X-Git-Url: https://git.exim.org/exim.git/blobdiff_plain/c1fb74d63ecf0cd1501e53352419bfdfd154b7ea..410b935d8ed35762b76b0edfa7a9fb9ba6500ebd:/doc/doc-txt/ChangeLog?ds=inline diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index 4c6eb810e..5a9c8f214 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -263,11 +263,20 @@ PP/02 Bug 2643: Correct TLS DH constants. incorrect Diffie-Hellman constants in the Exim source. Reported by kylon94, code-gen tool fix by Simon Arlott. -PP/03 Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX +PP/03 Impose security length checks on various command-line options. + Fixes CVE-2020-SPRSS reported by Qualys. + +PP/04 Fix Linux security issue CVE-2020-SLCWD and guard against PATH_MAX better. Reported by Qualys. -PP/04 Impose security length checks on various command-line options. - Fixes CVE-2020-SPRSS reported by Qualys. +PP/05 Fix security issue CVE-2020-PFPSN and guard against cmdline invoker + providing a particularly obnoxious sender full name. + Reported by Qualys. + +PP/06 Fix CVE-2020-28016 (PFPZA): Heap out-of-bounds write in parse_fix_phrase() + +PP/07 Refuse to allocate too little memory, block negative/zero allocations. + Security guard. Exim version 4.94