[pkg-horde] [announce] Nag H3 (2.1.4) (final)

[Jan Schneider]

The Horde Team is pleased to announce the final release of the Nag Task List
Manager version H3 (2.1.4).

This is a security release that fixes privilege escalation in the Horde API
and missing ownership validation in the share management. All users are
encouraged to upgrade to this version.

Nag is a web-based application built upon the Horde Application Framework which
provides a simple, clean interface for managing online task lists (i.e., TODO
lists).  It also includes strong integration with the other Horde applications
and offers shared task lists.

The major changes compared to the Nag H3 (2.1.3) version are:
    * Fixed privilege escalation in the Horde API.
    * Fixed missing ownership validation on share changes.
    * Updated Japanese, Polish, and Spanish translations.

The full list of changes (from version H3 (2.1.3)) can be viewed here:

http://cvs.horde.org/diff.php/nag/docs/CHANGES?r1=1.115.2.54&r2=1.115.2.56.2.3&ty=h

The Nag H3 (2.1.4) distribution is available from the following locations:

    ftp://ftp.horde.org/pub/nag/nag-h3-2.1.4.tar.gz
    http://ftp.horde.org/pub/nag/nag-h3-2.1.4.tar.gz

Patches against version H3 (2.1.3) are available at:

    ftp://ftp.horde.org/pub/nag/patches/patch-nag-h3-2.1.3-h3-2.1.4.gz
    http://ftp.horde.org/pub/nag/patches/patch-nag-h3-2.1.3-h3-2.1.4.gz

Or, for quicker access, download from your nearest mirror:

    http://www.horde.org/mirrors.php

MD5 sums for the packages are as follows:

    e578714cb60496dce97cf7192c96eab1  nag-h3-2.1.4.tar.gz
    249381493e65f4ea279ef89571a834b5  patch-nag-h3-2.1.3-h3-2.1.4.gz

Have fun!

The Horde Team.

-- 
Horde announcements mailing list
You are subscribed to this list as: pkg-horde-hackers at lists.alioth.debian.org
To unsubscribe, mail: announce-unsubscribe at lists.horde.org