Taint: fix listcount expansion operator. Bug 2586

[users/heiko/exim.git] / doc / doc-txt / ChangeLog

diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog
index a4526ca5cc1b55768100285da6f1476b094620b1..240dc7538ea6f32d115adddfea82d7d8268ee21f 100644 (file)
--- a/doc/doc-txt/ChangeLog
+++ b/doc/doc-txt/ChangeLog
@@ -10,6 +10,15 @@ JH/01 Bug 1329: Fix format of Maildir-format filenames to match other mail-
       related applications.  Previously an "H" was used where available info
       says that "M" should be, so change to match.
 
       related applications.  Previously an "H" was used where available info
       says that "M" should be, so change to match.
 

+JH/02 Bug 2587: Fix pam expansion condition.  Tainted values are commonly used
+      as arguments, so an implementation trying to copy these into a local
+      buffer was taking a taint-enformance trap.  Fix by using dynamically
+      created buffers.
+
+JH/03 Bug 2586: Fix listcount expansion operator.  Using tainted arguments is
+      reasonable, eg. to count headers.  Fix by using dynamically created
+      buffers rather than a local,
+

 
 Exim version 4.94
 -----------------
 
 Exim version 4.94
 -----------------