X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=ChangeLog;h=9bbc7e34e3f8542db92732a1ebaab245ccb83851;hp=0cb01b4ffc0bd5b375e14c472cf7a65b16c322a6;hb=7669bfaccd836d3f781ab1c6520687295d377a65;hpb=4626cf87da8ace5d929ae2c1235e9651f34534e1 diff --git a/ChangeLog b/ChangeLog index 0cb01b4f..9bbc7e34 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,18 +1,240 @@ ************************************** -*** Squirrelmail Stable Series 1.2 *** +*** SquirrelMail Stable Series 1.4 *** ************************************** -Version 1.2.5 -- CVS --------------------- +Version 1.4.0 RC 2a +------------------- + - Fix broken themes box in display options. + - Massive overhaul of administrator plugin. + - Added new function sqgetGlobalVar to global.php to provide direct access + to variables in $_GET, $_POST, $_SESSION, $_COOKIE and $_SERVER. + - Patch from O'Shaughnessy Evans to allow disabled $org_logo + - Lots of language/internationalization updates + - conf.pl fixes for certain uses of SM_PATH, esp. $signout_page. + - SMTP & IMAP auth method "plain" was a misnomer - now corrected to + the more accurate name "login" (Plain to be implemented soon). + - Fix for compose after search bug. (Closes #662346) + - Improved error reporting when sending mail with SMTP. + - Changed SquirrelMail identification to use User-Agent instead of X-Mailer. + - Prevent endless loop when timezone config is not found. Thanks Joshua Colson. + - Fix IMAP error when returning to message from viewing image attachment. + - Do more trimming to indented subjects in threadview so they don't wrap. + - Trash folder now displays purge link in all cases. (Closes #655943) + - Fix typo in delete_move_next plugin which caused php file-handle errors. + - Make vCard more liberal in what it accepts (thanks Kurt Pires). + - Fix problem with subject encoding when using Japanse. + - Move login_form hook to be actually in the login form. + - Fix message_details plugin ability to save a raw message. + - Try better to get the filename of an attachment. + - Deliver_SMTP class now uses HTTP_HOST in SMTP HELO. Should fix DNS + issues some people have reported. (Closes #560524) + - Obsolete sqm_topdir(), which caused login trouble with installs that + have open_basedir restrictions. Thanks Jimmy Connor. + - Fix broken abook_take plugin. + - Fix HTML errors that caused display problems in NS4. + - Correctly fold encoded header lines. + - Fix prefs caching not working correctly in PHP 4.3 caused by a stupid + version checking mechanism. + - Fix XXS hole that allowed JavaScript execution by sending someone + an email with specially crafted headers. Thanks Jason Munro. + +Version 1.4.0 RC 1 +------------------ + - Change the way highlighting rules are stored to make them more reliable and + easier to manage. + - Reorganization of conf.pl, menu #2 + - Added CRAM-MD5 and DIGEST-MD5 authentication support for IMAP and SMTP + - Experimental TLS support for IMAP and SMTP (requires PHP 4.3.x) + - Override settings with config_local.php + - Compose form no longer shows attachment options if php file_uploads + disabled + - Improved bodystructure parsing. + - Support for windows-1257 charset. + - Optimizations to the number of IMAP calls. + - Fix problem with IE6 + iso-8859-13. + - Allow Mail Fetch to use a different POP3 server port number. + - Force magic_quotes_runtime to be off to avoid problems with this setting. + - Introduce check_sm_version function for plugins wanting to know + which version of SquirrelMail this is. + - Configurable session name to avoid conflicts with other PHP applications. + - Miscellaneous fixes for systems with error_reporting set to E_ALL. + - Many many other bugfixes and tweaks! + + +************************************* +*** SquirrelMail Devel Series 1.3 *** +************************************* + + +Version 1.3.2 +------------- + - Rewrite of message delivery related functions. + - User interface modifications. + - Added Japanese support thanks to Masato HIGASHIYAMA + - Remove NOOP checks in the POP3 client of mail_fetch to make things more + compatible and not break things which don't need to be broken. + - Fix src directory being moved on Windows systems, bugs #586518 #605256 #610676. + - This release is compatible