Prevent hardlink attack on mbox sticky mail directory. fixes: bug #988

[users/heiko/exim.git] / doc / doc-txt / ChangeLog

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index 5f164eac8918ca472a76b42edfbe542f48dbfb1e..1f86a569d3d5bc00fbe4466119fe5aead2f5597a 100644 (file)
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -1,8 +1,34 @@
-$Cambridge: exim/doc/doc-txt/ChangeLog,v 1.598 2009/11/20 21:22:20 nm4 Exp $
+$Cambridge: exim/doc/doc-txt/ChangeLog,v 1.608 2010/05/26 12:26:00 nm4 Exp $
 
 Change log file for Exim from version 4.21
 -------------------------------------------
 
+Exim version 4.72
+-----------------
+
+JJ/01 installed exipick 20100104.1, adding $max_received_linelength, $data_path, and $header_path variables; fixed documentation bugs and typos
+
+JJ/02 installed exipick 20100222.0, added --input-dir and --finput to allow exipick to access non-standard spools, including the "frozen" queue (Finput)
+
+NM/01 Bugzilla 965: Support mysql stored procedures.
+      Patch from Alain Williams
+
+NM/02 Bugzilla 961: Spacing fix (syntax error) on Makefile directives for NetBSD
+
+NM/03 Bugzilla 955: Documentation fix for max_rcpts.
+      Patch from Andreas Metzler
+
+NM/04 Bugzilla 954: Fix for unknown responses from Dovecot authenticator.
+      Patch from Kirill Miazine
+
+NM/05 Bugzilla 671: Added umask to procmail example.
+
+JJ/03 installed exipick 20100323.0, fixing doc bug
+
+NM/06 Bugzilla 988: CVE-2010-2023 - prevent hardlink attack on sticky mail
+      directory.  Notification and patch from Dan Rosenberg
+
+
 Exim version 4.71
 -----------------
 
@@ -21,7 +47,7 @@ Exim version 4.70
 -----------------
 
 TK/01 Added patch by Johannes Berg that expands the main option
-      "spamd_servers" if it starts with a dollar sign.
+      "spamd_address" if it starts with a dollar sign.
 
 TK/02 Write list of recipients to X-Envelope-Sender header when building
       the mbox-format spool file for content scanning (suggested by Jakob
@@ -29,8 +55,7 @@ TK/02 Write list of recipients to X-Envelope-Sender header when building
 
 TK/03 Added patch by Wolfgang Breyha that adds experimental DCC
       (http://www.dcc-servers.net/) support via dccifd. Activated by
-      setting EXPERIMENTAL_DCC=yes in Local/Makefile. Check out
-      experimental_spec.txt for more documentation.
+      setting EXPERIMENTAL_DCC=yes in Local/Makefile.
 
 TK/04 Bugzilla 673: Add f-protd malware scanner support. Patch submitted
       by Mark Daniel Reidel <mr@df.eu>.