[announce] [SECURITY] Trean H5 (1.1.10) (final)

Michael J Rubinsky mrubinsk at horde.org
Sun Mar 8 21:28:03 UTC 2020


The Horde Team is pleased to announce the final release of the Trean Bookmarks
Manager version H5 (1.1.10).

Trean is a web-based bookmarks application that provides management of browser
bookmarks, including support for tagging, link checking, and searching
bookmarks. For more information on Trean, visit
http://www.horde.org/apps/trean.

For upgrading instructions, please see
http://www.horde.org/apps/horde/docs/UPGRADING

For detailed installation and configuration instructions, please see
http://www.horde.org/apps/trean/docs/INSTALL

Major changes compared to Trean version H5 (1.1.9) are:
     * Fix a Directory Traversal/RCE Vulnerability
       (CVE-2020-8865 Reported By: Andrea Cardaci working with Trend  
Micro Zero Day Initiative).

The full list of changes can be viewed here:

https://github.com/horde/trean/blob/f9d0994c73bbd90bb3c205ad12177cb57caca0c2/docs/CHANGES

Have fun!

The Horde Team.


More information about the announce mailing list