autoreply transport: taint-enfoce options

[users/heiko/exim.git] / doc / doc-txt / ChangeLog

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index b904aa99cd5188b3bf2b786824b1d1cf70bda3f5..368d37ec1e16e2487bffa3c760518cc309da47ac 100644 (file)
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -78,10 +78,21 @@ JH/18 Authentication: the gsasl driver not provides the $authN variables in time
       for the expansion of the server_scram_iter and server_scram_salt options.
 
 WB/01 SPF: DNS lookups for the obsolete SPF RR type done by the libspf2 library
-      are now specifically given a HOST_NOT_FOUND response without hitting the
-      system resolver.  The library goes on to do the now-standard TXT lookup.
+      are now specifically given a NO_DATA response without hitting the system
+      resolver.  The library goes on to do the now-standard TXT lookup.
       Use of dnsdb lookups is not affected.
-      
+
+JH/19 Bug 2507: Modules: on handling a dynamic-module (lookups) open failure,
+      only retrieve the errormessage once.  Previously two calls to dlerror()
+      were used, and the second one (for mainlog/paniclog) retrieved null
+      information.
+
+JH/20 Taint checking: disallow use of tainted data for
+      - the appendfile transport file and directory options
+      - the pipe transport command
+      - the autoreply transport file, log and once options
+      - file names used by the redirect router (including filter files)
+      Previously this was permitted.
 
 
 Exim version 4.93