/
CHANGES
2782 lines (2469 loc) · 125 KB
/
CHANGES
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
-------
v4.0.12
-------
[mjr] Replace Weatherdotcom portal block with generic Weather block supported
by Horde_Service_Weather.
[jan] Add configuration option to disable password resets (Request #10640).
-------
v4.0.11
-------
[cjh] Add Hordevetica theme.
[mjr] Fix issue with ajax uploader and file sizes over 1mb (Bug #10641).
[mjr] Do not show results in the tag cloud block owned by other users.
-------
v4.0.10
-------
[mjr] Update javascript map library.
[mms] Allow in-page base64 image encoding to be disabled via configuration.
[jan] Add administration page to list and clear locks.
------
v4.0.9
------
[rla] Add account locking similar to the former kolab-specific option.
[jan] Add missing configuration for LDAP groups write support.
[rla] Show a warning when resetting password and no security question is set
(Request #10430).
[mjr] Update jQuery Mobile to version 1.0 Beta 2.
[jan] Update hordeweb theme to match new website layout.
------
v4.0.8
------
[mjr] Add remove button to image fields (Request #9870).
[mjr] Fix sending unnecessary FOLDERSYNC changes.
[mjr] Fix issue with FOLDERSYNC requests that was causing Android clients to
PING and SYNC the same collection an unlimited number of times.
[mjr] Use FQL to obtain event list and add rsvp_status.
[cjh] Add mobile maintenance screens.
[jan] Fix exporting multiline attributes to vCard 2.1 and vCalendar 1.0.
[cjh] New log filter for exact level matching (Bryan Alves
<bryanalves@gmail.com>).
[jan] Don't set optional integer fields to 0 when automatically updating
configuration.
[mjr] ActiveSync policykey is now per user, not per device.
[mjr] Fix recurring event exception handling for ActiveSync.
[mjr] Use AS in column aliases to make PostgreSQL happy (Bug #10346).
[jan] Don't show mobile login page if users are forced to traditional or
dynamic views (Request #10358).
[mjr] Improve calendar PING for iOS devices.
[mjr] Prevent an ActiveSync sync loop in some fringe cases.
[jan] Update PGP key server list and add SKS pool.
------
v4.0.7
------
[mjr] Fix returning shares in the proper order when fetching multiple shares
by id.
[jan] Don't use CSS cache in mobile interfaces because it breaks jQuery Mobile
CSS.
[mjr] Fix race conditions caused by broken clients sending an inappropriate
PING request.
[jan] Fix duplication of objects during synchronization (joniw@t-online.de, Bug
#10081).
[jan] Don't allow to click disabled login button (Bug #10267).
[jan] Allow configuration of split read databases for PostgreSQL (Request
#7025).
[mjr] Honor initial_application setting for mobile view (Bug #10264).
[mjr] Fix issue with initial Android ActiveSync pairing.
[gwr] Support restricting the HTML tidy post processing by the message size
(Request #10266).
[gwr] Disabled the timeout on the logout token.
[mjr] Fix integer overflow issue in Facebook code (Bug #9889).
[mms] Fix adding users with Cyrsql driver (vilius@lnk.lt, Bug #10239).
------
v4.0.6
------
[jan] Fix extracting of translation strings in a release.
[rla] Add user-specific admin permissions (Request #9350).
[jan] Don't strip domain from user name in account block.
[jan] Fix account block with empty configuration parameters.
------
v4.0.5
------
[jan] Remove debug code.
------
v4.0.4
------
[gwr] Added a script for exporting/importing preferences from/to a backend.
[mms] Fix regression with UTF7-IMAP encoding of non-ascii folder names (Bug
#10093).
[mms] Allow numbers to be zero in certain preferences (Bug #10120).
[mms] Fix running Horde login tasks (Bug #9767).
[mms] Fix authenticating as several users in the same request (Bug #10027).
[mms] Fix colorpicker on categories preferences screen (Bug #10118).
[jan] Update Spanish translation.
[jan] Update Slovak translation.
[mjr] Fix Metar portal block.
[gwr] Add support for the Kolab IMAP based preferences backend.
[mms] Complete fix for issue causing slow syncs only (Bug #10008).
------
v4.0.3
------
[mjr] Fix usage of countOwners() and listOwners() in the Sqlng driver.
[mms] Fix return link after reporting problem (Bug #10069).
[jan] Add button to update all configurations with default values at once.
[jan] Update DataTree conversion scripts for Horde 4.
[jan] Fix rendering of DataTree browse tree.
[mjr] Fix issue with deleting identities (Bug #9997).
[mjr] Fix issue causing credentials to be lost when accessing the API during
ActiveSync requests (Bug #9733).
[jan] Store preferences for guests in the session.
------
v4.0.2
------
[jan] SECURITY: Fix permission checks of guest users on system shares.
[mms] SECURITY: Fix deletion of unwanted HTML nodes in XSS filter.
[mms] Fix authentication failure when TOS is not accepted.
[jan] Don't show IMP compose link if user doesn't have permissions to IMP (Bug
#10016).
[mms] Fix issue causing slow syncs only in SyncML (Bug #10008).
[jan] Fix adding categories.
[jan] Fix listing users in Customsql driver (Bug #9963).
[jan] Fix calculation of last password change in LDAP account portal block (Bug
#9770).
[jan] Don't check for outdated DB schemas if database support is disabled (Bug
#9986).
[mjr] Fix editing settings of fixed portal blocks (Bug #9910).
------
v4.0.1
------
[mjr] Fix the blockTitle and blockContent API methods.
[jan] Fix creating folders with SQL VFS driver (Bug #9894).
[jan] Fix LDAP parameters of account portal block (Klaus Steinberger, Bug
#9770).
