Document CVE assignment for Berkeley DB issue

[exim.git] / doc / doc-txt / ChangeLog

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index af7571fd496819851e873310113cdfaa9231565d..18a43d29220bfd416b08985ebd00fe3d6c351069 100644 (file)
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -28,12 +28,16 @@ JH/07 Fix smtp transport use of limited max_rcpt under mua_wrapper. Previously
 JH/19 Bug 2141: Use the full-complex API for Berkeley DB rather than the legacy-
       compatible one, to avoid the (poorly documented) possibility of a config
       file in the working directory redirecting the DB files, possibly correpting
-      some existing file.
+      some existing file.  CVE-2017-10140 assigned for BDB.
 
 JH/20 Bug 2147: Do not defer for a verify-with-callout-and-random which is not
       cache-hot.  Previously, although the result was properly cached, the
       initial verify call returned a defer.
 
+JH/21 Bug 2151 (partial):
+                Avoid using SIZE on the MAIL for a callout verify, on any but
+      the main verify for receipient in uncached-mode.
+
 
 Exim version 4.89
 -----------------