[announce] [SECURITY] Kronolith H3 (2.1.4) (final)

Jan Schneider jan at horde.org
Wed Nov 29 04:42:23 PST 2006

The Horde Team is pleased to announce the final release of the Kronolith
Calendar Application version H3 (2.1.4).

This is a security release. All users are strongly advised to upgrade as soon
as possible. Thanks to iDefense for the vulnerability report.

Kronolith is the Horde calendar application.  It provides web-based calendars
backed by a SQL database or a Kolab server.  Supported features include shared
calendars, remote calendars, meeting management, alarms, recurring events, and
a sophisticated day/week view which handles arbitrary numbers of overlapping

Major changes compared to the Kronolith H3 (2.1.3) version are:
    * Close arbitrary file inclusion in free/busy views.

The full list of changes (from version H3 (2.1.3)) can be viewed here:


The Kronolith H3 (2.1.4) distribution is available from the following locations:


Patches against version H3 (2.1.3) are available at:


Or, for quicker access, download from your nearest mirror:


MD5 sums for the packages are as follows:

    df6d6fc99012865b18b089212c7544ad  kronolith-h3-2.1.4.tar.gz
    b20cd6c44db40649fd98cc2716f1cb47  patch-kronolith-h3-2.1.3-h3-2.1.4.gz

Have fun!

The Horde Team.

More information about the announce mailing list