X-Git-Url: https://git.exim.org/users/jgh/exim.git/blobdiff_plain/7f7f05454657fe756dd06d2ee11bfe70c5a1a9a0..b7487bcec431809cb7fc3c2b42fcd607e43d37e7:/doc/doc-txt/NewStuff?ds=inline

diff --git a/doc/doc-txt/NewStuff b/doc/doc-txt/NewStuff
index f668ae152..3a3ad5de5 100644
--- a/doc/doc-txt/NewStuff
+++ b/doc/doc-txt/NewStuff
@@ -9,6 +9,21 @@ test from the snapshots or the CVS before the documentation is updated. Once
 the documentation is updated, this file is reduced to a short list.
 
 
+Version 4.74
+------------
+
+ 1. SECURITY FIX: privilege escalation flaw fixed. On Linux (and only Linux)
+    the flaw permitted the Exim run-time user to cause root to append to
+    arbitrary files of the attacker's choosing, with the content based
+    on content supplied by the attacker.
+
+ 2. Exim now supports loading some lookup types at run-time, using your
+    platform's dlopen() functionality.  This has limited platform support
+    and the intention is not to support every variant, it's limited to
+    dlopen().  This permits the main Exim binary to not be linked against
+    all the libraries needed for all the lookup types.
+
+
 Version 4.73
 ------------