[jan] Fix migration detection on Windows.
[mjr] Correctly sanitize DSN when using custom cyrus auth driver (Bug #9879).
[mjr] Fix some display issues when geocoding with HordeMap (Bug #9883).
[mms] Don't load sidebar content if not expanded.
[jan] Fix deleting groups.
[jan] Fix adding new groups (Bug #9881).
[jan] Fix displaying the Facebook preference group.
[mms] Add appinitialized hook.
[cjh] Fix cyrsql configuration, rename cyrus host and port parameters to not
clash with Horde_Db parameters (Bug #9864).
[cjh] Fix signups, and update style on signup and reset password pages to
match the login page (Bug #9856, partially from Ian Roth
<iron_hat@hotmail.com>).
[cjh] Show an unknown app icon rather than a broken image if an application
doesn't have an icon (Bug #9867).
[jan] Fix setting incorrect database charset in PDO drivers.
----
v4.0
----
[mms] Add pushapp_post hook.
[jan] Fix application-specific permission checks (Bug #9786).
[jan] Fix resetting passwords (Vilius Sumskas <vilius@lnk.lt>, Bug #9800).
[jan] Fix Cyrsql authentication driver (Vilius Sumskas <vilius@lnk.lt>, Bug
#9781).
[mjr] Fix ActiveSync provisioning.
[mjr] Fix for broken Nokia MfE clients (Bug #9757).
[jan] Delete object mappings too when deleting SyncML anchors (Request #9377).
[jan] Delay sidebar creation if the sidebar is generated through JavaScript.
--------
v4.0-RC2
--------
[jan] Fix incorrect lowercasing of objectClasses in LDAP groups driver.
[jan] Fix fatal error in desktop notifications (Bug #9727).
[jan] Rename all scripts in bin/ to be prefixed with horde- and installed in
PEAR's bin_dir (Request #9647).
[jan] Don't throw exception when setting port number while using localhost in
MySQL configuration (Bug #9738).
[jan] Fix building LDAP filter for groups from configuration (Bug #9739).
[jan] Fix loading of Horde's vhost conf.php file (Bug #9704).
[jan] Fix OpenOffice MIME viewer.
[jan] Fire access keys on hidden elements in Internet Explorer (Bug #8057).
[jan] Don't fire access keys twice in Chrome browsers.
[jan] Fix JavaScript date calculations across DST boundaries.
[jan] Sort applications in preference menu by name.
[jan] Add translations for file upload error messages.
[mms] Fix identities pref UI when default_identity is locked (Bug #9701).
[mms] Added Horde::debug().
--------
v4.0-RC1
--------
[jan] Update installation and upgrade instructions.
[jan] Fix converting identities with non-ascii characters to new format.
[jan] Fix passing arguments to sendmail binary (Gonçalo Queirós, Bug #9693).
[mjr] Service_Facebook refactored for OAuth2 authentication (Bug #9122).
[mjr] IMSP drivers refactored for Horde 4.
[gwr] Allow disabling applications for administrators.
[jan] Don't show sub-permissions for adding that exist already.
[jan] Fix listing more than one sub-permission (Bug #9671).
[jan] Fix calendar synchronization with certain Nokia phones (Bug #9646).
----------
v4.0-BETA1
----------
[jan] Catch fatal errors about missing tables during initial configuration.
[mms] Fix client-side IMAP sorting using envelope data.
[mms] Workaround PHP < 5.2.6 (broken stream handling) (Bug #9644).
[mjr] Fix updating schema for individual libraries.
[mjr] Improved control over which application view to load.
[jan] Find translateable strings in configuration files.
[mms] Fix clearing expanded state for javascript trees (Bug #9659).
[jan] Only show advanced preferences link if there are some.
[mms] Fix updates for refreshing Blocks (Bug #9655).
[mjr] Fix viewing applications with no mobile view from mobile devices.
[jan] Fix error when not using a Group backend. (Bug #9642).
-----------
v4.0-ALPHA1
-----------
[jan] Provide default configuration files instead of .dist versions.
[jan] Add a new Share SQL driver with better performance.
[cjh] Drop Log SQL driver.
[mms] Update prototypejs to v1.7.
[mms] Add theme caching.
[mms] Add hook to allow browser capabilities to be modified.
[jan] Add a configuration switch for automatic creation of default shares.
[cjh] Move from Net_DNS to Net_DNS2.
[jan] Translations for the framework packages are now bundled with those
packages.
[bak] Remove LDAP driver from Horde_SessionHandler
[jan] Require mandatory UTF-8 support for both servers and clients.
[jan] Renamed Setup to Configuration and Options to Preferences.
[mms] Moved sidebar code out of block/portal code (Request #9160).
[cjh] Remove fckeditor, standardizing on ckeditor.
[jan] Move all translations from po/ to locale/ and use short locale
identifiers where possible.
[jan] Remove frameset.
[jan] Remove dhtmlHistory library.
[mms] Removed support for krb5 authentication driver.
[jan] Allow to specify the URL parameter name for the alternate login setting.
[mms] Remove reliance on PEAR Mail library.
[jan] Send alarm emails again if the alarm has changed (Bug #8717).
[mms] Add advanced preferences options screen.
[mms] Complete rewrite of preferences UI display.
[mjr] Horde_Image can now act as an Iterator for multi-page images.
[mms] Remove Horde_Cipher library.
[mms] Add 'cssfiles' hook to add custom CSS files to a page.
[jan] Add configuration to not automatically show all available shares.
[jan] Add configuration to disallow world permissions for user shares.
[jan] Store alarm dates in UTC (Bug #8381).
[mms] Add abstracted AJAX interface (Request #4561).
[mms] Update scriptaculous to v1.8.3.
