[dev] 2.2.5 ?

Brent J. Nordquist bjn@horde.org
Mon, 21 May 2001 22:52:38 -0500 (CDT)


OK, hopefully we're back on track for cutting 2.2.5 now.  :-)  Here's a
revised proposal for the announcement to take into account the security
issues.

----------cut here----------
Subject: IMP 2.2.5 (SECURITY) released

The Horde team announces the availability of IMP 2.2.5, a.k.a. the
"put 2.2.x to bed" release.  Just as the release was going to press,
some potential security concerns relating to attachment temporary files
(and /tmp races) were raised; 2.2.5 addresses these concerns.

This release consolidates several fixes that have been languishing in
CVS (browser detection for IE6, a new locale/se translation, fixes for
LDAP searching) plus a back-port of the href="javascript:" IE SSL fix
from the 2.3.x branch.  For a complete list of changes in this release,
please consult the docs/CHANGES files.

It's the team's hope that 2.2.5 will be the last release in the 2.2.x
series (barring major security fixes).

Download:

This release can be downloaded from the following locations:

	ftp://ftp.horde.org/pub/horde/
	ftp://ftp.horde.org/pub/imp/

MD5 checksums:

00000000000000000000000000000000  horde-1.2.5.tar.gz
00000000000000000000000000000000  imp-2.2.5.tar.gz
00000000000000000000000000000000  patch-horde-1.2.4-1.2.5.gz
00000000000000000000000000000000  patch-imp-2.2.4-2.2.5.gz
----------cut here----------

-- 
Brent J. Nordquist <bjn@horde.org> N0BJN
Yahoo!: Brent_Nordquist / AIM: BrentJNordquist / ICQ: 76158942