All Versions
53
Latest Version
Avg Release Cycle
71 days
Latest Release
-

Changelog History
Page 4

  • v1.1.7 Changes

    May 19, 2020

    Changelog

  • v1.1.4 Changes

    • 🚚 Use shutil.move for --export-storage

  • v1.1.3 Changes

    • ➕ Add a --export-storage=FOLDER command-line argument (by Unrud, see #606)

  • v1.1.2 Changes

    • 🔒 Security fix: Add a random timer to avoid timing oracles and simple bruteforce attacks when using the htpasswd authentication method.
    • 🛠 Various minor fixes.

  • v1.1.1 Changes

    • 🛠 Fix the owner_write rights rule

  • v1.1 Changes

    One feature in this release is not backward compatible:

    • 👉 Use the first matching section for rights (inspired from daald)

    Now, the first section matching the path and current user in your custom rights file is used. In the previous versions, the most permissive rights of all the matching sections were applied. This new behaviour gives a simple way to make specific rules at the top of the file independant from the generic ones.

    👌 Many improvements in this release are related to security, you should ⬆️ upgrade Radicale as soon as possible:

    • 👌 Improve the regex used for well-known URIs (by Unrud)
    • Prevent regex injection in rights management (by Unrud)
    • Prevent crafted HTTP request from calling arbitrary functions (by Unrud)
    • 👌 Improve URI sanitation and conversion to filesystem path (by Unrud)
    • Decouple the daemon from its parent environment (by Unrud)

    🛠 Some bugs have been fixed and little enhancements have been added:

    • Assign new items to corret key (by Unrud)
    • Avoid race condition in PID file creation (by Unrud)
    • 👌 Improve the docker version (by cdpb)
    • Encode message and commiter for git commits
    • ✅ Test with Python 3.5

  • v1.0.1 Changes

    • Update the version because of a stupid "feature"™ of PyPI

  • v1.0 Changes

    • ✨ Enhanced performances (by Mathieu Dupuy)
    • ➕ Add MD5-APR1 and BCRYPT for htpasswd-based authentication (by Jan-Philip Gehrcke)
    • 👉 Use PAM service (by Stephen Paul Weber)
    • Don't discard PROPPATCH on empty collections (by Markus Unterwaditzer)
    • Write the path of the collection in the git message (by Matthew Monaco)
    • ✅ Tests launched on Travis

  • v0.10 Changes

    • 👌 Support well-known URLs (by Mathieu Dupuy)
    • 🛠 Fix collection discovery (by Markus Unterwaditzer)
    • Reload logger config on SIGHUP (by Élie Bouttier)
    • ✂ Remove props files when deleting a collection (by Vincent Untz)
    • 👌 Support salted SHA1 passwords (by Marc Kleine-Budde)
    • 🔊 Don't spam the logs about non-SSL IMAP connections to localhost (by Giel van Schijndel)

  • v0.9 Changes

    • Custom handlers for auth, storage and rights (by Sergey Fursov)
    • 1-file-per-event storage (by Jean-Marc Martins)
    • 👍 Git support for filesystem storages (by Jean-Marc Martins)
    • DB storage working with PostgreSQL, MariaDB and SQLite (by Jean-Marc Martins)
    • Clean rights manager based on regular expressions (by Sweil)
    • 👌 Support of contacts for Apple's clients
    • 👌 Support colors (by Jochen Sprickerhof)
    • Decode URLs in XML (by Jean-Marc Martins)
    • 🛠 Fix PAM authentication (by Stepan Henek)
    • 👉 Use consistent etags (by 9m66p93w)
    • 👉 Use consistent sorting order (by Daniel Danner)
    • Return 401 on unauthorized DELETE requests (by Eduard Braun)
    • 🚚 Move pid file creation in child process (by Mathieu Dupuy)
    • 👍 Allow requests without base_prefix (by jheidemann)