[mjr] Add Horde_Image_Exif (ported from Ansel) and add a exiftool driver.
[mjr] Horde_Image now has a native Imagick driver (removed proxy code).
[mms] All Horde login/authentication handled by single login page.
[mms] Move imple processing to a Horde service.
[mms] Refactor Maintenance:: -> Horde_LoginTasks::.
[mms] In Postgres, horde_prefs table now stores data in BYTEA instead of
TEXT (Bug #8130).
[mms] Improved caching of Registry data significantly reduces session sizes
and total session storage requirements (Request #8024).
[mms] IMAP auth driver now uses Horde_Imap_Client library.
[mms] Use Gnumeric package to render MS Excel files.
[mms] Use AbiWord package to render MS Word files.
[cjh] Remove sapdb session handler backend.
[jan] Add share locking (Alfonso Marín Marín <almarin@um.es>).
[cjh] Remove javascript popup alarms.
[cjh] Update the Auth_passwd driver's add/update/remove user
implementations (Bug #7810).
[cjh] Add a Horde_Routes dispatcher for Rampage applications.
[mjr] Fix a possible infinite loop with certain recurring events in Horde_Date.
[jan] Use DateTime internally in Horde_Date.
-------
v3.3.12
-------
[jan] Convert charset of group names in SQL driver (Bug #9611).
[jan] Fix deleting of SyncML anchors if PHP short_open_tag is off (Bug #9349).
[jan] Add an experimental new Share SQL driver with better performance.
[jan] Fix integer overflow in ASN.1 parser for S/MIME messages.
[jan] Fix splitread database usage in VFS (Bug #9467).
[jan] Fix invalidating permission cache in SQL driver (Bug #9392).
-------
v3.3.11
-------
[mms] SECURITY: Fix XSS when viewing details of a vCard.
[jan] Fix exporting recurrence exceptions to vCalendar 1.0.
[jan] Skip event status synchronization with Outlook, which is broken.
[jan] Don't send SIF data to recent Funambol clients, unless requested.
[jan] Log all queries and errors by the history library.
-------
v3.3.10
-------
[jan] Fix searching DataTree elements (groups) if backend charset is different
from interface charset (Bug #9323).
[mms] Fix accessing IMAP ACLs that contain non-alphanumeric characters
(Bug #9299).
[jan] Avoid fatal errors when using DateTime with not properly configured
PHP 5.3+ (Bug #9312).
[jan] Fix importing recurrence exceptions from vCalendar 1.0.
[mms] Fix preferences management regression (Bug #9289).
[jan] Fix conversion of all-day events and certain yearly recurring events for
Funambol clients.
[mms] Fix memcache cache regression (Bug #9279).
[jan] Fix SyncML page sometimes deleting more anchors than selected.
------
v3.3.9
------
[jan] SECURITY: Add token protection to preference forms.
[mms] SECURITY: Fix XSS in util/icon_browser.php.
[mms] Fix generating RFC 2231 parameters with charset information (Bug #9212).
[mms] On invalid token during logout, redirect to initial page (Bug #7669).
[mjr] Don't allow fixed blocks to be changed to another type (Bug #9141).
[jan] Show future alarms in the alarm management screen too.
[mjr] Fix bug in Horde_Cache that would prevent cache entries from being
expired in certain cases, and prevent cache key collisions.
------
v3.3.8
------
[jan] Fix framework include path.
------
v3.3.7
------
[mjr] Fix issue in Horde_Image that would cause generated images to lose
transparency in certain situations.
[jan] Allow to update existing identities while requiring email confirmation
(Sebastian Rettenberger, Bug #8877).
[jan] Fix casting errors when using SQL shares and groups on PostgreSQL
(Bug #8899).
[gwr] Allow conf.d style directory configuration overriding (Request #8172).
[jan] Fix sending alarms to multiple users (Bug #8821).
[mms] Fix display of S/MIME certificate data (Bug #8826).
[mjr] Fix bug in Horde_Image that caused polaroid effect to fail on really old
ImageMagick versions (earlier then 6.3.2).
[jan] Work around Funambol clients requiring a "configuration" database
(Bug #8621).
[jan] Add support for synchronizing only those fields that are supported by
the client.
[jan] Workaround broken PHP number formatting with some locales (Bug #8780).
------
v3.3.6
------
[mms] SECURITY: Workaround XSS vulnerability in Firefox for data URLs
(Bug #8715).
[jan] SECURITY: Fix XSS in administrator section.
[jan] Fix alarm system with Oracle backends.
[mjr] Fix using the removeUserDataFromAllApplications method (Valentin Vidic
<valentin.vidic@carnet.hr>, Bug #8754).
[mjr] Fix checking existing signup requests in the Auth_Signup_datatree driver.
[jan] Fix syntax of MSSQL scripts (Bug #8664).
[jan] Export task alarms to Funambol clients (Request #8426).
[jan] Fix not catching Alt key combinations for access keys on Mac OS.
[jan] Fix Oracle SQL scripts.
[jan] Close popup window after saving categories.
[jan] Check quota when copying files with VFS (Valentin Vidic
<valentin.vidic@carnet.hr>, Bug #8643).
[jan] Add Croatian translation (Matej Vela <matej.vela@carnet.hr>).
[jan] Fix detecting SyncML message sizes.
[jan] Fix mapping of elements during synchronization (Bug #8386).
[mms] Fix potential session writing issues using PHP 5.0.5+.
[jan] Fix error in PHP 5 SOAP server implementation.
[mms] Fix updating memcache tracking info upon session destruction
(whatdoyouwant@gmail.com, Bug #8626).
[mjr] Various improvements and fixes to the Net_IMSP driver
(noah@lsit.ucsb.edu; Bug #8532, #8533, #8534, and #8535).
