X-Git-Url: https://git.exim.org/exim.git/blobdiff_plain/8a8491c0f85e656d5f09490d3373fa087fdd4070..d740d2111f189760593a303124ff6b9b1f83453d:/doc/doc-txt/ChangeLog diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index 77e56c16d..d9b896905 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -67,6 +67,26 @@ JH/31 Fix a bad use of a copy function, which could be used to pointlessly copy a string over itself. The library routine is documented as not supporting overlapping copies, and on MacOS it actually raised a SIGABRT. +JH/33 Bug 2338: Fix the cyrus-sasl authenticator to fill in the + $authenticated_fail_id variable on authentication failure. Previously + it was unset. + +JH/36 Harden the handling of string-lists. When a list consisted of a sole + "<" character, which should be a list-separator specification, we walked + off past the nul-terimation. + +AM/01 GnuTLS: repeat lowlevel read and write operations while they return error + codes indicating retry. Under TLS1.3 this becomes required. + +JH/41 Fix the loop reading a message header line to check for integer overflow, + and more-often against header_maxsize. Previously a crafted message could + induce a crash of the recive process; now the message is cleanly rejected. + +JH/42 Bug 2366: Fix the behaviour of the dkim_verify_signers option. It had + been totally disabled for all of 4.91. Discovery and fix by "Mad Alex". + +JH/43 Fix CVE-2019-10149 + Exim version 4.91 -----------------