Merge branch 'list_safety'

[exim.git] / src / README.UPDATING

diff --git a/src/README.UPDATING b/src/README.UPDATING
index fadf59aa9f5fc8f48bb40eb7abaa99b03ea992d8..8a0533b102137bccb9d14eb082e2eacbb60febe3 100644 (file)
--- a/src/README.UPDATING
+++ b/src/README.UPDATING
@@ -35,6 +35,13 @@ Exim version 4.77
    problem.  Prior to this release, supported values were "TLS1" and "SSL3",
    so you should be able to update configuration prior to update.
 
+ * The match_<type>{string1}{string2} expansion conditions no longer subject
+   string2 to string expansion, unless Exim was built with the new
+   "EXPAND_LISTMATCH_RHS" option.  Too many people have inadvertently created
+   insecure configurations that way.  If you need the functionality and turn on
+   that build option, please let the developers know, and know why, so we can
+   try to provide a safer mechanism for you.
+
 
 Exim version 4.74
 -----------------