The release of the Exim mail server 4.96 has occurred, incorporating accumulated fixes and new features. According to the automated survey conducted in May of nearly 800,000 mail servers, Exim holds a share of 59.59% (up from 59.15% a year ago), Postfix is used on 33.64% (down from 33.76%) of mail servers, Sendmail at 3.55% (unchanged), MailEnable at 1.93% (down from 2.02%), MDaemon at 0.45% (down from 0.56%), and Microsoft Exchange at 0.23% (down from 0.30%).
Key Changes:
- A new condition "seen" has been implemented in ACL, which can be used to check previously occurred events related to users and hosts. This new condition simplifies working with graylists; for example, when creating a basic graylist to allow a retry connection, the ACL "seen = -5m / key=${sender_host_address}_$local_part@$domain" can be used.
- The "mask_n" option has been added to the "mask" operator, which manipulates normalized IPv6 addresses (using colons and without packing).
- The utilities exim_dumpdb and exim_fixdb have been updated with the ‘-z’ option to return time without accounting for the time zone (UTC);
- An event has been implemented in the background process that is output during a TLS connection failure.
- Options "stop", "pretrigger", and "trigger" have been added to the ACL debug mode ("control = debug") for controlling output to the debug log.
- A check for escaping special characters in lookup queries has been added when the query string uses externally obtained data ("tainted"). If characters are not escaped, the issue information is currently reflected only in the log, but future releases will cause an error.
- The option "allow_insecure_tainted_data" has been removed, which allowed disabling the error output for unsafe escaping of special characters in data. Support for log_selector "taint", which allowed suppressing warnings about escaping issues in the log, has also been discontinued.
Source: opennet.ru
