X-Git-Url: http://git.marmaro.de/?a=blobdiff_plain;f=ChangeLog;h=6847b8f7efc604428a274179eb26c80cba376f17;hb=3bf07d227725f798f654ac09f015f35d27ab83cb;hp=992f51cef9337dfa0eaeb33a72d464de45b59470;hpb=352fe458a57061db81240c19fa4b356c7448463b;p=mmh

diff --git a/ChangeLog b/ChangeLog
index 992f51c..6847b8f 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,4 +1,23 @@
+2010-08-31  David Levine <levinedl@acm.org>
+
+	* uip/.cvsignore:  added "new".
+
+2010-02-03  Earl Hood <earl@earlhood.com>
+
+	* Bug #15213, #18635: The use of the insecure m_scratch() and
+	  m_tmpfil() functions have been replaced by m_mktemp()
+	  or m_mktemp2() functions (defined in sbr/m_mktemp.c).
+	  The new functions use mkstemp() to securely create
+	  temporary files to avoid the numerous race conditions
+	  that exist with the old functions.  This does assume
+	  that mkstemp() is available.  Unsure if we need to
+	  create an alternative implementation if mkstemp() is
+	  not available.  More information about new temp file
+	  functions in m_mktemp.c, including the support for
+	  MHTMPDIR, TMPDIR, and TMP envvars.
+
 2010-02-02  Earl Hood <earl@earlhood.com>
+
 	* mts/smtp/smtp.c: added SASL support if mts configuration
 	  setting is set to "sendmail".  This is useful if sendmail
 	  conf option is to a custom script that creates a proxy