Change credits

[squirrelmail.git] / doc / ChangeLog

diff --git a/doc/ChangeLog b/doc/ChangeLog
index 014bb7f1c87a15a9686c1842f6e7a2b376896472..76fbc0e2f5254d59ad82b2a85c9092f75ac3bd2b 100644 (file)
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -402,6 +402,11 @@ Version 1.5.2 - SVN
     plugins to have more explicit control over login page header
   - Added new "smtp_helo_override" hook; allows plugins to override
     the HELO host sent to the SMTP server when sending messages
+  - Added PDO support for database connections, so no external
+    database module needs to be installed
+  - Fixed insufficient sendmail command argument escaping (thanks
+    to Mitchel Sahertian, Beyond Security/Dawid Golunski and Filippo
+    Cavallarin for bringing this to our attention). [CVE-2017-7692]
 
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------