Update Changelog to 4.89.1

[exim.git] / doc / doc-txt / ChangeLog

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index a2d9339c13daeeb41a5f25162e4da03cea9958bc..2da95deb30c5f4565d948015fdce965f657b31c4 100644 (file)
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -5,10 +5,9 @@ affect Exim's operation, with an unchanged configuration file.  For new
 options, and new features, see the NewStuff file next to this ChangeLog.
 
 
-Exim version 4.89+fixes
------------------------
-Cherry-Picked from the master development branch
--------------------------------------------------
+Exim version 4.89.1
+-------------------
+Security Release including all fixes in 4.89..4.89+fixes.
 
 HS/01 Cleanup, prevent repeated use of -p/-oMr (CVE-2017-1000369)
 
@@ -61,7 +60,11 @@ JH/30 Fix a logging bug on aarch64: an unsafe routine was previously used for
 
 JH/34 Bug 2199: fix a use-after-free while reading smtp input for header lines.
       A crafted sequence of BDAT commands could result in in-use memory beeing
-      freed.
+      freed.  CVE-2017-16943.
+
+HS/03 Bug 2201: Fix checking for leading-dot on a line during headers reading
+      from SMTP input.  Previously it was always done; now only done for DATA
+      and not BDAT commands.  CVE-2017-16944.
 
 
 Exim version 4.89