From: Jeremy Harris Date: Tue, 28 Nov 2017 20:44:14 +0000 (+0000) Subject: Change log update X-Git-Tag: exim-4_90_RC3^0 X-Git-Url: https://git.exim.org/users/heiko/exim.git/commitdiff_plain/b488395f4d99d44a950073a64b35ec8729102782?hp=178ecb70987f024f0e775d87c2f8b2cf587dd542 Change log update --- diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index 0ea49a280..cf104e7f1 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -195,7 +195,11 @@ JH/33 Downgrade an unfound-list name (usually a typo in the config file) from JH/34 Bug 2199: Fix a use-after-free while reading smtp input for header lines. A crafted sequence of BDAT commands could result in in-use memory beeing - freed. + freed. CVE-2017-16943. + +HS/03 Bug 2201: Fix checking for leading-dot on a line during headers reading + from SMTP input. Previously it was always done; now only done for DATA + and not BDAT commands. CVE-2017-16944. Exim version 4.89