diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2020-05-05 21:02:14 +0100 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2020-05-05 21:02:14 +0100 |
| commit | 57aa14b216432be381b6295c312065b2fd034f86 (patch) | |
| tree | 77d0e60862eafa350d22ddee6148fb8380439f17 /doc | |
| parent | 99dbdcf461adff82b2fe68c9c9c690c4982969b1 (diff) | |
Fix SPA authenticator, checking client-supplied data before using it. Bug 2571
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/doc-txt/ChangeLog | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index 1d685a130..6109a14dd 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -184,6 +184,11 @@ JH/40 Fix a memory-handling bug: when a connection carried multiple messages stale data could be accessed. Ensure that variable references are dropped between messages. +JH/41 Bug 2571: Fix SPA authenticator. Running as a server, an offset supplied + by the client was not checked as pointing within response data before + being used. A malicious client could thus cause an out-of-bounds read and + possibly gain authentication. Fix by adding the check. + Exim version 4.93 ----------------- |