[horde] [SECURITY] Horde Groupware Webmail Edition 5.2.21 (final)

[Jan Schneider]

Zitat von Maurício José T. Tecles <mtecles at biof.ufrj.br>:

> Citando Jan Schneider <jan at horde.org>:
>
>> The Horde Team is pleased to announce the final release of the  
>> Horde Groupware
>> Webmail Edition version 5.2.21.
>>
>> Horde Groupware Webmail Edition is a free, enterprise ready, browser based
>> communication suite. Users can read, send and organize email  
>> messages with four
>> different webmail interfaces and manage and share calendars,  
>> contacts, tasks,
>> notes, files, and bookmarks with the standards compliant components from the
>> Horde Project.
>>
>> For upgrading instructions, please see
>> http://www.horde.org/apps/webmail/docs/UPGRADING
>>
>> For detailed installation and configuration instructions, please see
>> http://www.horde.org/apps/webmail/docs/INSTALL
>>
>> The major changes compared to the Horde Groupware Webmail Edition version
>> 5.2.20 are:
>>
>> General changes:
>>    * Fixed open redirects.
>>    * Fixed XSS vulnerabilities.
>>    * Small bugfixes and improvements.
>>
>> The full list of changes can be viewed here:
>>
>> https://github.com/horde/horde/blob/943774c44518b50ad321bec160d4f8a3c04cbadb/bundles/webmail/docs/CHANGES
>>
>> Have fun!
>>
>> The Horde Team.
>> -- 
>> Horde mailing list
>> Frequently Asked Questions: http://horde.org/faq/
>> To unsubscribe, mail: horde-unsubscribe at lists.horde.org
>
> Upgrading from Horde Groupware Webmail Edition 5.2.20 to 5.2.21 I got:
>
>  pear upgrade -a -B horde/webmail
>
> Unknown remote channel: phpseclib.sourceforge.net
> Package "pear.horde.org/Horde_Core" dependency  
> "pear.horde.org/Horde_Backup" has no releases
> horde/imp can optionally use package  
> "channel://phpseclib.sourceforge.net/File_ASN1"
> horde/Horde_Core can optionally use package "horde/Horde_Backup"  
> (version >= 1.0.0, version <= 2.0.0alpha1, excluded versions:  
> 3.0.0alpha1)
>
> Should I include channel phpseclib.sourceforge.net and install  
> Horde_Backup and File_ASN1?

Neither is a mandatory dependency, so you can just ignore them.  
Horde_Backup indeed has no releases yet, since it's not ready yet. To  
install File_ASN1, you indeed have to add phpseclib.sourceforge.net.

-- 
Jan Schneider
The Horde Project
https://www.horde.org/