X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=src%2FREADME.UPDATING;h=f99afc1bd27614c7fa19ab55086990f20cc9f385;hb=a76d120aedbb1c19943db1227a14226ce6fdb679;hp=db754da408a434654c75627f29f2f15cec62c007;hpb=1d717e1c110562fd6bf28478c79f180cafeba776;p=exim.git

diff --git a/src/README.UPDATING b/src/README.UPDATING
index db754da40..f99afc1bd 100644
--- a/src/README.UPDATING
+++ b/src/README.UPDATING
@@ -25,6 +25,23 @@ there have been two big upheavals...
 The rest of this document contains information about changes in 4.xx releases
 that might affect a running system.
 
+
+Exim version 4.94
+-----------------
+
+Some Transports now refuse to use tainted data in constructing their delivery
+location; this WILL BREAK configurations which are not updated accordingly.
+In particular: any Transport use of $local_user which has been relying upon
+check_local_user far away in the Router to make it safe, should be updated to
+replace $local_user with $local_part_verified.
+
+Attempting to remove, in router or transport, a header name that ends with
+an asterisk (which is a standards-legal name) will now result in all headers
+named starting with the string before the asterisk being removed.  We recommend
+staying away from such names, if they are private ones (and in case of future
+enhancements, alao header names that look like REs).
+
+
 Exim version 4.93
 -----------------