/
CHANGES
10519 lines (9298 loc) · 441 KB
/
CHANGES
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
----------
v5.3.0-git
----------
-------
v5.2.12
-------
[jan] Use access rules compatible with both Apache 2.2 and 2.4.
Horde Changes
-------------
[jan] SECURITY: Fix XSS vulnerability in menu bar exposed by few applications
(Bug #14213).
[jan] Add more detailed user DN settings to Kolab group configuration (Request
#11737).
[jan] Fix returning to last page after problem reporting from AJAX pages (Bug
#12112).
[jan] Fix custom database configuration for groups (Bug #11664).
[mjr] Fix reporting results for non-select queries in administrative sql shell
(Bug #14216).
Mail Changes
------------
[jan] Don't strip PGP mime parts when saving sent messages (Bug #14233).
[jan] Fix retrieving public PGP keys with certain HTTP client backends.
[jan] Send MDNs from the correct identity (Bug #14034).
[jan] Fix autocompleter filtering if items exceed the maximum size
(jsveiga@it.eng.br, Bug #13984).
[jan] Allow to disable remote accounts by locking the preference.
[jan] Fix setting title with newmail count in IE11 and Edge (Bug #14189).
[jan] Fix wrapping of plain text converted from HTML MIME parts.
Filters Changes
---------------
[jan] Fix editing shared rulesets (Bug #12694).
[jan] Allow to edit permissions of another user's rules if that user assigned
ownership.
[jan] Fix variable name in vacation_addresses hook example.
[jan] Correctly save names of mailbox created from the rule form (Bug #14150).
[mjr] Fix invalid URLs in certain forms when cookies are disabled (Bug #14148).
Address Book Changes
--------------------
[jan] Fix building search query if some fields are set for strict search (Bug
#12272).
[mjr] Fix splitting tags over ActiveSync (Bug #14218).
[mjr] Fix searching within virtual address books (Bug #14155).
[mjr] Fix import of vCard with single component via API.
[mjr] Fix regression in removing all contacts from a single address book in the
SQL driver (Bug #14145, Guenter Bartsch
<guenter.bartsch@vista-rasch.com>).
Calendar Changes
----------------
[mjr] Fix missing truncated event description when using ActiveSync.
[jan] Fix week number in basic view if week starts on Sundays.
[mjr] Fix issue where new event could be created with exceptions from
previously edited event.
[jan] Mark preferences only available in basic mode.
[jan] Fix accidental deletion of events if importing recurring events without a
UID attribute (Bug #14208).
[mjr] Honor confirm_delete preference in dynamic view (Bug #14188).
[mjr] Correctly deal with cancelled meetings via ActiveSync.
[mjr] Fix visibility of alarm titles when alarm is generated via CLI (Bug
#14154).
[mjr] Fix display of embed code by adding the full url.
Tasks Changes
-------------
[mjr] Enforce child tasks must be completed before parent tasks in edit form
(Bug #12308).
[mjr] Fix possible fatal error due to tasks created with an alarm but no due
date (Bug #14214).
[mjr] Fix storage of parent field when using Kolab driver (Bug #14197,
mike.gabriel@das-netzwerkteam.de).
[mjr] Fix switching tab/filters when using Kolab driver (Bug #14196,
mike.gabriel@das-netzwerkteam.de).
[mjr] Fix moving subtasks to another tasklist when parent task is moved (Bug
#14209).
[mjr] Fix fatal error when saving tasks when system shares are present in
certain cases.
[mjr] Return recurring tasks via listTimeObjects API (Bug #14137).
[mjr] Prevent orphaning tasks via the API.
Notes Changes
-------------
[mjr] Fix fatal error when removing notepads in certain cases.
File Manager Changes
--------------------
[jan] Fix fatal error when cutting and pasting files on the same backend.
Bookmarks Changes
-----------------
[mjr] Fix tag links when tags contain URL special characters.
Timeobject Changes
------------------
[jan] Add Italian translation (Massimo Balestrieri <nag@hidaba.com>).
Library Changes
---------------
[jan] Improve Oracle compatibility.
ActiveSync
[mjr] Fix RECUR_YEARLY_DAY recurrences showing up every day.
[mjr] Fix regression introduced by checking device remote wipe during PING
requests.
[mjr] Fix mailbox searches with non 7-bit characters.
[mjr] Allow global request window size limit to be overridden.
[mjr] Fix issue where global request window size was being reached prematurely.
[mjr] Fix potential fatal error due to incorrect exception name.
[mjr] Fix issue that prevents new device being added if an entry exists in the
device user table but not the device table (Bug #14147).
[mjr] OL2016 added to device multiplex settings.
[mjr] Improved workaround for clients with broken picture tag handling.
Browser
[mjr] Don't set the empty_file_input_value quirk for recent Safari versions
(Bug #14207).
