From 85defcf0e9e4187107b8a1a5138ef9590ac3892c Mon Sep 17 00:00:00 2001 From: Phil Pennock Date: Tue, 15 May 2018 19:04:34 -0400 Subject: Don't open spool data-files which are symlinks --- doc/doc-txt/ChangeLog | 3 +++ 1 file changed, 3 insertions(+) (limited to 'doc') diff --git a/doc/doc-txt/ChangeLog b/doc/doc-txt/ChangeLog index d9b77804b..d99b2684a 100644 --- a/doc/doc-txt/ChangeLog +++ b/doc/doc-txt/ChangeLog @@ -29,6 +29,9 @@ JH/05 Bug 2273: Cutthrough delivery left a window where the received messsage add more error-checking on spoolfile handling while that code is being messed with. +PP/01 Refuse to open a spool data file (*-D) if it's a symlink. + No known attacks, no CVE, this is defensive hardening. + Exim version 4.91 ----------------- -- cgit v1.2.3