X-Git-Url: https://vcs.fsf.org/?a=blobdiff_plain;f=ChangeLog;h=3e01fb4368049df0d2040e107b1389f83354745b;hb=6957d227c096362cdbd66b00982ff2eff01f47b3;hp=654e4e2d056005bf5c6f371d4be61de53f9312ff;hpb=15dce5a60abe37a8f865200d0799665fd9835593;p=squirrelmail.git diff --git a/ChangeLog b/ChangeLog index 654e4e2d..3e01fb43 100644 --- a/ChangeLog +++ b/ChangeLog @@ -4,7 +4,8 @@ Version 1.5.2 - SVN ------------------- - - Fixed #1727033 (incorrect detection of auth mechanisms in config.pl) + - Fix broken set_url_var function in functions/html.php (#1729814). + - Fix incorrect detection of auth mechanisms in conf.pl (#1727033). - The search expression in the LDAP backend of the Addressbook is now configurable, which can allow the result set to be expanded. - Preliminary support for NAMESPACE in Squirrelmail IMAP Backend: NAMESPACE @@ -199,6 +200,14 @@ Version 1.5.2 - SVN charset conversion exploits, and request forgery through included images. Thanks to Mikhail Markin, Tomas Kuliavas and Michael Jordon for reporting these issues. [CVE-2007-1262] + - Fix busy loop and notice when two literals in IMAP fetch (#1739433). + - Resolved issue with compose session not being updated after send/save. + - Added ability to detect HTTP_X_FORWARDED_PROTO in get_location(), + thanks to Daniel Watts. + - Fix test for signout.php in the logged in check in init.php so it + cannot be circumvented by manipulating the URL. External plugins might + rely on init.php guaranteeing that the user is logged in. + - Sort readdir() output in conf.pl (#1755886). Version 1.5.1 (branched on 2006-02-12) --------------------------------------