[jan] Export recurrence exceptions to Funambol clients (Alfonso Marín Marín
<almarin@um.es>, Request #8065).
[jan] Export all email addresses to Funambol clients (lst_hoe02@kwsoft.de,
Request #8571).
[jan] Export all fax numbers to Funambol clients (lst_hoe02@kwsoft.de,
Request #8618).
[jan] Fix detecting device information of certain synchronization devices.
[jan] Fix warnings when listing sessions with Oracle or PEAR DB session
handlers (Bug #8601).
[mas] Fix SessionHandler_sql::getSessionIDs() SQL syntax (moreda@allenta.com,
Bug #8600).
[mas] Fix Horde_SQL::readBlob() on MSSQL (moreda@allenta.com, Bug #8599).
[mms] Fix prototypejs regression on Internet Explorer (Bug #6590).
------
v3.3.5
------
[jan] SECURITY: Fix vulnerability in image form fields that allows overwriting
of arbitrary local files.
[cjh] SECURITY: Fix validation of "number" type preferences (Bug #8399).
[mms] SECURITY: Don't display unknown text parts inline (Bug #8311).
[mms] Upgrade prototype.js to v1.6.1.
[jan] Use system timezone for timestamps in the logs (Bug #8496).
[jan] Fix exporting certain weekday recurrence rules to iCalendar
(lst_hoe02@kwsoft.de, Bug #8510).
[jan] Work around crash bug in Funambol clients when synchronizing all-day
events (Bug #8474).
[jan] Fix synchronizing tasks with certain devices (Bug #8506).
[jan] Workaround synchronizing of messed up categories in Nokia E phones
(Bug #7824).
[jan] Fix synchronizing photos with broken Nokia phones (xk3@mompl.org,
Bug #7407).
[jan] Fix fatal error during synchronization if using certain session handlers
(Bug #8443).
[jan] Improve synchronizing yearly events with Funambol clients
(lst_hoe02@kwsoft.de, Request #7790).
[jan] Destroy session when a CLI script ends (Request #8482).
[jan] Fix data casting when caching permissions with the DataTree backend (Bug
#8435).
[jan] Pass user's password to the signup_addextra hook.
[jan] Add removeUserDataFromAllApplications API method
(adrieder@sbox.tugraz.at, Request #8454).
[jan] Catch errors when resetting passwords.
[jan] Support resetting passwords with composite authentication.
[mms] Fix memcache issue where it took 1 second to release a lock.
[mjr] Fix weatherdotcom block always displaying a 5 day forecast (Bug #8357).
[cjh] Use streams for file transfers in VFS_ssh2 (jives@jives.ixum.net,
Request #8323).
[jan] Send notification messages about new signups with confirmation links.
[jan] Drop signup_email column from sign-up table.
[jan] Show photo in vCard viewer if provided as inline vCard data.
[mjr] Fix issue where pref hooks would not be called for preferences marked as
shared and defined outside of the Horde scope.
[jan] Add configuration whether to show user drop down list or text field in
permissions dialog.
[jan] Export current locale to the environment.
[jan] Fix unfolding of vCard 2.1/vCalendar 1.0 data.
------
v3.3.4
------
[jan] Fix rendering of addresslink form fields (Bug #8053).
[mjr] Fix a botched merge in Horde_Image_gd that was causing an undefined
variable notice to be output in the image data.
----------
v3.3.4-RC1
----------
[mjr] Fix an issue that causing users with expired passwords to be allowed to
log in with the LDAP Auth driver.
[jan] Properly handle synchronization requests to non-existant databases.
[jan] Fix exporting all-day events to Funambol clients (Bugs #4487, #6847).
[jan] Quote parameter values in iCalendar data if necessary (Gunnar Wrobel,
Bug #7758).
[jan] Detect base64 encoded synchronization data from Blackberry devices
(Bugs #6995, #6949).
[jan] Optionally use Net_DNS for host name lookups (adrieder@sbox.tugraz.at,
Request #7374).
[jan] Add TLS support to LDAP drivers (web@marlboro.edu, Request #7958).
[jan] Add scope and sizelimit parameters to LDAP authentication driver
(dom.lalot@gmail.com, Request #7839).
[jan] Further improve HTML-to-text filter.
[jan] Export recurrence end dates as date-time values in iCalendar data to
improve compatibility with external clients (Bug #7846).
[jan] Silence errors messages from iconv_substr() (jens@peino.de, Bug #8128).
[jan] Don't catch Alt key combinations for access keys on Mac OS.
[mjr] Fix bitwise clause generation in the sql and hierarchical sql driver. This
fixes issues with Oracle and possibly other RDBMS.
[mjr] Correct numerous bugs in Horde_Image dealing with ImageMagick version
inconsistencies.
[jan] Fix charset conversion in preference hooks (Bug #7489).
[cjh] Proactively disable allow_url_include in core.php.
[cjh] Add an index on session_lastmodified to the Horde sessionhandler tables.
[mjr] Force the use of REQUEST_URI instead of PATH_INFO in Util::getPathInfo()
when being served by lighttpd due to issues with case insensitive
file systems.
[cjh] Add support for SSL connections to MySQL databases (BryanRJ@gmail.com,
Request #7972).
[cjh] Fix storing of unlocked preferences set by hooks (manuel@mausz.at,
Bug #6822).
[jan] Highlight color input fields with the color from the picker.
[jan] Fix importing vCards that have the charset specified in a MIME part
(Bug #7816).
[mms] Ensure all input array entries in String::convertCharset() are properly
iterated through (Bug #7828, manuel@mausz.at).
