[announce] [SECURITY] Horde Groupware 5.2.12 (final)

Jan Schneider jan at horde.org
Tue Feb 2 16:22:07 UTC 2016

The Horde Team is pleased to announce the final release of the Horde Groupware
version 5.2.12.

Horde Groupware is a free, enterprise ready, browser based collaboration
suite. Users can manage and share calendars, contacts, tasks, notes,  
files, and
bookmarks with the standards compliant components from the Horde Project.

For upgrading instructions, please see

For detailed installation and configuration instructions, please see

Thanks to duarteetraud at gmail.com and Centurion Information Security
(www.centurioninfosec.sg) for reporting the XSS vulnerabilities.

The major changes compared to the Horde Groupware version 5.2.11 are:

General changes:
     * Fixed XSS vulnerabilities in menu bar and form renderer.
     * Improved Oracle compatibility.
     * Several bugfixes and improvements.

Address Book changes:
     * Fixed importing of vCard via the API.

Calendar changes:
     * Honor preference to confirm deletions in dynamic view.
     * Fixed accidental deletion of events.
     * Fixed week numbers in basic view.

Tasks changes:
     * Fixed several parent-child-tasks bugs.
     * Fixed two fatal errors.
     * Fixed Kolab issues.

The full list of changes can be viewed here:


Have fun!

The Horde Team.

More information about the announce mailing list