From: Thijs K. <ki...@us...> - 2005-12-10 14:13:23
|
Update of /cvsroot/squirrelmail/squirrelmail In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv2265 Modified Files: Tag: SM-1_4-STABLE ChangeLog ReleaseNotes Log Message: prepare for 1.4.6rc1 Index: ChangeLog =================================================================== RCS file: /cvsroot/squirrelmail/squirrelmail/ChangeLog,v retrieving revision 1.332.2.311 retrieving revision 1.332.2.312 diff -u -w -r1.332.2.311 -r1.332.2.312 --- ChangeLog 10 Dec 2005 13:59:04 -0000 1.332.2.311 +++ ChangeLog 10 Dec 2005 14:13:08 -0000 1.332.2.312 @@ -2,8 +2,8 @@ *** SquirrelMail Stable Series 1.4 *** ************************************** -Version 1.4.6 - CVS -------------------- +Version 1.4.6 Release Candidate 1 - 10 December 2005 +---------------------------------------------------- - Added Simple Green, Silver Steel, Wood, Bluesome, Simple Green2 and Simple Purple themes. Contributed by Pavel Spatny, Saku Lehtio (#1188209), Vicky Pyne (#1217066 and #1217069). Index: ReleaseNotes =================================================================== RCS file: /cvsroot/squirrelmail/squirrelmail/ReleaseNotes,v retrieving revision 1.23.2.21 retrieving revision 1.23.2.22 diff -u -w -r1.23.2.21 -r1.23.2.22 --- ReleaseNotes 13 Jul 2005 18:37:52 -0000 1.23.2.21 +++ ReleaseNotes 10 Dec 2005 14:13:08 -0000 1.23.2.22 @@ -1,7 +1,7 @@ /***************************************************************** - * Release Notes: SquirrelMail 1.4.5 * - * The "Squishy Squirrel" Release * - * June 2005 * + * Release Notes: SquirrelMail 1.4.6 Release Candidate 1 * + * The "???" Release * + * 10 December 2005 * *****************************************************************/ In this edition of SquirrelMail Release Notes: @@ -16,25 +16,14 @@ All about this release ====================== -This 1.4.5 release is a maintentance release, featuring: +This 1.4.6rc1 is a Release Candidate: a testing version released to the +public to make sure it's stable enough to become 1.4.6. + +This release addresses the following problems since 1.4.5: - Security fixes (see below) - A lot of bugfixes - Stability and interoperability enhancements - - -Security Issues -=============== - -A couple of different Cross Site Scripting issues were discovered -and fixed in this release. Thanks go to Martijn Brinkers who helped -us a great deal in uncovering these. They are referenced under CVE -number CAN-2005-1769. - -A different vulnerability has been found in the identities options -page that would in some circumstances allow for modifying other -people's preferences and possible cross site scripting. Thanks to -James Bercegay from GulfTech Security Research for finding this -issue, which is referenced as CAN-2005-2095. +(see ChangeLog for a full list) Locales / Translations / Charsets |