Documenting the theme-as-cookie exploit fix.

[squirrelmail.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index cf041d9cfdbac64b722d1b6b971b9959613ebb3a..f8a526212dd8ea38198816de4e5540e0da9ef3e1 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -4,6 +4,19 @@
 
 Version 1.2.6 -- CVS
 --------------------
+  - Fix for a "theme passed as cookie" exploit.
+  - PostgreSQL is now supported for database backed use
+  - Added user option to sort messages by internal date
+  - Changed attachment handling now attachments are adressed to 
+    unique compose session.
+  - Added forward messages as message/rfc822 attachment
+  - Fixed handling message/rfc822 attachments
+  - Fixed folder list display when special folders have subfolders
+  - Added option to auto-append sig before reply/forward text (523853)
+  - Fixed subfolders being "orphaned" when renaming parents (498167)
+  - Filters are updated when renaming/deleting folders (512056)
+  - Filtering now happens on login (filters plugin)
+  - Added option for WIDTH and HEIGHT tags to Org. Logo. (patch #412754)
   - Fixed resume draft bug #513521, #514639
   - Newmail plugin: admin can disable the use of audio (patch #517698)
   - Fixed quoting problem in safe html (patch #516542)
@@ -13,6 +26,9 @@ Version 1.2.6 -- CVS
   - Made erronous deleting of folders harder (patch #514208)
   - Made SquirrelMail display \Noselect nodes in Cyrus also made it 
     impossible to try to delete \Noselect nodes. (patch #452178)
+  - SquirrelSpell version 0.3.8 -- pretty configuration error reporting
+    added by popular demand.
+  - Improved the handling of IMAP [PARSE] messages to reduce retrieval error.
        
 Version 1.2.5 -- 22 February 2002
 ---------------------------------