[pkg-horde] [announce] [SECURITY] Gollem H5 (3.0.5) (final)

[Michael J Rubinsky]

The Horde Team is pleased to announce the final release of the Gollem File
Manager version H5 (3.0.5).

Gollem is a web-based file manager, providing the ability to fully manage a
hierarchical file system stored in a variety of backends such as a SQL
database, as part of a real filesystem, or on FTP, Samba or SSH servers. For
more information on Gollem, visit http://www.horde.org/apps/gollem.

For upgrading instructions, please see
http://www.horde.org/apps/gollem/docs/UPGRADING

For detailed installation and configuration instructions, please see
http://www.horde.org/apps/gollem/docs/INSTALL

Thanks to an anonymous researcher working with Beyond Security's SecuriTeam
Secure Disclosure program <http://www.beyondsecurity.com/ssd.html> for
discovering the vulnerability.

The major changes compared to Gollem version H5 (3.0.4) are:
     * SECURITY: Fix XSS vulnerability when viewing directories.

The full list of changes can be viewed here:

https://github.com/horde/horde/blob/889629faf0c802f660083cd70151553ec32a47a8/gollem/docs/CHANGES

Have fun!

The Horde Team.
-- 
Horde announcements mailing list
You are subscribed to this list as: pkg-horde-hackers at lists.alioth.debian.org
To unsubscribe, mail: announce-unsubscribe at lists.horde.org