Update ChangeLog

[exim.git] / doc / doc-txt / ChangeLog

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index 1fdfc126e1ec3f6ceafa4eb77cdf07dc54f9f988..980fabb5e130bd4812ade73e40bcc95dd009c26b 100644 (file)
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -24,7 +24,7 @@ JH/04 Bug 1810: make continued-use of an open smtp transport connection
       non-noisy when a race steals the message being considered.
 
 JH/05 If main configuration option tls_certificate is unset, generate a
       non-noisy when a race steals the message being considered.
 
 JH/05 If main configuration option tls_certificate is unset, generate a

-      selfsigned certificate for inbound TLS connections.
+      self-signed certificate for inbound TLS connections.

 
 JH/06 Bug 165: hide more cases of password exposure - this time in expansions
       in rewrites and routers.
 
 JH/06 Bug 165: hide more cases of password exposure - this time in expansions
       in rewrites and routers.


@@ -90,7 +90,7 @@ JH/23 Bug 1874: fix continued use of a connection for further deliveries.
 
 JH/24 Bug 1832: Log EHLO response on getting conn-close response for HELO.
 
 
 JH/24 Bug 1832: Log EHLO response on getting conn-close response for HELO.
 

-JH/25 Decoding ACL controls is now done using a binary search; the sourcecode
+JH/25 Decoding ACL controls is now done using a binary search; the source code

       takes up less space and should be simpler to maintain.  Merge the ACL
       condition decode tables also, with similar effect.
 
       takes up less space and should be simpler to maintain.  Merge the ACL
       condition decode tables also, with similar effect.
 


@@ -121,10 +121,18 @@ PP/02 Unbreak build via pkg-config with new hash support when crypto headers
       are not in the system include path.
 
 JH/31 Fix longstanding bug with aborted TLS server connection handling.  Under
       are not in the system include path.
 
 JH/31 Fix longstanding bug with aborted TLS server connection handling.  Under

-      GnuTLS, when a sennsion startup failed (eg because the client disconnected)
+      GnuTLS, when a session startup failed (eg because the client disconnected)

       Exim did stdio operations after fclose.  This was exposed by a recent
       change which nulled out the file handle after the fclose.
       Exim did stdio operations after fclose.  This was exposed by a recent
       change which nulled out the file handle after the fclose.

-      
+
+JH/32 Bug 1909: Fix OCSP proof verification for cases where the proof is
+      signed directly by the cert-signing cert, rather than an intermediate
+      OCSP-signing cert.  This is the model used by LetsEncrypt.
+
+JH/33 Bug 1914: Ensure socket is nonblocking before draining after SMTP QUIT.
+
+HS/01 Fix leak in verify callout under GnuTLS, about 3MB per recipient on
+      an incoming connection.

 
 
 Exim version 4.87
 
 
 Exim version 4.87