Download Horde Groupware Webmail 1.2.2 / 1.1.5

Horde Groupware Webmail is, as the name suggests, a package with which groupware and webmail can be offered. The package is written in php and uses the Horde framework. For more information, we refer you to this one and this one pages. The developers released versions 1.2.2 and 1.1.5 of Horde Groupware Webmail a few days ago with the following announcements, according to the mailing list:

Horde Groupware Webmail Edition 1.2.2 (final)

The Horde Team is pleased to announce the final release of the Horde Groupware Webmail Edition version 1.2.2.

This is a minor security release that fixes unescaped output in the tag cloud search script, validates the Horde_Image driver name to prevent a possible local file inclusion vulnerability, and fixes unescaped output in several webmail scripts. All users are encouraged to upgrade to this release. Thanks to Gunnar Wrobel for finding these issues in a code audit.

The major changes compared to the Horde Groupware Webmail Edition version 1.2.1 are:

• Fixed unescaped output in the tag cloud block.
• Fixed unvalidated Horde_Image driver name.
• Fixed unescaped output in message.php, pgp.php and smime.php.
• Fixed problems with SQL Shares and PostgreSQL.
• Added support for Mozilla Sunbird snooze properties.
• Several bug fixes and minor improvements in Mail component.

The full list of changes (from version 1.2.1) can be viewed here.

Horde Groupware Webmail Edition 1.1.5 (final)

The Horde Team is pleased to announce the final release of the Horde Groupware Webmail Edition version 1.1.5.

This is a minor security release that fixes unescaped output in the tag cloud search script, validates the Horde_Image driver name to prevent a possible local file inclusion vulnerability, and fixes unescaped output in several webmail scripts. All users are encouraged to upgrade to this release. Thanks to Gunnar Wrobel for finding these issues in a code audit.

The major changes compared to the Horde Groupware Webmail Edition version 1.1.4 are:

• Fixed unescaped output in the tag cloud block.
• Fixed unvalidated Horde_Image driver name.
• Fixed unescaped output in message.php, pgp.php and smime.php.

The full list of changes (from version 1.1.4) can be viewed here.