------
v3.3.3
------
[cjh] SECURITY: Escape output in the tag cloud block
(found by Gunnar Wrobel <p@rdus.de>).
[cjh] SECURITY: Validate the Horde_Image driver name
(found by Gunnar Wrobel <p@rdus.de>).
[cjh] Allow "." in phone number fields (Request #7858).
[cjh] Fix the SQL Share driver closing the global database connection
improperly when using PostgreSQL (Bug #7825).
[jan] Add support for Mozilla Sunbirds snooze properties (Request #7470).
[cjh] Try iconv_substr() in String::substr() if it's available
(duck@obala.net, Request #7826).
[cjh] Avoid warnings in Perms::getPermissionId with PostgreSQL
(Marcus Ryan <marcus@riboflavin.net>, Bug #7750).
[jan] Fix parsing of LABEL attributes in the vCard viewer.
------
v3.3.2
------
[mms] Fix prototypejs regression on IE (Bug #6590).
------
v3.3.1
------
[cjh] SECURITY: Add another check to the XSS filter.
[jan] Add script to import preferences from SquirrelMail database.
[cjh] Allow the password file Auth driver to require a specific group.
[cjh] Use YYYY-MM-DDTHH:MM:SS for Alarm date queries (Bug #7580).
[jan] Add XPath wrapper to Horde_DOM library.
[cjh] Don't use executeMultiple in the SQL Share driver when we might
reset the connection in between queries (Bug #7542).
[jan] Fix database XML schema to create all lock table fields (Bug #7433).
[jan] Fix showing two sidebars after saving the display preference group for
the first time (Bug #7475).
[jan] Fix sharing with LDAP groups (Bug #6883).
[jan] Add javascript event handler for access keys.
[cjh] Remove UNSIGNED from PostgreSQL scripts.
[cjh] Call preference hooks in the scope of the preference
(vlukashov (at) parallels (dot) com, Bug #7445).
[jan] Fix resuming synchronization session on server farms
(adrieder@sbox.tugraz.at, Bug #7394).
[jan] Fix synchronization of tasks with many items (adrieder@sbox.tugraz.at,
Bug #7395).
[mms] Upgrade prototype.js to v1.6.0.3.
[jwm] Fix regression: SOAP wsdl/disco shouldn't require authorization.
----
v3.3
----
[jan] Fix synchronization issues with Blackberry clients (Bug #6949).
[mms] Fix setting the horde user when using application authentication with
realms (Bug #6749).
[jan] Fix user name conversion with user hooks in the permissions interfaces
(Bug #6371).
[jan] Provide all settings for the read server in split SQL configuration
(Request #7024).
[jan] Improve HTML to text filter.
[mjr] Hierarchical SQL Share driver now correctly removes all children when
removing a share (Bug: 7347).
[mjr] Fix an issue with various date/time fields in horde form that was causing
erroneous validation errors.
[cjh] Sign parameters to go.php with an HMAC based on a new secret key
configuration value, to prevent using go.php as an open referrer.
[cjh] Make logout tokens only valid for a configurable length of time.
--------
v3.3-RC1
--------
[mms] Fix garbage collection handling on SQL session handler backends.
[mjr] Change MDB2 sequence names to 'id' in SQL share driver (Bug #7240).
[cjh] When a URL is supplied for pass-through after logging in, go to that URL
in mobile browsers instead of going to the mobile portal (Bug #6332).
[mms] Memcache session handler no longer writes data with a lifetime.
[cjh] Add DIMP to the horde LDAP OIDs and hordePerson objectclass (Bug #7243).
[mms] Update FCKeditor to v2.6.3.
[jan] Use global mailer configuration when sending alarm emails
(adrieder@sbox.tugraz.at, Bug #7058).
[jan] Reset background colors when resetting the category form (Bug #7226).
[jan] Improve Funambol contacts support (Requests #7099, #7100).
[jan] Correctly parse GEO tags in vCard 2.1 data (Bug #6563).
[jan] Remove Horde portal link from application menus (Bug #7221).
[cjh] Create a driver for signups, allowing backends other than DataTree
(Duck <duck@obala.net>, Request #7161).
[jan] Fix displaying images with the image form field.
[mjr] Fix issue with hierarchical SQL share driver that caused permissons to
erroneously be denied when the share contained group permissions and was
instantiated by a listShares call.
[mjr] Fix issue with hierarchical SQL share driver that caused any child shares
to be orphaned when the parent share was moved in the hierarchy.
[mjr] Fix issue with SQL share drivers that was causing permission checks to
fail under certain conditions by no longer explicitly storing owner
permissions in the Perms backend.
[cjh] Fix overwriting a variable in the tableset_html VarRenderer
(Paul Roy <proy@corom.ca>, Bug #7120).
[mms] Fix MIME encoding when using the ISO-2022-JP charset (Bug #1621).
[jan] Fix SQL Share driver not using the correct database when using different
databases in Horde applications (Bug #6997).
[cjh] Fix SQL portability in Share_sql driver (Bug #7084).
[jan] Fix synchronizing large amounts of data split across several SyncML
messages.
[jan] Add Basque translation (Euskal Herriko Unibertsitatea EHU/UPV
<xabier.arrieta@ehu.es>).
[cjh] Fix Horde_Lock::getLockInfo (duck@obala.net, Bub #7046).
[cjh] Fix SQL portability in Group_sql driver (Bug #7075).
[jan] Fix PAM authentication driver, but also mark it as deprecated (Bug #6982).
[mjr] Fix issue with native SQL Share driver that caused filtering shares by
attributes to fail.
[jan] Fix synchronization of event alarms with Funambol clients (Bug #7003).
[jan] Correctly detect Funambol clients on Blackberry devices (Bug #6995).