with installations that have register_globals set to off. + - Do not lose user prefs/sigs/abooks when trying to save to a full disk. + - Make the SquirrelMail link on the right top configurable so a provider can point + to their own FAQ for example. + - Enable TZ in safe_mode if safe_mode_allowed_env_vars permits this bug #612148. + - Fix some bugs in folder management (create, delete,...) and add enhancements. + +Version 1.3.1 +------------- + - lots of fixes by Marc, including #596781 and #596930 + +Version 1.3.0 +------------- + - allow_call_time_by_reference=off fixes. + - Added forward as attachment in read_body. + - Better clean-up of left attachments at login. + - Restore compose sessions in case of a expired session. + - Added "Display Message" / "Up" links in read_body to navigate in messages with + attached messages (message/rfc822). + - Don't activate the Send Receipt link when the folder is the Sent folder. + - Moved view_header code out of read_body.php and put it in view_header.php. + - Open message/rfc822 attachments in read_body what makes it possible to + reply to attached messages. + - Rewrite of the newMail function in compose.php. This simplifies the + interface between read_body.php and compose.php. + - Moved compose related code from read_body to compose. + - Rewrite of mailbox-display to make it more modular (we use it in search.php). + - Added support for displaying multiple entities. + - Changed finding display entities. + - Extract disposition and xmailer header information in the headerparser + instead of request them individualy by an imap-call. + - Store message objects in the current session. This saves a lot of imap-calls. + - Added UID support. + - Store addresses in an object instead of a string. + - Rewrite of the bodystructureparser function. Now the message object contains + all described parameters in RFC2060. + - Introduction of the mime class where all mime related functions are situated + - Fixed removing MDN attachments. + - Fixed MDN problems with js confirmbox. + - Speedimprovements in case we download mime-entities. + - Added possibility to extract message/rfc822 attachments and store them as + the original message in a folder. + - Right to left languages implementation initiated + - Enable people with file_uploads = off to still send mail. Patch from Seth + E. Randall. + - Moved the generic_header hook back to page_header.php. bug #554278 + - Make default theme work. Bug #557313, thanks Tyler Bannister. + + +Version 1.2.7 -- June 21 2002 +----------------------------- + - fix for 'compose as new' link. bug #554886 + - fix charset format in the admin plugin. bug #550725 + - fix for errant '.' in default_folder_prefix. bug #551310 + - fix for folder names with '?' and '*'. bug # 559257, #552180 + - added the ability to search without the charset argument. #552288 + - Made /noselect node display optional. bug #554988, patch #452178 + - Improved support for macosx IMAP server thanks Brian Haun + - Added macosx friendly search, thanks Brian Haun bug #553038 + - Fixed word wrap problems when sending mail. bug #552961, #556143 + - Added possibility to use multiple compose windows without loss + of attachements. + - Fixed forward message/rfc822 attachments from a search + - Fix SpamCop plugin. + - Fixed send MDN link. + - Fixed dealing with \r\n and \n in smtp.php. + - Fixed to, cc, bcc arrays in message->header + - Speed optimizements in generating message-lists. + - Fixed loss of attachment with html addressbook. + - Fixed saving drafts with attachments + +Version 1.2.6 -- April 29 2002 +------------------------------ + - A complete MagicHTML rewrite since the existing codebase was + causing too many XSS problems. Hopefully now Nick Cleaton will + leave us alone. :) Testing credits go to Nick. + - Fix for cross-site scripting vulnerability (bug #545933) + Reported by Nick Cleaton. + - Changing "emtpy" to "purge" for more clarity. + - Fix for cross-site scripting vulnerability (bug #544658) + Reported by Nick Cleaton. + - Fix for incorrect word wrap in Opera (bug #495073) + - Workaround for older prefs: some of them contain "None" for + left_refresh (bug #540108) + - Fix for entities in cc and bcc fields on message display (bug #522493) + - Fixes