X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=ChangeLog;h=9bbc7e34e3f8542db92732a1ebaab245ccb83851;hp=af73b011d6560e3ca02cc9369f2eed523132246f;hb=7669bfaccd836d3f781ab1c6520687295d377a65;hpb=617973c4d0e6361c38b440618ff8100de94b9ed3

diff --git a/ChangeLog b/ChangeLog
index af73b011..9bbc7e34 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -2,8 +2,8 @@
 *** SquirrelMail Stable Series 1.4 ***
 **************************************
 
-Version 1.4.0 RC 2
-------------------
+Version 1.4.0 RC 2a
+-------------------
   - Fix broken themes box in display options.
   - Massive overhaul of administrator plugin.
   - Added new function sqgetGlobalVar to global.php to provide direct access
@@ -32,7 +32,12 @@ Version 1.4.0 RC 2
     have open_basedir restrictions. Thanks Jimmy Connor.
   - Fix broken abook_take plugin.
   - Fix HTML errors that caused display problems in NS4.
-	
+  - Correctly fold encoded header lines.
+  - Fix prefs caching not working correctly in PHP 4.3 caused by a stupid
+    version checking mechanism.
+  - Fix XXS hole that allowed JavaScript execution by sending someone
+    an email with specially crafted headers. Thanks Jason Munro.
+
 Version 1.4.0 RC 1
 ------------------
   - Change the way highlighting rules are stored to make them more reliable and
@@ -42,7 +47,7 @@ Version 1.4.0 RC 1
   - Experimental TLS support for IMAP and SMTP (requires PHP 4.3.x)
   - Override settings with config_local.php
   - Compose form no longer shows attachment options if php file_uploads
-  	disabled
+    disabled
   - Improved bodystructure parsing.
   - Support for windows-1257 charset.
   - Optimizations to the number of IMAP calls.