[announce] [SECURITY] Kronolith H5 (4.2.25) (final)

[Michael J Rubinsky]

The Horde Team is pleased to announce the final release of the Kronolith
Calendar Application version H5 (4.2.25).

Kronolith is the Horde calendar application. It provides web-based calendars
backed by a SQL database or a Kolab server. Supported features include  
Ajax and
mobile interfaces, CalDAV support, shared calendars, remote calendars,
invitation management (iCalendar/iTip), free/busy management, resource
management, alarms, recurring events, and a sophisticated day/week view which
handles arbitrary numbers of overlapping events. For more information on
Kronolith, visit http://www.horde.org/apps/kronolith.

For upgrading instructions, please see
http://www.horde.org/apps/kronolith/docs/UPGRADING

For detailed installation and configuration instructions, please see
http://www.horde.org/apps/kronolith/docs/INSTALL

The major changes compared to Kronolith version H5 (4.2.24) are:
     * Fix XSS vulnerability in resource group property view (Bug #14857).
     * Fix XSS vulnerability in event URL field (Bug #14857).

The full list of changes can be viewed here:

https://github.com/horde/kronolith/blob/b99a31396591e4e38e232870c50c3c3e619d58f7/docs/CHANGES

Have fun!

The Horde Team.

-- 
mike
The Horde Project
http://www.horde.org
https://www.facebook.com/hordeproject
https://www.twitter.com/hordeproject
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-keys
Size: 9272 bytes
Desc: PGP Public Key
URL: <https://lists.horde.org/archives/announce/attachments/20180928/bbaad87b/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 821 bytes
Desc: PGP Digital Signature
URL: <https://lists.horde.org/archives/announce/attachments/20180928/bbaad87b/attachment-0001.bin>