[horde] [SECURITY] Horde Groupware Webmail Edition 5.2.11 (final)

[Michael J Rubinsky]

The Horde Team is pleased to announce the final release of the Horde Groupware
Webmail Edition version 5.2.11.

Horde Groupware Webmail Edition is a free, enterprise ready, browser based
communication suite. Users can read, send and organize email messages  
with four
different webmail interfaces and manage and share calendars, contacts, tasks,
notes, files, and bookmarks with the standards compliant components from the
Horde Project.

For upgrading instructions, please see
http://www.horde.org/apps/webmail/docs/UPGRADING

For detailed installation and configuration instructions, please see
http://www.horde.org/apps/webmail/docs/INSTALL


The major changes compared to the Horde Groupware Webmail Edition  
version 5.2.10
are:

General changes:
     * SECURITY: Protect against CSRF attacks on various admin pages.
     * Don't apply access keys to checkbox and radiobox rows in the sidebar
       (Bug #14103).
     * Send correct MIME type for non-statically cached javascript files.
     * Added configuration support for version 2 of WorldWeatherOnline's API.

Address Book changes:
     * Better prevention of importing duplicate contacts with same email
       addresses via the API (Bug #14119).
     * Allow API to search all email type fields when calling getField().
     * Fix removing all contacts owned by a specific user.
     * Fix inserting and updating photos with Oracle backends.
     * Fix incorrectly populating email field when importing vCard  
(Bug #14046).

Bookmarks changes:
     * Update Italian translation.
     * Remove object reference from Content when object is deleted  
(Bug #14112).

Calendar changes:
     * Fix issue when replacing an event via the API when the attendee list
       changes.
     * Fix exporting events from Horde_Perms::SHOW calendars over DAV
       (Bug #14128).
     * Send CACNEL iTip when attendee is removed from a meeting
       (Request #14118).
     * Fix incorrect offset of freebusy times in certain cases (Bug #14084).
     * Fix handling of email groups as attendees (Bug #14093).
     * Fix importing text/calendar data via API (Bug #14089).

Files changes:
     * Update Italian translation.

Filters changes:
     * Fix using transport parameters in Procmail driver.
     * Update Czech translation.
     * Update Italian translation.
     * Fix selecting incorrect rule when performing any action after reordering
       (Bug #14064 and Bug #13643).
     * Fix duplicate messages when using the redirect-and-keep rule with
       Procmail backends.
     * Update Italian translation.
     * Add database migration for fixing corrupt rule ordering.
     * Fix corruption of rule order when reordering rules in certain cases.

Mail changes:
     * Request that the contacts API only consider email fields when detecting
       duplicates during automatic saving of attendees to the address book
       (Bug #14119).
     * Don't show "Create Keys" button if creating PGP keys is disabled
       (steffen.hau at rz.uni-mannheim.de, Request #14096).
     * Fix displaying iTips with certain locale/date_format preference
       combinations (Bug #14076).

Notes changes:
     * Update Italian translation.
     * Remove object reference from Content when object is deleted  
(Bug #14112).
     * Remove tags from Content when tagged object is deleted (Bug #14112).

Tasks changes:
     * Update Italian translation.
     * Remove object reference from Content when object is deleted  
(Bug #14112).
     * Remove tags from Content when tagged object is deleted (Bug #14112).

The full list of changes can be viewed here:

https://github.com/horde/horde/blob/86bd3a7ddd52da0bb74c89b19989bf6566653918/bundles/webmail/docs/CHANGES

Have fun!

The Horde Team.