diff --git a/ChangeLog b/ChangeLog
index ceb521f5..a8c03c88 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,6 +1,20 @@
-4.8 "" (released xx.xx.xxxx)
+4.8 "Hallam Foe" (released xx.xx.xxxx)
 
-  *
+  * Fix message typo for not disclosing information.
+    Type: documentation
+    Closes: SF bug #1758531
+    Changed: linkcheck/director/console.py, po/de.po, po/linkchecker.pot
+
+  * Always read the request body data on persistent HTTP connections, else
+    subsequent will get data from the previous request.
+    Type: bugfix
+    Changed: linkcheck/checker/httpurl.py
+
+  * Zope server workaround: assume missing HEAD support when receiving
+    text/plain on a HEAD request. Switch to GET request in this case.
+    Type: bugfix
+    Closes: SF bug #1770131
+    Changed: linkcheck/checker/httpurl.py
 
 4.7 "300" (released 17.6.2007)
 
diff --git a/TODO b/TODO
index 2ff301c6..274305d0 100644
--- a/TODO
+++ b/TODO
@@ -1,5 +1,10 @@
+- [BUG REPORT] There are reports that file descriptors are leaking.
+  Rework the code so that it always closes the connections.
+  Question: what to do with cached persistent connections? Also close
+  them in all cases.
+
 - [BUG REPORT] the web interface only runs on the server it is installed on.
-  The   ALLOWED_HOSTS and ALLOWED_SERVERS variables in lc.cgi don't work and
+  The ALLOWED_HOSTS and ALLOWED_SERVERS variables in lc.cgi don't work and
   are not (well) documented.
 
 - [BUGFIX] The URL in the log output is double normed.