[mjr] Remove all user application permissions and group memberships from storage
when removing the user from the system (Bug: 6999)
[cjh] Call the postauthenticate hook in Auth::setAuth(), and allow the
postauthenticate hook to cause setAuth() to fail. Allows postauthenticate
to fire on any event, including transparent authentication, that could
result in a user being successfully logged in.
[jan] Improve attribute support and charset conversion in vCard viewer.
[jan] Show photos in vCard object if provided with an URL.
[mjr] Remove permissions from storage also when removing a share.
[jan] Add Horde_Form fields for string arrays and PGP and S/MIME keys.
[jan] Only show Add Permission icons in permissions interface where adding
them is possible.
[mjr] Fix issue in Horde_Image that was causing erratic results when cropping
images.
[jan] Fix validation of phone fields marked as required (Bug #6948).
[mms] Fix quoting periods in display part of e-mail address (Bug #6899).
[mms] Fix error checking when parsing an undisclosed recipients mail header
and using an older version of PEAR::Mail (Bug #6930).
[jan] Return to portal after editing or deleting blocks directly from there.
------
v3.2.5
------
[jan] SECURITY: Fix vulnerability in image form fields that allows overwriting
of arbitrary local files.
[cjh] SECURITY: Fix validation of "number" type preferences (Bug #8399).
[mms] SECURITY: Don't display unknown text parts inline (Bug #8311).
------
v3.2.4
------
[cjh] SECURITY: Escape output in the tag cloud block
(found by Gunnar Wrobel <p@rdus.de>).
[cjh] SECURITY: Validate the Horde_Image driver name
(found by Gunnar Wrobel <p@rdus.de>).
------
v3.2.3
------
[cjh] SECURITY: Add another check to the XSS filter.
------
v3.2.2
------
[jan] SECURITY: Fix unescaped output in the MIME attachment linking.
[jan] SECURITY: Add another check to the XSS filter.
------
v3.2.1
------
[cjh] SECURITY: Escape item names in the object browser (Bug #6906).
[cjh] Select db before queries in MySQL SessionHandler (Bug #6673).
[jan] Format messages sent through MIME_Mail in flowed text format.
[cjh] Catch errors if the Cache_file backend doesn't have permission to
garbage collect (Bug #6895).
[cjh] Fix deletion of SQL shares when using split read/write databases
(duck@obala.net, Bug #6870).
[mms] Workaround broken IE behavior when downloading files with 8-bit
filenames (felix5ng@yahoo.com.hk, Bug #129).
[cjh] Fix storing of unlocked preferences set by hooks
(manuel@mausz.at, Bug #6822).
[mms] Allow Horde memcache driver to use UNIX sockets (Bug #6848).
[mjr] Various fixes for hierarchical SQL Share driver involving share names,
better error checking and logging.
[gwr] Added group driver for Kolab.
[gwr] Added IMAP based preferences driver for Kolab.
[mms] Fix missing timestamp variable in Horde SQL cache driver
(keith@ajmani.org, Bug #6839).
[cjh] Fix over-zealous preference caching when preferences are requested for a
different user (Bug #6820).
[mjr] Fix issue in Horde_Image that caused errors when performing certain image
operations immediately after an image had been cropped when using the
ImageMagick driver.
[cjh] Fix order of checks in String::convertCharset (Bug #6794).
[mms] Fix parsing of addresses in headers when the RFC 2047-encoded personal
part of the address contains address list delimiters (Bug #6747).
[cjh] Fix generation of unique keys in configuration for machines too fast for
microtime() (mail@dunix-data.de, Bug #6762).
----
v3.2
----
[jan] Fix synchronization of contacts with some SyncML clients (Bug #6706).
[mjr] Fix SQL bitwise comparison issue in native SQL share drivers that affected
PostgresSQL (Bug #6751).
[cjh] Ensure users' email addresses are well-formed (Bug #6654).
[jan] Remove About... link from help viewer.
[mms] Update Xinha editor to support Safari 3.
--------
v3.2-RC4
--------
[bak] Improvements to WebDAV return codes and implement WebDAV locks
[bak] Add Horde_Lock subsystem
[mms] Add memcache caching support to all session backends.
[cjh] Apply fix for http://dev.rubyonrails.org/ticket/11473 to prototype.js
(Request #6590).
[cjh] Add a files-based Preferences backend (thomas.jarosch@intra2net.com,
Request #6653).
[cjh] Correct line-folding of encoded lines in iCalendar data
(Gunnar Wrobel <p@rdus.de>, Bug #6555).
[cjh] Add a configuration option for whether users can share with groups
they aren't members of (thomas.jarosch@intra2net.com, Request #6619).
[cjh] Ensure that alarms are created with a NULL alarm_snooze value
(michael.redinger@uibk.ac.at, Bug #6183).
[cjh] Add an admintools script for creating PEAR::DB sequences manually.
[cjh] Improved support for PGP fingerprints (Bug #6363).
[jan] Add rpc/ directory for prettified RPC URLs.
[jan] Move SyncML anchors out of the DataTree into a separate database table.
[cjh] Add beta SQL Permissions driver (duck@obala.net, Request #6150).
[cjh] Add beta SQL Group driver (duck@obala.net, Request #6175).
[jan] Use wider columns for the SyncML database table to correctly store long
UIDs (Bug #5025).
[jan] Add "hordeweb" theme.
[jan] Add MIME::parseAddressList().
[jan] Add icons to edit and delete blocks directly from the portal.
[jan] Allow users to specify login credentials for Horde applications in the
preferences.
[jan] Add NLS::setLanguageEnvironment() and NLS::setCharsetEnvironment().
[cjh] Fix LDAP authentication (Bug #6450).
[jan] Improve synchronization with Funambol clients.
