From b488395f4d99d44a950073a64b35ec8729102782 Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Tue, 28 Nov 2017 20:44:14 +0000 Subject: Change log update --- doc/doc-txt/ChangeLog | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index 0ea49a280..cf104e7f1 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -195,7 +195,11 @@ JH/33 Downgrade an unfound-list name (usually a typo in the config file) from JH/34 Bug 2199: Fix a use-after-free while reading smtp input for header lines. A crafted sequence of BDAT commands could result in in-use memory beeing - freed. + freed. CVE-2017-16943. + +HS/03 Bug 2201: Fix checking for leading-dot on a line during headers reading + from SMTP input. Previously it was always done; now only done for DATA + and not BDAT commands. CVE-2017-16944. Exim version 4.89 -- cgit v1.2.3