[announce] [SECURITY] Horde Groupware Webmail Edition 5.2.10 (final)
Michael J Rubinsky
mrubinsk at horde.org
Thu Aug 6 02:08:53 UTC 2015
The Horde Team is pleased to announce the final release of the Horde Groupware
Webmail Edition version 5.2.10.
Horde Groupware Webmail Edition is a free, enterprise ready, browser based
communication suite. Users can read, send and organize email messages
with four
different webmail interfaces and manage and share calendars, contacts, tasks,
notes, files, and bookmarks with the standards compliant components from the
Horde Project.
For upgrading instructions, please see
http://www.horde.org/apps/webmail/docs/UPGRADING
For detailed installation and configuration instructions, please see
http://www.horde.org/apps/webmail/docs/INSTALL
Thanks to an anonymous researcher working with Beyond Security's SecuriTeam
Secure Disclosure program <http://www.beyondsecurity.com/ssd.html> for
discovering the vulnerability.
The major changes compared to the Horde Groupware Webmail Edition
version 5.2.9
are:
* SECURITY: Fix XSS vulnerability in Files application when viewing
directory contents.
The full list of changes can be viewed here:
https://github.com/horde/horde/blob/43ac10943471003ce6d3005102df9ba3cad7ae4c/bundles/webmail/docs/CHANGES
Have fun!
The Horde Team.
More information about the announce
mailing list