[announce] [SECURITY] Horde Groupware 5.2.22 (final)

Jan Schneider jan at horde.org
Thu Sep 21 13:22:06 UTC 2017


The Horde Team is pleased to announce the final release of the Horde Groupware
version 5.2.22.

Horde Groupware is a free, enterprise ready, browser based collaboration
suite. Users can manage and share calendars, contacts, tasks, notes,  
files, and
bookmarks with the standards compliant components from the Horde Project.

For upgrading instructions, please see
http://www.horde.org/apps/groupware/docs/UPGRADING

For detailed installation and configuration instructions, please see
http://www.horde.org/apps/groupware/docs/INSTALL

Thanks to Tim O'Driscoll <tim.odriscoll at lambrookschool.co.uk> for  
reporting the
missing authorization check for file downloads on backends that don't require
implicit authentication.

The major changes compared to the Horde Groupware version 5.2.21 are:

General changes:
     * Officially support PHP 7.
     * Small bugfixes.

Calendar changes:
     * Fixed deleting events from remote CalDAV servers.

Tasks changes:
     * Fixed unauthorized export of task lists.
     * Fixed returning to task list after completing a task.
     * Improved CalDAV synchronization compatibility.

File Manager changes:
     * Fixed unauthorized access to file downloads.

The full list of changes can be viewed here:

https://github.com/horde/horde/blob/2e939b792d0a73b24a4a6365790450c9a45e90dc/bundles/groupware/docs/CHANGES

Have fun!

The Horde Team.


More information about the announce mailing list