[mas] Fix false positive verification of S/MIME messages (Bug #6323).
--------
v3.2-RC3
--------
[cjh] Fix Horde_Compress_zip::checkZipData (Bug #6413).
[jan] Allow adding attachments to the problem reporting form.
[cjh] Make sure that when we used a cached Preferences object, we set the
correct scope (Bug #6395).
[cjh] Set LC_TIME to C for consistency in date parsing in the SSH2 backend
(michael-dev@fami-braun.de, Bug #6396).
[cjh] Add experimental native SQL Share driver (duck@obala.net, Request #6109).
[cjh] Recognize IE8 in the Browser class (vilius@lnk.lt, Request #6390).
[cjh] Don't treat no results as an error in the LDAP Groups driver
(asmarre@ull.es, Request #6362).
[cjh] Use conf.bak.php for backup files so they are parsed by PHP
(Request #6341).
[cjh] Add a configuration setting for using pretty URLs (Request #6264).
[cjh] Add a method for counting attribute values without returning full objects
from the DataTree (duck@obala.net, Request #6289).
[cjh] Protect logout links with CSRF tokens.
[jan] Fix listing of folders with whitespace in the name using the SSH2 VFS
driver (Bug #6227).
[jan] Don't indent first line of paragraphs when converting HTML to plain text.
[cjh] Add a PHP 5 SoapServer RPC backend.
[cjh] Add a method for getting just attributes, instead of full object and
tree structure, from the DataTree (duck@obala.net, Request #6209).
[cjh] Add a mock Groups driver for sites that don't need Group support
(duck@obala.net, Request #6157).
[jan] Highlight links in HTML viewer that triggered a phishing warning.
[jan] Fix some string parsing on systems that don't have the "en" or "en_US"
locales installed (Bug #6194).
[jan] Avoid JavaScript popup if a translation for the WYSIWYG editor doesn't
exist (Bug #6174).
[cjh] Fix autocreation of DataTree parents (almarin@um.es, Bug #6167).
[jan] Fix linefolding with multibyte strings in iCalendar library (Bug #6103).
[jan] Add multibyte-safe String::wordwrap() method.
--------
v3.2-RC2
--------
[jan] SECURITY: Fix privilege escalation in Horde API.
[jan] SECURITY: Filter out FRAME tags from HTML messages (CVE-2007-6018).
[jan] SECURITY: The XSS filter passes the complete XSS cheat sheet
(http://ha.ckers.org/xss.html) now.
[cjh] Don't trust HTTP_X_FORWARDED_FOR or any proxied requests when consulting
the safe_ips list (Bug #6133).
[cjh] Add a PHP 5-only block for putting syndicated feeds on the Horde Portal
(duck@obala.net, Request #6107).
[cjh] Automate detection of which themes/app combinations have custom icons
(Bug #6105).
[cjh] Fix listing of current session ids in the memcache SessionHandler
(Bug #6083).
[cjh] Correct handling of cache misses from the Horde_Cache_sql driver
(Bug #6060).
[mas] Add support for PGP revocation certificates to Crypt library.
[cjh] Provide specific validation errors when datetime Horde_Form fields have
a date but not a time, or vice-versa (Bug #5992).
[cjh] Read email addresses from subjectAltName property of S/MIME certs
(Bug #5986).
[cjh] Catch Horde_Block errors when doing ajax updates.
[cjh] Allow Horde_Mobile_select to take already-encoded options (Bug #5849).
[jwm] Add support in Horde_RPC_soap for handling SOAP endpoints that only
expose certain types and/or methods.
[jwm] Make the SOAP service name in Horde_RPC_soap configurable.
[jwm] Add basic logging of SOAP calls (method name and args, elapsed
time, bytes sent in response).
[cjh] Support LDAP password expiration when using Sun/Fedora Directory Server
(marco@csita.unige.it, Request #6012).
[cjh] Remove the wrap attribute from preference textarea tags (Bug #6024).
[cjh] Recommend and default to SSHA hashed passwords.
[jan] Fix rendering of messages in some charsets that are only supported by
iconv (Bug #5962).
[jan] Display WYSIWYG editor with correct language.
[jan] Fix creating of sub groups (Bug #5970).
[jan] Fix linking of URLs encapsulated in angle brackets (Bug #4946).
[jan] Fix edge cases of CSV file imports (Bugs #3839, #4025).
[mms] For SessionHandler drivers, don't write to backend if the session data
did not change while loading the current page.
[cjh] The Auth:: package no longer depends on the PHP mhash extension
for some encryption types.
[cjh] Add stream support to some VFS backends (Request #5913).
[jan] Add client code to JSON-RPC class and implement JSON-RPC 1.1.
--------
v3.2-RC1
--------
[jan] Apply user name hooks when editing share permissions
(steinkel@ctinetworks.com, Bug #5844).
[jan] Fix some date handling with dates outside the unix epoch (Bug #5893).
[jan] Fix fixed portal blocks (Bug #5853).
[jan] Fix Share caching (Bug #5748).
[cjh] Fix deleting categories (Gunnar Wrobel <p@rdus.de>, Bug #5873).
[cjh] Import dhtmlHistory.js from DIMP into Horde core.
[cjh] UTF-8-encode DNs in the LDAP Groups driver (patrick.abiven@apitech.fr,
Bugs #4692 and #4918).
[mjr] Addition of an Effects API to the Horde_Image package, including a
number of image effect plugins.
[jan] Add country list form field.
[cjh] Add example logrotate configuration (Martin Fraer <mdf@darksnow.net>).
[cjh] Add LDAP ACL definition for preferences (Martin Fraer
<mdf@darksnow.net>).