Cache
[jan] Improve performance and memory consumption of garbage collection in File
driver.
[jan] Fix garbage collection in File driver.
[jan] Fix caching issues within the same request in the Memcache driver.
[jan] Fix the Mongo driver's expire() if not using a logger.
[jan] Add unit tests.
Core
[mjr] SECURITY: Fix XSS in Horde_Core_VarRenderer_Html (reported by Centurion
Information Security <www.centurioninfosec.sg>).
[jan] Pass Horde_Cache to Horde_Group if group caching enabled.
[mjr] Fix handling of empty tags strings in certain use cases (Bug #14203).
[mjr] Fix fatal error when using count_bad_logins in SQL auth driver.
[mjr] Support sending MDN via ActiveSync (Request #23080).
[mjr] Fix issue with synchronizing IMAP folder names that contain only numbers.
[mjr] Small logging improvements for ActiveSync.
[mjr] Match various session parameters in the NULL driver.
Crypt
[jan] Add Horde_Crypt_Pgp::pgpPacketInformationMultiple() and
Horde_Crypt_Pgp_Backend_Binary::packetInfoMultiple() (Request #13190).
[jan] Fix retrieving PGP keys from the keyserver with certain HTTP client
backends.
[jan] Fix creating PGP keys with comments (Bug #14125).
Date
[mjr] Add Horde_Date_Recurrence::isEqual().
Db
[jan] Bump earliest supported PostgreSQL version to 8.3.
[jan] Improve getting tables and indexes from PostgreSQL servers (Ivan Sergio
Borgonovo <mail@webthatworks.it>).
[mjr] Fix SQL error when setting blob fields to empty in oracle driver (Bug
#14163).
[jan] Add 'status' argument to horde-db-migrate-component (Nicolas Rochelemagne
<nicolas.rochelemagne@cpanel.net>).
Form
[jan] Fix field types being overwritten in certain cases.
[jan] Allow any empty format specifiers for the monthdayyear field (Bug #14130).
Group
[jan] Add caching support.
Http
[jan] Fix disabling SSL certificate hostname check (Thomas Jarosch
<thomas.jarosch@intra2net.com>, Bug #12929).
Icalendar
[mjr] Fix cases where incorrect transition times were being returned (Bug
#14153).
Imap_Client
[jan] Don't try LOGIN authentication over secure connections if explicitly
disabled.
[mjr] Fix fatal error during shutdown due to incorrect exception name.
[jan] Fix broken ID requests under certain circumstances.
[jan] Fix parsing IMAP responses with tilde characters.
Kolab_Storage
[mjr] Fix decoding base64 encoded Kolab objects (Bug #14199,
mike.gabriel@das-netzwerkteam.de).
[mjr] Fix updating Kolab data that contains non 7-bit data (Bug #14201).
[mjr] Implement a token based syncronization strategy for servers with
QRESYNC/MODSEQ support.
[mjr] Improve debug logging.
[mjr] Add full Horde_History support for better Kolab<->Horde<->Sync client
support.
Mime_Viewer
[jan] Add temp_dir configuration parameter to OpenOffice/LibreOffice viewer
(Request #11756).
Perms
[mjr] Use NULL instead of an empty string in the perms_parents field for root
permissions.
Service_Weather
[jan] Catch Horde_Date exceptions and try harder to provide dates for weather
alerts.
[jan] Fix undefined variable warnings.
SessionHandler
[jan] Fix updating large files in Oracle backends.
[jan] Fix writing big session data to Oracle (Bug #14175).
Socket_Client
[jan] Enable TLS 1.1 and 1.2 connections (Request #14190).
SyncMl
[jan] Split large objects into multiple messages (thomas@trethan.net, Request
#11071).
[jan] Remove workarounds for ancient Synthesis clients (Bug #10942).
Test
[jan] Add Horde_Test_Stub_Registry#setConfigFile() to provide pre-configured
Horde_Test_Stub_Registry_Loadconfig objects.
Timezone
[mjr] Fix generation of broken VTIMEZONE components for certain Rules (Bug
#14221).
-------
v5.2.11
-------
[jan] Update Italian translation.
[mjr] Remove object reference from Content when object is deleted (Bug #14112).
[mjr] Remove tags from Content when tagged object is deleted (Bug #14112).
Horde Changes
-------------
[mjr] SECURITY: Protect against CSRF attacks on various admin pages.
[jan] Don't apply access keys to checkbox and radiobox rows in the sidebar
(Bug #14103).
[jan] Send correct MIME type for non-statically cached javascript files.
[mjr] Added configuration support for version 2 of WorldWeatherOnline's API.
Mail Changes
------------
[mjr] Request that the contacts API only consider email fields when detecting
duplicates during automatic saving of attendees to the address book (Bug
#14119).
[jan] Don't show "Create Keys" button if creating PGP keys is disabled
(steffen.hau@rz.uni-mannheim.de, Request #14096).
