Exim - upcoming security release - 2025-03-26

[ccto]

A security release of Exim is expected soon; version 4.98.2
We are planning this for 14:00 UTC tomorrow, 2025/03/26.

Distros have already been warned, and provided with the
relevant sourcecode changes,

ref.: https://lists.exim.org/lurker/message/20250325.140004.2d779d86.en.html

 

[ccto]

Exim 4.98.2 released - https://downloads.exim.org/exim4/exim-4.98.2.tar.gz

ref.: https://www.exim.org/static/doc/security/

 

[matkra]

Will there be a quick update to the DA repositories to update Exim or do we have to wait for a new release?

 

[sparek]

Yet another reason why Custombuild should not be connected to DirectAdmin updates.

I don't particularly want to rush a 1.675 DirectAdmin update - and all the issues that always come to light when new DirectAdmin releases are first released - just to get this Exim update.

 

[Driesp]

It looks like it can be exploited by a local user. That makes it a bit less critical (I think?).
I am waiting however until it is released for DirectAdmin to roll out updates tonight if possible.

With safe and kind regards
Dries

 

[Erulezz]

Yet another reason why Custombuild should not be connected to DirectAdmin updates.

I don't particularly want to rush a 1.675 DirectAdmin update - and all the issues that always come to light when new DirectAdmin releases are first released - just to get this Exim update.

Last time they quickly released hotfixes for stable and current branches so no actual new version was needed.

 

[Richard G]

Old way was easier to customize too, I still like the old method more. But I can understand why it's changed. Takes some getting used too also.

 

[exlhost]

You can build/update it already via Customize Versions.

 

[stefantriep]

You can build/update it already via Customize Versions.

Done with 1 server, hope this doesn't break stuff for now. Will patch other servers later

 

[ccto]

Compared Exim source between 4.98.1 and 4.98.2, the change is very small.

Done with 1 server, hope this doesn't break stuff for now. Will patch other servers later

 

[stefantriep]

Ah they released the new DA version with the version change today

 

[fln]

The default exim version is updated to the latest in stable and current release channels.