including XSS (prefs, MIME viewer) and preventing overwriting of webserver-
accessible files (image form fields, e.g. with Turba). For more information
see http://lists.horde.org/archives/announce/2009/000512.html.
Thanks Vijay Sankar, Michiel van Baak and Daniel Levai for testing/feedback.
The major changes compared to the Kronolith version H3 (2.3) are:
* Added script to import events from SquirrelMail calendars.
* Added option to manually change attendee responses.
* Improved holidays support.
* Many minor bug fixes.
is built by first unpacking the distfile so it can be patched.
Sprinkle a few SQL typecasts where needed to make Kronolith happy
again with PostgreSQL 8.3.x. Discussed with simon.
Calendar Application version H3 (2.1.7).
This is a bugfix release that also fixes privilege escalation in the Horde API
and missing ownership validation in the share management. All users are
encouraged to upgrade to this version.
Major changes compared to the Kronolith H3 (2.1.6) version are:
* Fixed privilege escalation in the Horde API.
* Fixed missing ownership validation on share changes.
* Updated Japanese translation.
* Small bugfixes and improvements.
The full list of changes (from version H3 (2.1.6)) can be viewed here:
http://cvs.horde.org/diff.php/kronolith/docs/CHANGES?r1=1.165.2.158&r2=1.165.2.161.2.3&ty=h
--
Kronolith is the Horde calendar application. It provides a stable
and featureful individual calendar system for every Horde user, and
collaboration/scheduling features are starting to take shape. It
makes extensive use of the Horde Framework to provide integration
with other applications.
