X-Git-Url: https://vcs.fsf.org/?p=squirrelmail.git;a=blobdiff_plain;f=doc%2FChangeLog;h=23300a5bdf11b448b8b9895831a1bb4d4141473c;hp=00f1a2dd79b04476e30750a8d5eadb25e5fa1fbf;hb=ace33b58d2b4d8266e1dc66d1bbe54074eb01a70;hpb=c19e54832894374fb56e2e5f12099e45284f68f5 diff --git a/doc/ChangeLog b/doc/ChangeLog index 00f1a2dd..23300a5b 100644 --- a/doc/ChangeLog +++ b/doc/ChangeLog @@ -4,6 +4,8 @@ Version 1.5.2 - SVN ------------------- + - Fixed system lock-ups caused by a combination of certain rare, malformed + message headers and buggy versions of PHP mbstring (#3053349, $2987016). - Fix broken set_url_var function in functions/html.php (#1729814). - Fix incorrect detection of auth mechanisms in conf.pl (#1727033). - The search expression in the LDAP backend of the Addressbook is now @@ -333,6 +335,27 @@ Version 1.5.2 - SVN - Encoded From headers now properly quoted (#2830141). - Multibyte strings (notably subjects) are now handled correctly (#2824813, #2925731). + - X-DNS-Prefetch-Control: off header is now sent to browsers to prevent information + leakage when Firefox does DNS prefetching for URLs contained in emails. + - Added the ability to configure Google Mail (Gmail) as the mail server + behind SquirrelMail. + - Fix error with SpamCop reporting plugin not being able to send report as + emails (#1795310). + - Fix typo in SpamCop plugin. + - Reduced default time security tokens stay valid from 30 days to 2 days + (reduces chances of session data growing too large) + - Fixed minor vulnerability in Mail Fetch plugin [CVE-2010-1637/TEHTRI-SA-2010-009] + - Now properly quote personal part of encoded addresses when replying. + - Now fill in default subject when forwarding as attachment (#2936541). + - Fixed issues caused by use of PostgreSQL keyword "user" in SquirrelMail's + default preferences database schema (#2943483). + - Fixed attachment filename decoding problems (#2994865). + - Now allow multiple plugins to handle (add links for) a single + attachment MIME type. + - Fixed sqauth_read_password() for plugins on the login_verified hook. + - Forced addition of a file suffix to attachments that lack a filename + (helps forwarded messages avoid spam filters) (Thanks to Petr + Kletecka) (#3139004). Version 1.5.1 (branched on 2006-02-12) --------------------------------------