Update to Horde

Hello,

There was an update made to Horde, where they’ve released the final version of 3.1.4 today.

Is there a chance of Nodeworx being updated to this latest version any time soon?

Thanks in advance! :slight_smile:

From: Jan Schneider <jan@horde.org>
Date: 14-Mar-2007 21:14
Subject: [announce] Horde 3.1.4 (final)

The Horde Team is pleased to announce the final release of the Horde
Application Framework version 3.1.4.

This is a bugfix release that also fixes an arbitrary file deletion
vulnerability exploitable by local system (not Horde) users on systems using
the example cron cleanup script.

Many thanks to the iDefense Vulnerability Contributor Program for reporting
these problems and working with us to test the fixes.

The Horde Application Framework is a modular, general-purpose web application
framework written in PHP. It provides an extensive array of libraries that are
targeted at the common problems and tasks involved in developing modern web
applications.

Major changes compared to Horde 3.1.4-RC1 are:

  • Correctly quote file names in cleanup script for temporary files.
  • Detect unencrypted PGP messages.

Major changes compared to Horde 3.1.3 are:

  • Rewritten Oracle session handler.
  • Added vTimezone support to iCalendar API and ORG support to vCard API.
  • Improved virtual domain support for Cyrus SQL authentication driver.
  • Improved Samba authentication driver.
  • Improved automatic webroot detection.
  • Improved signature dimming.
  • Improved compatibility of generated ZIP files.
  • Fixed an XSS vulnerability in the language selection.
  • Fixed validation of some email distribution lists.
  • Several Kolab related fixes.
  • Lots of small fixes and improvements.
  • Updated Brazilian Portuguese, Catalan, Dutch, French, German, Portuguese
    and Traditional Chinese translations.

The full list of changes (from version 3.1.3) can be viewed here:

http://cvs.horde.org/diff.php/horde/docs/CHANGES?r1=1.515.2.261&r2=1.515.2.298&ty=h

The Horde 3.1.4 distribution is available from the following locations:

ftp://ftp.horde.org/pub/horde/horde-3.1.4.tar.gz
http://ftp.horde.org/pub/horde/horde-3.1.4.tar.gz

Patches against version 3.1.3 are available at:

ftp://ftp.horde.org/pub/horde/patches/patch-horde-3.1.3-3.1.4.gz
http://ftp.horde.org/pub/horde/patches/patch-horde-3.1.3-3.1.4.gz

Or, for quicker access, download from your nearest mirror:

http://www.horde.org/mirrors.php

MD5 sums for the packages are as follows:

90bb96e810f165c2a853175303bd2dbb horde-3.1.4.tar.gz
0402ccebe048b210d887cc4e67c47f64 patch-horde-3.1.3-3.1.4.gz

Have fun!

The Horde Team.

We always update Horde, Squirrelmail, phpMyAdmin, etc to the newest versions with each InterWorx release. Currently they are all in the core InteWorx RPM’s so that’s the only way to do it. Eventually we will probably separate them to make such upgrades easeier and more frequent.

I hope that an update is coming soon, as both SquirrelMail and Horde need an update.