[mjr] Fix displaying iTips with certain locale/date_format preference
combinations (Bug #14076).
Filters Changes
---------------
[mjr] Add database migration for fixing corrupt rule ordering.
[mjr] Fix corruption of rule order when reordering rules in certain cases.
Address Book Changes
--------------------
[mjr] Better prevention of importing duplicate contacts with same email
addresses via the API (Bug #14119).
[mjr] Allow API to search all email type fields when calling getField().
[mjr] Fix removing all contacts owned by a specific user.
[jan] Fix inserting and updating photos with Oracle backends.
[mjr] Fix incorrectly populating email field when importing vCard (Bug #14046).
Calendar Changes
----------------
[mjr] Fix issue when replacing an event via the API when the attendee list
changes.
[mjr] Fix exporting events from Horde_Perms::SHOW calendars over DAV (Bug
#14128).
[mjr] Send CACNEL iTip when attendee is removed from a meeting (Request
#14118).
[mjr] Fix incorrect offset of freebusy times in certain cases (Bug #14084).
[mjr] Fix handling of email groups as attendees (Bug #14093).
[mjr] Fix importing text/calendar data via API (Bug #14089).
Library Changes
---------------
[jan] Catch possible exceptions in shutdown methods.
ActiveSync
[mjr] Fix issue in sending email from client due to input stream not being
seekable on some systems (Bug #13160).
[mjr] Work around bug in early versions of iOS that could cause a contact's
picture to be removed on the server.
[mjr] Improved client and version detection, especially for iOS devices.
[mjr] Fixed bug that was causing SUPPORTED data to be overwritten.
[mjr] Change some ERR log level entries to WARN and some other small logging
tweaks.
[mjr] Don't take sub-parts of rfc822/message parts as attachments.
[mjr] Fix handling of meeting requests that contain no DTEND attribute.
[mjr] Fix parsing of SETTINGS request that was causing a harmless WBXML parsing
error.
[mjr] Explicitly request a FOLDERSYNC when backend id is not found.
[mjr] Fix corruption of base64 encoded text parts in certain cases (Bug #14092).
[mjr] Work around bug in various versions of PHP 5.5 and 5.6 regarding
base64-encode stream filters (Bug #14086).
[mjr] Fix issue where incorrect text/html part is choosen as the main body part.
Core
[mjr] Fix ajax updating of Weather block when weather map is shown.
[mjr] Fix detecting an application's ability to send Horde_Alarm notifications
(Bug #14098).
[mjr] ActiveSync logging improvements.
[mjr] Add support for OpenWeatherMap layers in Horde_Map.
[mjr] Fix edge-case issue with ActiveSync folder list generation when installed
application contains no user writable sources.
[mjr] Fix dependency on possibly missing Horde_Kolab_Storage_HistoryPrefix
interface (Bug #14099).
[mjr] Add beforeUpdate callback to prettyautocompleter.js.
[mjr] Support configuration for version 2 of WorldWeatherOnline's API.
Crypt
[mjr] Fix PHP 5.3 incompatibility (Bug #14090).
Image
[cjh] Fix EXIF data not being returned in Bundled driver.
Imap_Client
[mjr] Avoid PHP warning when listing mailboxes without LIST-STATUS (Bug #14097).
[mms] Improved performance of Horde_Imap_Client_Data_Thread object when
containing large number of messages (Request #14075).
[mms] Catch translation errors when creating Exceptions (PR #143;
baso10dev@gmail.com).
Mime
[mjr] Correctly work around PHP bug 65776.
Nls
[jan] Add ALPHA-3 country codes.
Notification
[jan] Do not silent the potentially fatal require_once.
Pdf
[mjr] Avoid some PHP warnings.
Secret
[jan] Remove unnecessary include.
Service_Weather
[mjr] Add support for OpenWeatherMap API.
[mjr] Add support for radar maps if provider provides them.
[mjr] Add support for weather alerts.
[mjr] Update WWO to support the v2 API (Request #14094).
SessionHandler
[jan] Test environment improvements.
-------
v5.2.10
-------
Files Changes
-------------
[mjr] SECURITY: Fix XSS vulnerability when viewing directory contents
(Discovered by http://www.beyondsecurity.com/ssd.html).
------
v5.2.9
------
[mjr] Bundle release to fix version numbers in package file.
------
v5.2.8
------
[jan] Update Czech translation.
[jan] Update Italian translation.
[jan] Update German translation.
[jan] Update Hungarian translation.
Horde Changes
-------------
[mjr] Don't create a session for Webdav requests (Bug #14040).
[jan] Mark PHP 5.6 as officially supported.
[mjr] Fix some issues with the permission interface when a value of 0 is a
valid permission value (Bug #14025).
Mail Changes
------------
[mms] Ensure mailbox name is a valid string (Bug #14049).
