Exim 4.100-RC3 released

Bernard Quatermass via Exim-announce <[email protected]> Thu, 13 Aug 2026 11:59:39 +0100
Newsgroups	gmane.mail.exim.announce,gmane.mail.exim.user
Message-ID	<[email protected]>
Hi everybody,

Time for another RC (are we there yet ?)

Thanks to everyone who commented on the release candidates so far.

This release candidate v4.100-RC3 is available as

  * tarball: https://ftp.exim.org/pub/exim/exim4/test
  * directly from Git: https://code.exim.org/exim/exim
    tag: exim-4.100-RC3

The signatures on the release candidate tarballs should be

  *  key ID 0xBCE58C8CE41F32DF
     Email: [email protected]

Please test and give feedback on the RC so that we can shake out issues before 4.100 goes official.

The sourcebase is now closed for feature additions at this point in the release process.


  * Changes since 4.100RC2

Fixes.

  * Extend musl dns OOB read fix
  * Routing: avoid error on require_files bad directory
  * Docs: add note on .forward file access privs
  * Docs: reword "filter" expansion section
  * Docs: clarify exim-filter "mail" command recipient

   --

Reminder of Forthcoming Release Procedures Changes

Following the release of 4.100 we will change to releasing only 4.yyy and 4.yyy.zz
releases on the master branch.

Intermediate work such as general bug fixing and feature enhancement will
move to the 4.next branch.  We will endeavour to apply any .zz security
fixes to the 4.next branch in a timely manner though there may be some lag.

Release candidates for 4.yyy+1 (4.101 onwards) will be tagged on the 4.next branch.

   --


New stuff added since 4.99

  1. Lookups "psl" and "regdom" for, respectively, the public suffix or the
     registered domain, given a domain and a Public Suffix List file.

  2. EXPERIMENTAL_DMARC_NATIVE optional build feature.  See the experimental.spec
     file.

  3. Log selectors "spf", "spf_verbose", "dmarc", "dmarc_verbose", "dsn".

  4. Commandline option "-bI:modules" for listing installed dynamic-load modules.

  5. Debug channels "start", "regex" and "macro".

  6. The exiwhat utility now includes, on the daemon process line, counts for
     smtp and queue-run children.

  7. Main config option "bounce_charset", for setting Content-type: headers.

  8. Event "proc:deliver".

  9. Commandline option "-oDSN" for DSN options on commandline sourced messages.

10. Nongreedy wildcards for local_parts affixes.

11. Main config option "queue_run_order", obsoleting "queue_run_in_order".

12. The redirection router options "forbid_*" and "allow_filter" are now
     expanded before use.

13. Sieve filtering now supports the "body" extension (RFC 5173).

14. Main config option "tls_eccurve" now accepts a groups tuple list.
      Also, new smtp transport option "tls_eccurve".

15. Smtp transport option "protocol" is now expanded.


Removed items since 4.99

* removed obsolete malware scanners
* * f-prot6
* * f-prot6d
* * sophie
* * drweb
* * f-secur
* * aveserver
* * kavdaemon
* * mksd

* removed Interbase support
* removed Brightmail support

   --

Security related.

This candidate contains all the previous fixes issues released in 4.99.1 through 4.99.5

   --

Notable bugfixes include

* Expansion-test mode with debug (exim -d -be) now shows macro expansions.
* Fix local deliveries. A mistaken optimisation done for 4.99 caused
       excessive retries on defers
* Fix radius expansion condition
* Fix use of a verify held-open connection
* Fix DNS lookups from perl on nonstandard port
* Fix DMARC for empty envelope senders
* Fix GnuTLS hostname verify of a server certificate with a zero-length Subject
* Various compiler quietening
* Update GPL doc references
* clear $spam_* variables on SMTP RST
* Proxy Protocol: add timeout guard to V2 input.  Bug 2957
* Proxy Protocol: move startup before remote-host policy checks.  Bug 3221
* DMARC: native implementation: use a-label of 5322.From
* Reject tainted format for internal printf

Please refer to the ChangeLog file for a complete list.


File Verification:



