Fix taint hybrid-checking on BSD

[users/heiko/exim.git] / doc / doc-txt / ChangeLog

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index ce225e9492788b5396d03bee2d0f350d57e50aab..f0dccdc62943f9abfbc764bf8530191eab5da30b 100644 (file)
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -81,7 +81,32 @@ WB/01 SPF: DNS lookups for the obsolete SPF RR type done by the libspf2 library
       are now specifically given a NO_DATA response without hitting the system
       resolver.  The library goes on to do the now-standard TXT lookup.
       Use of dnsdb lookups is not affected.
       are now specifically given a NO_DATA response without hitting the system
       resolver.  The library goes on to do the now-standard TXT lookup.
       Use of dnsdb lookups is not affected.

-      
+
+JH/19 Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
+      only retrieve the errormessage once.  Previously two calls to dlerror()
+      were used, and the second one (for mainlog/paniclog) retrieved null
+      information.
+
+JH/20 Taint checking: disallow use of tainted data for
+      - the appendfile transport file and directory options
+      - the pipe transport command
+      - the autoreply transport file, log and once options
+      - file names used by the redirect router (including filter files)
+      - named-queue names
+      Previously this was permitted.
+
+JH/21 Bug 2501: Fix init call in the heimdal authenticator.  Previously it
+      adjusted the size of a major service buffer; this failed because the
+      buffer was in use at the time.  Change to a compile-time increase in the
+      buffer size, when this authenticator is compiled into exim.
+
+JH/22 Taint checking: move to a hybrid approach for checking.  Previously, one
+      of two ways was used, depending on a build-time flag.  The fast method
+      relied on assumptions about the OS and libc malloc, which were known to
+      not hold for the BSD-derived platforms, and discovered to not hold for
+      32-bit Linux either.  In fact the glibc documentation describes cases
+      where these assumptions do not hold.  The new implementation tests for
+      the situation arising and actively switches over from fast to safe mode.

 
 
 Exim version 4.93
 
 
 Exim version 4.93