Also memset(.., 0, ..) the pre-TLS input buffer.

[exim.git] / doc / doc-txt / ChangeLog

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index 820016310e3c443d768965722e30bb0c09fbb08e..ce78086a611d46cbe54e30f466408976c652d567 100644 (file)
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -11,6 +11,16 @@ PP/01 The new ldap_require_cert option would segfault if used.  Fixed.
 PP/02 Harmonised TLS library version reporting; only show if debugging.
       Layout now matches that introduced for other libraries in 4.74 PP/03.
 
+PP/03 New openssl_options items: no_sslv2 no_sslv3 no_ticket no_tlsv1
+
+PP/04 New "dns_use_edns0" global option.
+
+PP/05 Don't segfault on misconfiguration of ref:name exim-user as uid.
+      Bugzilla 1098.
+
+PP/06 Extra paranoia around buffer usage at the STARTTLS transition.
+      nb: Exim is not vulnerable to http://www.kb.cert.org/vuls/id/555316
+
 
 Exim version 4.75
 -----------------