SIZE(00-sha256sums.txt)= 1869
SIZE(00-sha512sums.txt)= 3021
SIZE(00-sizes.txt)= 798
SIZE(exim-4.100-RC3.tar.bz2)= 2183608
SIZE(exim-4.100-RC3.tar.gz)= 2751418
SIZE(exim-4.100-RC3.tar.xz)= 2007760
SIZE(exim-html-4.100-RC3.tar.bz2)= 651053
SIZE(exim-html-4.100-RC3.tar.gz)= 901257
SIZE(exim-html-4.100-RC3.tar.xz)= 639556
SIZE(exim-info-4.100-RC3.tar.bz2)= 485340
SIZE(exim-info-4.100-RC3.tar.gz)= 653795
SIZE(exim-info-4.100-RC3.tar.xz)= 487072
SIZE(exim-pdf-4.100-RC3.tar.bz2)= 2219608
SIZE(exim-pdf-4.100-RC3.tar.gz)= 2250793
SIZE(exim-pdf-4.100-RC3.tar.xz)= 2183204
SIZE(exim-postscript-4.100-RC3.tar.bz2)= 1171847
SIZE(exim-postscript-4.100-RC3.tar.gz)= 1572710
SIZE(exim-postscript-4.100-RC3.tar.xz)= 1161876
SIZE(exim-texinfo-4.100-RC3.tar.bz2)= 459591
SIZE(exim-texinfo-4.100-RC3.tar.gz)= 614535
SIZE(exim-texinfo-4.100-RC3.tar.xz)= 462128

SHA2-256(00-sha256sums.txt)= 50568fe43ffb90c92c91126894c21dd1ec9077d27f7d9bfc6f0f9f31483e6ca3
SHA2-256(00-sha512sums.txt)= 288ed5a01d919f0ac15429a143aa1a8b941c74cae9a928f13f8c08a64694b862
SHA2-256(00-sizes.txt)= bf5fd27b89939e9790fddc5bde3d425be5224700c57c303a92fba1d89f173e1e
SHA2-256(exim-4.100-RC3.tar.bz2)= b4880939c1a3a3f8e145ab7937a0ed98e71ee41b82807a7334554da5394e6eab
SHA2-256(exim-4.100-RC3.tar.gz)= dfc315d432ba5fdbb1452011541d882c740d885069428b70203769b3f20ffd24
SHA2-256(exim-4.100-RC3.tar.xz)= 47efa7934423a94c195fb376075b58b7d4620634ed814de8e0fb675c2a94814a
SHA2-256(exim-html-4.100-RC3.tar.bz2)= 812d38350c05f58280e813cda4ff851c8ae423c899aa21309d495dfa8426daa9
SHA2-256(exim-html-4.100-RC3.tar.gz)= 95011c933ad9984a546c20bbf4d0bf0df141580c24e9eeff3b74f264e4975236
SHA2-256(exim-html-4.100-RC3.tar.xz)= 6f4617cda1223d83f46438fea9bba93dddd1466c751ca071907082229a8d781c
SHA2-256(exim-info-4.100-RC3.tar.bz2)= 56fe91030e9b4b81e743824ee5ab5a20ba97e09551483180fac62a00156bf4f2
SHA2-256(exim-info-4.100-RC3.tar.gz)= 655660c3a9f330338da28403b4f89a11c0c02a83ba98e03bb44d03b9c07d933a
SHA2-256(exim-info-4.100-RC3.tar.xz)= ccc372682e57015b8a95b6a6f658868bf7f31d0f10eee2359053a5036082a8da
SHA2-256(exim-pdf-4.100-RC3.tar.bz2)= dc1d19089dc4f0fb50ff5ea777127aa43795726739a37eb02af2463117f4fecd
SHA2-256(exim-pdf-4.100-RC3.tar.gz)= dba10a3a19c58eb0c8bebf4797332f62ad4a5116dcda401494ac834fe704cc44
SHA2-256(exim-pdf-4.100-RC3.tar.xz)= af6d71d1c3616f4ca5a74734167d9701c6c5537215c02e8571af5a797ea08457
SHA2-256(exim-postscript-4.100-RC3.tar.bz2)= ddca929827ac14bf00d496d9278734765614638b041065c244d94142740f28c4
SHA2-256(exim-postscript-4.100-RC3.tar.gz)= f6b847fd0eab592b9cd405fba7518bf1e149e6f163a826c2df970bc0e7d87107
SHA2-256(exim-postscript-4.100-RC3.tar.xz)= 67b1640996affa2486b2692479f8768c3ede8908348999007bfff102dded2bba
SHA2-256(exim-texinfo-4.100-RC3.tar.bz2)= 755cb43aeb7829077556720c4756f414b74009d5276d7632cf9665531bc43c60
SHA2-256(exim-texinfo-4.100-RC3.tar.gz)= f1370a610182b6f3a0be43b8375b5e81ab4c4c3e7f71464fd9f27512fc5cbad7
SHA2-256(exim-texinfo-4.100-RC3.tar.xz)= f354f21accacadbd790a35e1efcd57005350e49f1ce05478b3a9cb813cb25086




-- 
Bernard Quatermass


-- 
## subscription configuration (requires account):
##   https://lists.exim.org/mailman3/postorius/lists/exim-announce.lists.exim.org/
## unsubscribe (doesn't require an account):
##   [email protected]
## Exim details at https://www.exim.org/
## Please use the Wiki with this list - https://code.exim.org/exim/wiki/wiki
OpenPGP_signature.asc (application/pgp-signature, 665 B)