Mailing List Archive

Release of DAViCal 1.1.9
Just now, I pushed some fixes and tagged DAViCal version 1.1.9

This fixes several security-related issues in DAViCal. We strongly
recommend that all DAViCal installations upgrade to the new version
ASAP. A few smaller fixes contributed over the past year are included as

Release notes can be found on the wiki at . There is no
change to AWL associated with this release (still 0.60).

The DAViCal Project greatly appreciates the efforts of HackDefense,
specifically Rick Verdoes for finding the vulnerabilities and verifying
the fix, Niels van Gijzen for developing the fix, and Danny de Weille
for verifying and helping with the fix and correcting the vulnerabilities.

HackDefense Advisories for the vulnerabilities will soon be available at:

We don't have tarballs with the new version available on the
website quite yet, so in the meanwhile I suggest getting the code
directly from GitLab:

We hope to have updated Debian packages for this release in the near future.

The commit associated with the release is