org/exim/exim/releases

 * directly from Git: https://code.exim.org/exim/exim
   tag: exim-4.99.1

The signatures on the release tarballs and Git tag should be

 *  The release files are signed by key DD98D92359DE9E3C2663F291697F0EDD680=
99F6F
    "Heiko Schlittermann (Dresden) <[email protected]>"
    aka "Heiko Schlittermann (Exim MTA Maintainer) <[email protected]>"

    Best regards from Dresden/Germany
    Viele Gr=C3=BC=C3=9Fe aus Dresden
    Heiko Schlittermann
--
 SCHLITTERMANN.de ---------------------------- internet & unix support -
 Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} -
 gnupg encrypted messages are welcome --------------- key ID: F69376CE -

--5qBSAbWcBT2/Ott0
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=epCT
-----END PGP SIGNATURE-----

--5qBSAbWcBT2/Ott0--

--===============7709109450834861181==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-announce.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

--===============7709109450834861181==--