first pass at a changelog for 4.900

This commit is contained in:
Jesse Vincent 2014-01-20 21:39:41 -05:00
parent 094156cc2a
commit 4214c7290e
1 changed files with 21 additions and 0 deletions

View File

@ -8,6 +8,27 @@
They are automatically updated with "ant bump-version".
-->
<changelog>
<release version="4.900" versioncode="21000" >
<change>Fix issue 6064: Inline images don't display on KitKat</change>
<change>Update list of German Internet providers</change>
<change>Add provider Outlook.sk and Azet.sk to provider list</change>
<change>Update Brazilian Portuguese, Czech, Danish, Dutch, French, Greek, Hungarian, Polish, Russian, Slovak, Spanish, and Ukrainian translations</change>
<change>Fix POP3 STLS command</change>
<change>Use a locale-specific date in the header of a quoted message</change>
<change>Account preferences clean-up</change>
<change>Make IMAP autoconfig recognize "Draft" as drafts folder</change>
<change>Add posteo.de to providers.xml</change>
<change>Return proper error message when certificate couldn't be verified against global key store</change>
<change>Add support for bitcoin URIs</change>
<change>Change the way we harden SSL/TLS sockets Blacklist a couple of weak ciphers, bring known ones in a defined order and sort unknown ciphers at the end. Also re-enable SSLv3 because it's still used a lot.</change>
<change>Implement pruning of old certificates from LocalKeyStore. Certificates are deleted whenever server settings are changed or an account is deleted.</change>
<change>Fix inadequate certificate validation. Proper host name validation was not being performed for certificates kept in the local keystore. If an attacker could convince a user to accept and store an attacker's certificate, then that certificate could be used for MITM attacks, giving the attacker access to all connections to all servers in all accounts in K-9.</change>
<change>Users can now use different certificates for different servers on the same host (listening to different ports).</change>
<change>The above changes mean that users might have to re-accept certificates that they had previously accepted and are still using (but only if the certificate's Subject doesn't match the host that they are connecting to).</change>
<change>Make sure to return different colors for senders with different name, but the same mail address (e.g. mails sent by certain issue tracking systems).</change>
<change>With the new webview scrollview combo we've got loadinoverviewmode seems to behave better.</change>
<change>Fix file selection for import Using FLAG_ACTIVITY_NO_HISTORY will cause the file selection to fail when KitKat's "Open from" activity opens a third-party activity.</change>
</release>
<release version="4.701" versioncode="19002" >
<change>Overhauled how we do message view scrolling to fix a KitKat issue. Thanks to Joe Steele!</change>
<change>Hardened TLS cipher suites and versions</change>