[cjh] Add an index on horde_datatree_attribute.attribute_value to improve
DataTree performance (Andrew Morgan <morgan@orst.edu>).
[jan] Add SQL upgrade scripts.
[jan] Fix escaping of parenthesis in PDF documents (PEAR Bug #12092).
[jan] Fix alarm notification script (Bug #5660).
[jan] Fix PDF generation with some locales (Gunnar Wrobel, Bug #4094).
[jan] Move all application-specific hook examples to the applications' config/
directories.
[jan] Fix SMTP configuration being set to "Best available authentication"
(Bug #5679).
[jan] Add bind parameters to LDAP account portal block configuration (Request
#5705).
[cjh] Fix login screen enter key behavior in some circumstances (Bug #5696).
[mjr] Add a new block for displaying a tag cloud that works across all Horde
applications implementing a searchTag api.
[cjh] Use the Silk flag icons from http://famfamfam.com/lab/icons/flags/
for all flag sets (Bug #5681).
[cjh] Fix generation of UIDs with PHP 5.2+.
[cjh] Add a JSON-RPC Horde_RPC backend (joey@joeyhewitt.com).
[cjh] Allow selecting any available sound when creating alarms as an
administrator (Request #5619).
[cjh] Fix updating of last_maintenance preference with PHP 4 (Bug #5111).
[cjh] Allow considering all IPs to be "safe" for encryption operations,
passphrase entry, etc., when using SSL hardware or other secure
environments (adrieder@sbox.tugraz.at, Request #5568).
[cjh] Fix CSRF protection with Horde_Form objects submitted with preserve().
----------
v3.2-ALPHA
----------
[cjh] Centralize sounds for audio alarms in Horde.
[cjh] Include CSRF protection when using Horde_Form Tokens (Request #4492).
[cjh] Add first_week_day preference and use it in the calendar widget (Bug
#1729).
[cjh] Cache permissions with Horde_Cache (duck@obala.net).
[jan] Add configuration option for safe IP subnets.
[cjh] Allow turning off a user's ability to edit share permissions (Request
#4054).
[cjh] Consolidate color pickers used for Labels and in Horde_Form (Bug #5112).
[cjh] Log sending of problem report emails (Otto.Stolz@uni-konstanz.de,
Request #5461).
[cjh] Improve support for dates before 1970 and after 2038 (Bug #3741).
[mms] Add option to send MIME messages in a format that may allow broken MUAs
to handle 8-bit filename data.
[cjh] Add Tango Blue (xconspirisist <contact@xconspirisist.co.uk>,
roti@al.pmmf.hu, Request #2795) and Silver Surfer (Daniel
Dembach <daniel.dembach@googlemail.com>) themes.
[mms] Created a Horde-wide object to access a singlet memcache configuration.
[cjh] Test for PCRE UTF-8 support with extension tests
(thomas.jarosch@intra2net.com, Bug #1052).
[jan] Add category field to Horde_Form.
[cjh] Better detection of Konqueror JavaScript features
(thomas.jarosch@intra2net.com, Request #5372).
[cjh] Support the allow_multi parameter when displaying email address form
types (thomas.jarosch@intra2net.com, Request #5356).
[cjh] Add Scriptaculous and RedBox to Horde.
[mms] Added sql driver for Horde_Cache::.
[mms] Prevent tooltips from scrolling off screen (michael.sheldon@credativ.de,
Request #3958).
[jan] Add portal block to verify EU VAT identification numbers.
[mms] Preserve URL anchor information when performing login.
[jan] Add method to fetch public key by email address from key server.
[jan] Add parameter for a temporary directory to the VC svn driver
(meyer@mesw.de, Request #5051).
[jan] Change VC library to support open_basedir restrictions (meyer@mesw.de,
Request #5051).
[cjh] Added a query for checking existance of a user to the custom SQL
Auth driver (Request #5151).
[jan] Add button to the setup screen to check for newer versions.
[mas] Add MIME Viewer for WordPerfect documents.
[mms] Use lzf compression to compress Horde_SessionObjects:: data in the
session.
[cjh] Replace google popup javascript searching with Google Ajax Search.
[jan] Add datetime variable type to Horde_Form.
[jan] Add Horde_Alarm library for reminders, alarms and notifications across
all applications with pluggable notification methods.
[jan] Add context renderer to Text_Diff package.
[jan] Add MIME_Mail class to simplify creation and sending of MIME messages.
[cjh] Horde_Share now has a driver system with DataTree and Kolab backends
(Gunnar Wrobel <wrobel@pardus.de>, Request #4263).
[cjh] Remove RPC_rest backend.
[cjh] Add DELETE support to the webdav RPC implementation
(Håvard Wigtil <havardw@pvv.org>, Request #4721).
[cjh] Add a Horde-wide HTTP proxy config setting (Request #1039).
[mms] Use the geoip PECL extension if available.
[cjh] Add preferences change hooks that are called when preferences are set
to new values (Request #4343).
[cjh] Add Active Directory support to the LDAP account information driver
(air2@dds.nl, Request #3512).
[cjh] Add a finger driver to the account information block
(difosfor@hotmail.com, Request #3546).
[cjh] Rewrite the Prefs code to keep the same Prefs object through multiple
scope changes, instead of re-loading the Horde prefs, or prefs for
a scope that had already been loaded. Fixes bugs when making changes
to preferences and then switching scopes again (Bug #2838).
[cjh] Switch from hook functions for every group to a single hook function
for all groups, allowing more dynamic Group_hooks implementations
(dorm@dorm.org, Request #4324).
[jan] Allow Kolab users to login with both, UID or mail address
(wrobel@gentoo.org, Bug #1317).
[cjh] Switch between 'icon' and 'iconopen' images when toggling Horde_Tree