Filters Changes
---------------
[mjr] Fix using transport parameters in Procmail driver.
[mjr] Fix selecting incorrect rule when performing any action after reordering
(Bug #14064 and Bug #13643).
[jan] Fix duplicate messages when using the redirect-and-keep rule with
Procmail backends.
Address Book Changes
--------------------
[mjr] Fix issue where sidebar links point to incorrect address book.
Calendar Changes
----------------
[mjr] Fix enabling deletion of resources for non-admin users (Bug #14069).
[mjr] Honor workweek view as the login_view (Bug #14042).
[mjr] Fix Permission Denied error after removing a currently displayed
timeObject (Bug #14022).
[jan] Enable purge calendar checkbox if user has delete permissions.
[mjr] Honor locking the remote_cals preference.
[mjr] Fix detecting duplicate events during import via the API (Bug #14018).
Notes Changes
-------------
[mjr] Fix inconsistent handling of incoming HTML notes from ActiveSync clients
(Bug #14045).
[mjr] Allow more reasonable length of description field to interop better with
synchronized clients (Bug #14041).
Bookmarks Changes
-----------------
[mjr] Fix shebang (after install) for trean scripts (Remi Collet
<fedora@famillecollet.com>).
[mjr] Use the favicon when returning tag search results via the API if
possible.
Library Changes
---------------
[jan] Update Galician translation.
[jan] Update Ukrainian translation.
[jan] Fix Composer files.
ActiveSync
[mjr] Fix display of certain Multipart/Report messages, on certain clients.
[mjr] Improve handling of authentication/policy errors.
[mjr] Fix renaming email folder when using PostgreSQL state storage (Bug
#14019, horde@albasoft.com).
Auth
[jan] SECURITY: Don't allow to login to LDAP with an emtpy password.
[mjr] Ensure we rebind as configured user after testing auth user credentials.
Core
[jan] SECURITY: Don't allow to login with an empty password.
[mjr] Map Kolab distribution-list items to the contacts API (Bug #14038).
[mjr] Prevent various broken behaviors on ActiveSync clients due to errors
copying an email to sent mail folder or updating the maillog (Bug
#14058).
[jan] Give administrators access to all groups, even with
$conf['share']['any_group'] disabled.
Crypt
[jan] Fix issues with certain locales like Turkish.
[mms] Split gnupg command-line binary specific code out into a separate PGP
backend driver.
[mms] S/MIME encryption is now done only with AES (if using PHP 5.4+) or 3DES.
Css_Parser
[jan] Prevent segfault due to non-ascii characters on some systems.
[jan] Fix PHP7 error because of reserved "String".
Form
[jan] SECURITY: Fixed XSS in form renderer.
[mjr] Prevent empty email addresses from being detected as a valid "multiple"
email (Bug #14063).
History
[jan] Improve performance of database migration.
Icalendar
[jan] Fix generated VALARM TRIGGER attributes with empty duration (Ralf Becker
<RalfBecker@outdoor-training.de>).
Imap_Client
[mms] Ensure FETCH stream data is rewound before returning (Bug #14013).
[mjr] Fix detecting empty ID queries (Bug #14044).
Mail
[mms] Fix validating sent messages if the driver supports EAI addresses.
[mjr] Fix sending mail via PHP's mail function (Steffen Lindner
<mail@steffen-lindner.de>).
Perms
[mjr] Fix issues when a value of 0 is a valid value for the permission (Bug
#14025).
Rpc
[mjr] Send more appropriate HTTP status codes on ActiveSync authentication
failure.
Util
[jan] Fix test that could fail due to changes in glibc.
Vfs
[jan] Make 'port' parameter of Smb driver optional.
[jan] Add 'domain' parameter to Smb driver.
[jan] Allow to specify a fixed leading directory in Smb driver.
------
v5.2.7
------
Horde Changes
-------------
[jan] Use Horde_Ldap in example preference hooks.
[jan] Convert REDIRECT_HTTP_AUTHORIZATION to HTTP authentication headers too.
[jan] Display MOTD on mobile login screen.
Mail Changes
------------
[jan] Don't focus body field when composing message with HTML editor.
[jan] Protect against infinite request loop if expanding all mailboxes.
[jan] Fix redirecting in smartmobile mode (Bug #14002).
[jan] Fix address autocompletion in redirection window of smartmobile mode
(Bug #14002).
[jan] Fix setting single recipients in redirection window in basic mode (Bug
#14002).
[jan] Don't switch to regular compose view after an error in the redirection
view in basic mode.
[jan] Fix cancelling redirection window in basic mode (Bug #14002).
Address Book Changes
--------------------
[jan] Fix error when removing user data.
Calendar Changes
----------------
[jan] Don't delete existing exceptions and completions when editing recurring
events or tasks.
[jan] Fix importing iCalendar events via the API (Bug #13975).
Tasks Changes
-------------
[jan] Fix positioning of dialog windows.
