[horde] [SECURITY] Horde Groupware Webmail Edition 5.2.12 (final)

[Jan Schneider]

The Horde Team is pleased to announce the final release of the Horde Groupware
Webmail Edition version 5.2.12.

Horde Groupware Webmail Edition is a free, enterprise ready, browser based
communication suite. Users can read, send and organize email messages  
with four
different webmail interfaces and manage and share calendars, contacts, tasks,
notes, files, and bookmarks with the standards compliant components from the
Horde Project.

For upgrading instructions, please see
http://www.horde.org/apps/webmail/docs/UPGRADING

For detailed installation and configuration instructions, please see
http://www.horde.org/apps/webmail/docs/INSTALL

Thanks to duarteetraud at gmail.com and Centurion Information Security
(www.centurioninfosec.sg) for reporting the XSS vulnerabilities.

The major changes compared to the Horde Groupware Webmail Edition version
5.2.11 are:

General changes:
     * Fixed XSS vulnerabilities in menu bar and form renderer.
     * Improved Oracle compatibility.
     * Several bugfixes and improvements.

Mail changes:
     * Improved HTML to plain text conversion.
     * Sending MDNs from the correct identity.

Filters changes:
     * Fixed editing shared rulesets.

Address Book changes:
     * Fixed importing of vCard via the API.

Calendar changes:
     * Honor preference to confirm deletions in dynamic view.
     * Fixed accidental deletion of events.
     * Fixed week numbers in basic view.

Tasks changes:
     * Fixed several parent-child-tasks bugs.
     * Fixed two fatal errors.
     * Fixed Kolab issues.

The full list of changes can be viewed here:

https://github.com/horde/horde/blob/e838d4c800b0d1ecaf8b4cc613fd3af4f994c79c/bundles/webmail/docs/CHANGES

Have fun!

The Horde Team.