- Fix disabling password encryption in mail_fetch (#1738001).

[squirrelmail.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index e09281621a8a6c1d88790e0a85d5cb77822f924d..0126ccfd57f9a296a1bdeb52cf95528c6a1fa6eb 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -4,6 +4,8 @@
 
 Version 1.5.2 - SVN
 -------------------
+  - Fix broken set_url_var function in functions/html.php (#1729814).
+  - Fix incorrect detection of auth mechanisms in conf.pl (#1727033).
   - The search expression in the LDAP backend of the Addressbook is now
     configurable, which can allow the result set to be expanded.
   - Preliminary support for NAMESPACE in Squirrelmail IMAP Backend: NAMESPACE
@@ -189,6 +191,15 @@ Version 1.5.2 - SVN
   - Do not special case the 'None' folder.
   - Fixes for filters issues (#1634735).
   - session_id reporting session id when no active session (#1685031).
+  - Added sq_change_text_domain() for plugins to use when switching text
+    domains.  If plugins use this function, it fixes #1434043.
+  - Add dynamic textarea sizing slider control to compose screen (default_advanced 
+    skin)
+  - Security: fixes for the HTML filter to counter further XSS exploits:
+    HTML attachments containing 'data:' URLs, Internet Explorer-specifc
+    charset conversion exploits, and request forgery through included
+    images. Thanks to Mikhail Markin, Tomas Kuliavas and Michael Jordon
+    for reporting these issues. [CVE-2007-1262]
 
 Version 1.5.1 (branched on 2006-02-12)
 --------------------------------------