[jan] Don't delete existing completions when editing a recurring task.
[jan] Only delete the last completion when toggling a recurring task to
incomplete.
Library Changes
---------------
ActiveSync
[mjr] Reduce memory usage during IMAP FETCH with very large mailboxes.
[mjr] Workaround broken CGI behavior of sending incorrect authentication
headers.
[mjr] Fix issues with detecting changes in FILTERTYPE.
[mjr] Performance improvements during IMAP server change detection for
CONDSTORE servers, especially during FILTERTYPE changes.
[mjr] Fix issue when using REPLACEMIME feature of SENDMAIL and some other edge
cases (Bug #13901).
[mjr] Fix off by one error that could cause some errors in downstream client
code.
[mjr] Fix detecting changes in email message "Flag" sent from certain clients.
[mjr] Fix regression causing useless backend query.
[mjr] Fix bug causing changes to be sent as new messages, thus causing them to
be ignored by most clients.
[mjr] Fix sending SMIME signed/encrypted mail when using streams.
[mjr] Fix regression that could cause loss of mailbox sync.
[mjr] Fix issue that could cause sending the same email to the client multiple
times (Bug #13985).
[mjr] Performance and memory improvements, especially during initial sync to
Outlook clients.
Core
[mjr] Fix typo that was causing ActiveSync FILTERTYPE changes to go undetected.
[mjr] Support for Horde_History in Horde_Kolab_Storage. Requires
Horde_Kolab_Storage 2.2.0+.
[jan] Don't allow empty From: addresses if verifying identities.
[mjr] Fix fatal error when disconnecting a user Twitter account.
[mjr] Work around broken ActiveSync clients that send incorrect line lengths
for text/html parts (Bug #13901).
[mjr] Fix issue causing message text from email forwarded from ActiveSync
clients to be missing (Bug #14000).
[mjr] Fix duplicate attachments in certain messages that were forwarded by
ActiveSync clients.
[mjr] Fix issue that could cause sending the same email to an ActiveSync client
multiple times (Bug #13985).
[mjr] Performance and memory improvements to ActiveSync.
Crypt_Blowfish
[mms] Add Horde_Crypt_Blowfish_Pbkdf2.
Date
[jan] Support monthly recurrence by last weekday (Request #1922).
[jan] Support negative occurrences in Horde_Date#setNthWeekday().
[jan] Add Galician translation.
Icalendar
[mms] Add Horde_Icalendar#getAttributeSingle().
Imap_Client
[mjr] Fix detecting changes when using tokens.
[mms] Add support for SCRAM-SHA-1 authentication (RFC 5802) for both IMAP and
POP3 drivers.
[mms] Directly store literal data in a separate stream when parsing IMAP
tokens, so we don't have to duplicate the stream later when processing it.
[mms] Don't load literal IMAP data into a string variable when tokenizing IMAP
input.
[mms] Fix search queries where ID list given is explicitly empty, indicating
that a match can never be successful (Bug #13971).
[mms] Fix expunging in certain cases when UIDPLUS is not available (Bug #13970;
Robin McCorkell <rmccorkell@karoshi.org.uk>).
Mime
[mms] Correctly output MIME headers when generating multipart/digest parts (RFC
2047 [5.1.5]).
Service_Twitter
[mjr] Remove obsolete end_session endpoint.
Share
[jan] Fix returning user and group permissions for system shares using the
SQLNG driver.
Stringprep
[mms] Fix some autoloading issues.
------
v5.2.6
------
Horde Changes
-------------
[jan] SECURITY: Fix XSS vulnerability in group administration.
[mjr] Fix display of Facebook block by removing no longer allowed notification
data.
Mail Changes
------------
[mms] SECURITY: Fix XSS vulnerability when manually switching between plaintext
-> HTML compose mode.
[jan] Update Bcc address when switching identities (João Machado
<geral@jpaulo.eu>, Bug #13922).
[jan] Fix protocol name in POP3 example backend configuration.
[mms] Don't honor linked attachment limit configuration options if linked
attachments are disabled (Bug #13665).
Filters Changes
---------------
[jan] Add Galician translation.
[mms] Enforce selection of a target folder for the spam filter in the UI (Bug
#13917).
[jan] Fix Sieve error if days of vacation is unset (Bug #13890).
Address Book Changes
--------------------
[jan] Don't try to load Content application if tags are disabled.
[mjr] Fix adding tags to new contacts (Bug #13884).
[jan] Fix waiting for replication on LDAP backend.
Calendar Changes
----------------
[jan] Fix building recipient list for event update notifications.
[mjr] Honor background color for listTimeObjects API calendars (Bug #13951).
[jan] Always sort users in advanced sharing dialog (Bug #13938).
[mjr] Fix saving recurring event after a change in resources (Bug #13921).
[mjr] Fix creating recurrence exceptions from CalDAV clients.
