[horde] Horde Groupware 1.0.4 (final)

[Jan Schneider]

The Horde Team is pleased to announce the final release of the Horde Groupware
version 1.0.4.

This is a security release that fixes unchecked access to address book
contacts in the same SQL table, if the unique key of another user's contact
can be guessed.  All users are encouraged to upgrade to this version.

Horde Groupware is a free, enterprise ready, browser based collaboration
suite. Users can manage and share calendars, contacts, tasks and notes with the
standards compliant components from the Horde Project.

Major changes compared to Horde Groupware 1.0.3 are:
    * Fixed unchecked access to contacts in the same address book SQL table.

The full list of changes (from version 1.0.3) can be viewed here:

http://cvs.horde.org/diff.php/groupware/docs/groupware/CHANGES?r1=1.17.2.1&r2=1.17.2.2&ty=h

The Horde Groupware 1.0.4 distribution is available from the following locations:

    ftp://ftp.horde.org/pub/horde-groupware/horde-groupware-1.0.4.tar.gz
    http://ftp.horde.org/pub/horde-groupware/horde-groupware-1.0.4.tar.gz

Patches against version 1.0.3 are available at:

    ftp://ftp.horde.org/pub/horde-groupware/patches/patch-horde-groupware-1.0.3-1.0.4.gz
    http://ftp.horde.org/pub/horde-groupware/patches/patch-horde-groupware-1.0.3-1.0.4.gz

Or, for quicker access, download from your nearest mirror:

    http://www.horde.org/mirrors.php

MD5 sums for the packages are as follows:

    7178e7dd5f24e9f6acca13c9a794d0db  horde-groupware-1.0.4.tar.gz
    d0cd5f8384082ce7a4b5dec928e1545a  patch-horde-groupware-1.0.3-1.0.4.gz

Have fun!

The Horde Team.