From 37a81ae7317bb78b2ff152821930c2ff0873512b Mon Sep 17 00:00:00 2001 From: Jeremy Harris Date: Mon, 25 Jan 2021 14:55:06 +0000 Subject: AUTH: avoid logging creds on ACL denial --- doc/doc-txt/ChangeLog | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'doc') diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index e1381c156..b20991280 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -180,6 +180,10 @@ JH/36 Bug 2687: Fix interpretation of multiple ^ chars in a plaintext JH/37 Enforce the expected size, for fixed-size records read from hints-DB files. For bad sizes read, delete the record and whine to paniclog. +JH/38 When logging an AUTH failure, as server, do not include sensitive + information. Previously, the credentials would be included if given + as part of the AUTH command line and an ACL denied authentidcation. + Exim version 4.94 -- cgit v1.2.3