[jan] Added an index to find base events of recurrence exceptions faster.
[jan] Fix finding duplicate events by UID.
[mjr] Fix updating FB data when start date changes.
[mjr] Fix detecting attendees when email address is not lowercase (Bug #13905).
[jan] Fix duplicate group names in sharing dialog.
[jan] Fix JavaScript error when saving an unselected calendar.
[mjr] Fix using custom SQL configuration parameters.
Notes Changes
-------------
[mjr] Fix using custom SQL configuration parameters.
Library Changes
---------------
[jan] Fix issues with certain locales like Turkish.
ActiveSync
[mjr] Fix issue where badly formed emails could cause out of memory error.
[mjr] Fix issue that could break sync if a badly formed email address could not
be parsed.
[mjr] Fix PARTIAL SYNC handling when no COLLECTIONS are provided (Bug #13912).
[mjr] Detect stock Android 5.0 multiplex settings.
[mjr] Fix broken sync due to clients that send badly formatted date strings.
[mjr] Fix fatal error when dealing with iTip replies from vTodo requests.
[mjr] Return email search results in descending order by arrival date.
[mjr] Add HTCOne Mini to device detection and set multiplex ability
accordingly.
[mjr] Fix handling of PARTIAL and EMPTY sync requests in certain cases (Bug
#13863).
Auth
[jan] Improve salt generation for Blowfish hashes.
Compress
[jan] Fix fatal error due to incorrect class name case (Ralph Becker
<rb@stylite.de>)
[mms] Fix leaking Horde_Date exceptions.
[mjr] Improve detection of ORGANIZER when decoding MAPI encoded vTODOs.
[mms] Fix decoding of Unicode Strings in TNEF MAPI attributes.
[mjr] Fix possible fatal error when parsing certain types of Vtodo files.
[mjr] Add support for generating vTodo from TNEF embedded MAPI TASK objects.
[mjr] Add option to inject a logger object.
[mjr] Improve support for decompressing TNEF data.
Core
[jan] Upgrade prototype.js to version 1.7.2.
[jan] Fix editing existing LDAP timeout configuration (Bug #13949).
[mms] Fix regression in removing CBC cipher mode when encrypting data within a
session (Bug #13869).
[mjr] Fix combination X509 and http plain authentication with ActiveSync.
[jan] Revert to using ECB mode for encryption, to not break existing
credentials (Bug #13869).
[mjr] Fix replying to email from search results in some broken ActiveSync
clients (Bug #13878).
[jan] Fix propagating the LDAP hostspec configuration field (Bug #13872).
Group
[jan] Add schema definition for LDAP groups.
[jan] Don't throw exception from listUsers() if group not found in LDAP
directory (Bug #13879).
HashTable
[jan] Fix setting key prefixes.
History
[jan] Make cached entries available to garbage collection.
Http
[jan] Allow to pass Horde_Url objects as URI (Bug #13897).
[jan] Make Horde_Http_Base_Response::headers array keys lowercase again (Bug
#13843).
[jan] Fix return code from multi-request actions in Peclhttp2 driver.
Idna
[mms] Use intl extension, if installed, and fallback to a locally-patched
version of the true/php-punycode package.
Image
[jan] Fix transparent rectangles in SVG backend.
[jan] Fix setting background color in SVG backend.
[jan] Add 'ratio' parameter to Horde_Image_Effect_Imagick_LiquidResize.
[jan] Fix catching exceptions from imagick extension.
[jan] Complete the backends' capabilities properties.
[jan] Fix SVG and SWF backends.
[jan] Fix setting background color in Horde_Image_Swf constructor.
[jan] Send Content-Type header in Horde_Image_Svg#display().
[jan] Improve arc rendering with Im backend.
[jan] Enable antialiasing in GD backend if available.
[jan] Implement Horde_Image_Imagick::arc().
[jan] Fix rounded rectangle drawing with GD backend.
[jan] Fix transparency issues with GD backend.
[jan] Fix autoloading of effect classes.
[jan] Fix border effect with GD driver.
[jan] Don't error out in effects if a logger hasn't been set.
[jan] Make getImageAtIndex() always return an image.
[jan] Don't error our when calling unsupported manipulation methods.
[jan] Make Horde_Image::arcPoints() work with any angles.
[jan] Fix some HTML color name to RGB value mappings.
[jan] Add Horde_Image_Rgb class and remove $horde_image_rgb_colors global.
[jan] Add Null driver for basics like just displaying the image.
[mjr] Fix incorrect color renderings in certain situations.
Imap_Client
[mms] Fix parsing mailbox name from STATUS response on servers that have the
UTF8 extension enabled.
[jan] Fix searching with non-ASCII strings in AND/OR-combined searches.
[jan] Fix issues with certain locales like Turkish.
[mms] Pipeline ID command with other commands, if possible.
