Better wording in CVE txt

[exim-website.git] / templates / static / doc / security / CVE-2019-15846.txt

diff --git a/templates/static/doc/security/CVE-2019-15846.txt b/templates/static/doc/security/CVE-2019-15846.txt
index aabdf1d9da933fb309d8535626e738381daee029..f82b8e376040428eb272a53165a70cb6de2233c3 100644 (file)
--- a/templates/static/doc/security/CVE-2019-15846.txt
+++ b/templates/static/doc/security/CVE-2019-15846.txt
@@ -27,10 +27,12 @@ Mitigation
 
 Do not offer TLS. (This mitigation is not recommended.)
 
-For a attacking SNI the following ACL snippet should work:
+For a attacking TLS client the following ACL snippet should work:
 
-    # to be prepended to your mail acl (acl_smtp_mail)
+    # to be prepended to your mail acl (the ACL referenced
+    # by the acl_smtp_mail main config option)
     deny    condition = ${if eq{\\}{${substr{-1}{1}{$tls_in_sni}}}}
+    deny    condition = ${if eq{\\}{${substr{-1}{1}{$tls_in_peerdn}}}}
 
 Fix
 ===