check for invalid APOP timestamp (CVE-2007-1558).

git-svn-id: svn://sylpheed.sraoss.jp/sylpheed/trunk@1656 ee746299-78ed-0310-b773-934348b2243d

1 files changed, 7 insertions, 0 deletions

diff --git a/ChangeLog b/ChangeLog
index 1850c4ae..c74fd8d2 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,12 @@
 2007-04-19
 
+	* libsylph/pop.c:
+	  pop3_getauth_apop_send()
+	  pop3_session_recv_msg(): check for invalid APOP timestamp
+	  (CVE-2007-1558), and check for the functions' return value.
+
+2007-04-19
+
 	* src/mainwindow.c: toolbar_customize()
 	  src/compose.c: toolbar_customize(): write config file after toolbar
 	  customization.