[jan] Add parameter for stream context settings (Request #13730).
Itip
[mjr] Add support for iTip responses to vTodo requests.
Kolab_Storage
[jan] Fix deleting object attachments from cache (Bug #13268).
Ldap
[jan] Fix connection if using ldaps:// scheme (Bug #13858).
Mail
[mms] Add support for outputting comment information when writing an address.
Mapi
[mjr] Remove bcmath extension requirement and add PEAR Math_BigInteger package
in it's place.
Mime
[mms] Fix rare errors when multiple iterations are occurring on the same set of
MIME parts.
[mms] Fix indexing MIME part when base is a multipart object.
[mms] Ignore broken headers when parsing header text.
[mms] Subpart manipulation should now be done via array access.
[mms] Add recurisve iteration to the Horde_Mime_Part object.
[mms] Work around broken line-oriented data when transfer encoding (Bug #13835).
[mms] Fix regression in using the deprecated Horde_Mime::generateMessageId()
method (Bug #13846).
[mms] Add Horde_Mime_Headers_ContentId class.
[mms] Add Horde_Mime_Headers_ContentTransferEncoding class.
[mms] Added Horde_Mime_Headers_Element#isDefault().
[mms] Add interface to differentiate between MIME and non-MIME headers.
[mms] Content-Type and Content-Disposition related data is now handled
internally in Horde_Mime_Part object by using Horde_Mime_Headers.
[mms] Added the Horde_Mime_Headers_ContentLanguage class.
[mms] Fix cloning of the Content-Type and Content-Disposition header objects.
[mms] Ensure that null bytes are filtered from MIME data that is contained in
the headers.
[mms] Fix cloning of the Content-Type and Content-Disposition header objects.
Mime_Viewer
[mms] Add optional support to determine if link text is a hostname when doing
phishing analysis for the HTML driver.
Rpc
[mjr] Fix fatal error when using pecl_http2.
[mjr] Fix possible PHP error when returning HTTP 500 response.
Service_Twitter
[mjr] Fix fatal error when using pecl_http2.
Service_Weather
[mjr] Fix fatal error when using pecl_http (Bug #13897).
Socket_Client
[jan] Add parameter for stream context settings (Request #13730).
[jan] Allow to pass hostname with protocol scheme prefix.
[jan] Add getStatus(), gets(), read(), and write().
Smtp
[mms] Fix sending BODY keyword when debugging and SMTP server does not support
8BITMIME extension.
[jan] Add parameter for stream context settings (Request #13730).
[jan] Fix notice if server doesn't support ENHANCEDSTATUSCODES.
[mms] Add 'localhost' parameter to Horde_Smtp (Request #13832).
Test
[mms] Update to PHPUnit 4.5.0 and dependencies.
Text_Filter
[mjr] Prevent malformed urls from leaking exceptions (Bug #13965).
[mjr] Fix failing tests on MacOS related to mulitbyte data contained in links.
[mjr] Add nestingLimit parameter to Html2text filter.
[jan] Add 'html' hint to Simplemarkup filter to indicate the input format.
[jan] Match simple markup spanning a complete line too.
Util
[mms] Fix handling broken text input with all multibyte drivers.
[mms] Fix error detection when using Horde_String::substr() with mb_substr().
Extensions
----------
horde_lz4
[jan] Fix PHP 7 compatibility (Remi Collet <fedora@famillecollet.com>).
------
v5.2.5
------
Horde Changes
-------------
[mms] Make dynamic context menus scrollable if taller than the browser screen
height (Bug #13833).
[jan] Fix horde-import-squirrelmail-prefs script (Bug #13780).
[jan] Don't instantiate notification system for RPC requests.
Mail Changes
------------
[mms] Fix rebuilding the folder tree translations when the language is changed
in a session (Bug #13821).
[jan] Fix adding addresses from address book popup (Bug #13806).
[mjr] Fix fatal error when viewing a vTodo with attendees.
[jan] Make dependency on File_ASN1 optional.
[mms] Fix double listing of mailboxes in certain instances when subscriptions
are active and unsubscribed mailboxes are shown.
[mms] Fix advanced search (Bug #13773).
[mjr] Fix handling of iTips indicating a change to a series exception (Bug
#13777).
[mms] Fix parsing broken S/MIME messages that don't include the smime-type
content-type parameter (Request #13661).
[mms] Fix regression when working with multiple selected messages with a POP3
server (Bug #13759).
[mms] Only count successful compose mails when determining recipient limits
(Bug #13751).
Filters Changes
---------------
[mms] Rate-limit filters drag/drop changes to prevent race conditions (Bug
#13819).
[mms] Fix filter drag/drop ordering working in basic view (Bug #13820).
[mms] Maildir requires UTF7-IMAP encoding for folder names (Bug #13378).
Address Book Changes
--------------------
[jan] Fix export format of tags to vCard 3.0 categories (Bug #13800).