for quoted values in the addressbook by David Rees (bug #538389) + - Fixed src/src problem (bug #538803) + - Fixed so non-ascii searches no longer fail both when searching + and when applying filters (bug #520918) + - Added POP3 Before SMTP option (feature request: #498428) + - Added a server-side thread sorting option per folder + - Added a server-side sorting global option + - Compose in new window size can be set in Display prefs. + - Logout error system unified. + - Fix for a "theme passed as cookie" exploit. + - PostgreSQL is now supported for database backed use + - Added user option to sort messages by internal date + - Changed attachment handling now attachments are adressed to + unique compose session. + - Added forward messages as message/rfc822 attachment + - Fixed handling message/rfc822 attachments + - Fixed folder list display when special folders have subfolders + - Added option to auto-append sig before reply/forward text (523853) + - Fixed subfolders being "orphaned" when renaming parents (498167) + - Filters can be applied to only new mail. + - Filters are updated when renaming/deleting folders (512056) + - Filtering now happens on login (filters plugin) + - Added option for WIDTH and HEIGHT tags to Org. Logo. (patch #412754) + - Fixed resume draft bug #513521, #514639 + - Newmail plugin: admin can disable the use of audio (patch #517698) + - Fixed quoting problem in safe html (patch #516542) + - SPAM folder no longer special folder (filters plugin) + - Filtering now happens on folder list refresh (filters plugin) + - Added checking of input of the folders page + - Made erronous deleting of folders harder (patch #514208) + - Made SquirrelMail display \Noselect nodes in Cyrus also made it + impossible to try to delete \Noselect nodes. (patch #452178) + - SquirrelSpell version 0.3.8 -- pretty configuration error reporting + added by popular demand. + - Improved the handling of IMAP [PARSE] messages to reduce retrieval error. + - Fixed small bug in handeling timezone (bug #536149) + - MDN message now RFC compatible (bug #537662) + - Fixed html tables in printer_friendly_bottom.php (patch #542367) + - Fixed return address of MDN receipts when having multiple identities + (patch #530139) + +Version 1.2.5 -- 22 February 2002 +--------------------------------- + - Multiple mailbox list calls cached. + - Added 'View unsafe images' link to the bottom of pages which contain + unsafe images. + - Fixed 'too many close table tags' and various other issues + which meant SM output didn't always validate as clean HTML. + - Added the ability to add special folders through plugins. + - Added an Always compose in a pop-up window option. + - Search page update with ability to save searches and search + all folders at once. - Made searching on multiple criteria possible, with thanks to Jason Munro - Fixed 'list all' in addressbook (#506624, thanks to Kurt Yoder) - - Fixed a small bug in db_prefs + - Fixed small bugs in db_prefs - Allowed SquirrelMail to work from within a frame, eg. not using _top this is configureable. (thanks to Simon Dick) - Added options to conf.pl to enable automated plugin installation: ./conf.pl --install-plugin . This allows plugins to be distributed in packages. Conf.pl now also reports when saving fails. - + - Attachment hooks now also allow specification of generic rules like + text/* which will be used when no specific rule is available. + - conf.pl can now configure database backed address books and + preferences. + - Version 0.3.7 of SquirrelSpell. Fixes a potential privacy + vulnerability (symlink attack), plus introduces formatting fixes + and javadoc-style comments. + - Bugfix in mailfetch reported by Mateusz Mazur + - Administrator plugin. A web based conf.pl replacement. + - Removed GLOBALS from conf.pl + - HTML messages optimization. + - Added support for requesting read receipts (MDN) and delivery receipts. + - Added the ability to stop users changing their names and email addresses. + - Added signature into multiple identities (Stefan Meier ) + - Updated user help files to reflect UI chanegs and added functionality. + Version 1.2.4 -- 25 January 2002 -------------------------------- - Fixes a nasty remote arbitrary command execution vulnerability