Horde 3.1.2 and 3.0.11 released
New versions of the Horde Application Framework 3.0 and 3.1 have been released. Horde 3.1.2 includes several small improvements and bugfixes and closes some minor XSS leaks. Horde 3.0.11 comes with the XSS fixes only.
Major changes compared to Horde 3.1.1 are:
- Security Fixes
- Closed XSS problems in dereferrer (IE only), help viewer and problem reporting screen.
- Removed unused image proxy code from dereferrer.
- Bugfixes and improvements
- Added configuration option to disable GET-based sessions.
- Added Oracle and generic SQL upgrade scripts.
- Improved default charset support.
- Improved API and RPC interface.
- Fixed the preference cache.
Changes compared to Horde 3.0.10 are:
- Closed XSS problems in dereferrer (IE only), help viewer and problem reporting screen.
- Removed unused image proxy code from dereferrer.