Calendar Changes
----------------
[mjr] Fix generating calendar embed code (Bug #13828).
[jan] Don't wipe out whole calendars when PUTing individual events via WebDAV.
Tasks Changes
-------------
[jan] Don't list task lists without SHOW permissions (Bug #13837).
[jan] Use consistent checkbox.
[jan] Don't allow deletion of tasks with sub-tasks (Bug #13809).
[jan] Don't allow completion of tasks with incomplete sub-tasks and vice versa.
[jan] Don't wipe out whole task lists when PUTing individual tasks via WebDAV.
Notes Changes
-------------
[jan] Don't list notepads without SHOW permissions (Bug #13838).
[jan] Fix using custom SQL driver configuration.
[mjr] Fix truncation of body text when synchronizing over EAS when no
truncationsize option is sent from client (Bug #13755).
Library Changes
---------------
[jan] Improve PSR-2 compatibility.
ActiveSync
[mjr] Fix moving a mailbox to a new parent (Bug #13839).
[mjr] Always send the attachmentsenabled policy, even when it's the default
value of 'enabled' (Bug #13827).
[mjr] Improve handling of FILTERTYPE changes after initial SYNC (Bug #13781).
[mjr] Add Date header to emails sent from broken HTC clients (Bug #13784).
[mjr] Add some more TRUNCATION related workarounds/fixes.
[mjr] Improve/fix support for handling OOF messages (Bug #13719).
[mjr] Fix incorrect converting of HTML to plaintext causing incorrect
truncation size.
[mjr] Fix BC break due to MessageBodyData improvements (Bug #13768).
[mjr] Fix some WBXML parsing issues due to empty GET tags in SETTINGS requests.
[mjr] Decode RIGHTSMANAGEMENTINFORMATION nodes.
[mjr] Correctly implement BODYPART handling (Bug #13729).
[mjr] Workaround some broken clients that send null content inside open/close
tags instead of an empty tag (Bug #13719).
[mjr] Fix regression in detecting iTip requests (Bug #13739).
[mjr] Add support for clients that issue BODYPARTPREFERENCE options (Bug
#13729).
[mjr] Fix handling POOMCALENDAR_UID values to prevent broken meeting request
behavior.
[mjr] Fix handling of certain types of broken MIME messages (Bug #13728).
[mjr] Fix issue that could cause broken sync when an email contains no text
parts (Bug #13711).
Alarm
[mms] Fix fatal errors when stored alarm data cannot be unserialized.
Autoloader_Cache
[mms] Handle a cache miss by trying to load the class in its new location.
Compress_Fast
[mms] Add zlib driver and allow it to be considered a 'fast' compression driver
(disabled by default).
Core
[jan] Fix notice when deleting identities.
[jan] Fix NoSQL database name setting getting lost during configuration.
[jan] Allow to configure multiple LDAP servers and timeout value.
[mjr] Fixes for using ActiveSync without email sync enabled on Android 5
(Niklas Forsdahl <niklas@creamarketing.com>).
[mms] Calling an application's changeLanguage method on language change now
handled by Horde_Registry.
[jan] Support non-ascii latin characters as access keys.
[mms] Use more secure CBC block cipher mode when storing encrypted Blowfish
data inside the session.
[mms] If compressing/packaging javascript files, don't use pre-compressed
version (if one exists) when generating.
[mjr] Improvements in ActiveSync to handling the case when FILTERTYPE changes
(Bug #13781).
[mjr] Fix missing Date and From headers when saving sent mail from broken HTC
clients (Bug #13784).
[jan] Fix user names via DAV access when using authusername hooks.
[jan] Fix updating of location in weather portal block.
[mjr] Improve/fix support for handling OOF messages in ActiveSync (Bug #13719).
[mms] Upgrade jQuery to v1.11.2.
[jan] Call preference hooks for default values of new identities.
[mms] Only load application notify handlers on demand.
[mjr] Allow disabling maillog synchronization with EAS clients (Bug #13747).
[jan] Log E_USER_WARNING, E_RECOVERABLE_ERROR, and E_USER_NOTICE messages at
the correct level.
[mjr] Add support for ActiveSync clients that issue BODYPARTPREFERENCE options
(Bug #13729).
Crypt
[jan] Make all PGP features locale-independent.
[mms] Fix parsing GPG packet information using the gnupg v2.1 binary.
Css_Parser
[mms] Update PHP-CSS-Parser lib to latest dev to fix issues on PHP < 5.3.9 (Bug
#13792).
[mms] Use composer to generate the distributed version of the PHP-CSS-Parser
package.
HashTable
[jan] Add unit tests for Memcache and Redis backends.
Http
[jan] Add unit tests for PECL HTTP 1.x/2.x drivers.
[mms] Horde_Http_Base_Response#getHeader() is now case-insensitive for the
header input (Bug #13736).