After 4 years phpGroupWare has started to prepare for a new major release. It has been decided that On 1 June 2008 the trunk of SVN will be branched to create the 0.9.18 release.

The first release from the branch will be a developer alpha of the core which will be designed to give developers some idea of what is coming in the new release. We hope that any bugs will be found and fixed quickly and this will allow us to create our first beta. The rest of the release schedule will be dependent on how testing and stabilising goes.

For more information please refer to the discussion on the developers list.

We recently became are of a cross site scripting exploit in the phpsysinfo module in phpGroupWare (CVE-2007-4048). This has been fixed in the 0.9.16.012 release.

There have been a lot of other bug fixes along the way too. Our support for PHP 5 has improved too.

All users are encouraged to upgrade. Grab phpGroupWare 0.9.16.012 from our download page now!

A security vulnerability has been discovered in phpGW < 0.9.16.011. We were not given a heads up before it was published.

The exploit is in the holiday code in calendar. It can only be exploited with register_globals = on and gpc_magic_quotes = off.

The advisory can be found at FrSIRT

There is code which exploits the vulnerability in the wild - see milw0rm.

All users are strongly encouraged to upgrade immediately.

You can grab the new version from our download section.

Or update from cvs
$ cd /path/to/phpgroupware
$ cvs update -dP

In addition to the security issue above, this release fixes support for MySQL4.1+ and pgsql 8. Support for php5 has been improved too, php5 should now work with zend.ze1_compatibility_mode on.

When grabbing your update, consider attending the phpGroupWare Conference Paris 2006.

The phpGroupWare Crew

phpGroupWare is proud to announce the latest stable version - 0.9.16.010. This release contains over 50 reported bugs fixed, a stack of patches and general polish.

This is release exceeds the normal high quality of a phpgroupware release and is probably the most stable release ever by the phpGroupWare team.

Please refer to the ChangeLog for details on the significant fixes.

The tarballs include updated CVS data so you can easily update. This is a result of the recent CVS changes at savannah.

Download it now!

Enjoy,

The phpGroupWare Crew

This release corrects an array hadling bug in the new anti XSS code introduced in 0.9.16.007.

As always you can grab it from our downloads section.

Cheers

The phpGroupWare Crew