http://open-source-security-software.net/project/Radicale/releases.atom Recent releases for Radicale 2025-04-27T15:58:39.669170+00:00 python-feedgen Radicale 1.1.1 Radicale 1.1.1 2016-02-12T17:46:14+00:00 - Fix the owner_write rights rule 2016-02-12T17:46:14+00:00 Radicale 1.1 Radicale 1.1 2016-02-12T17:46:43+00:00 One feature in this release is **not backward compatible**: - Use the first matching section for rights (inspired from daald) Now, the first section matching the path and current user in your custom rights file is used. In the previous versions, the most permissive rights of all the matching sections were applied. This new behaviour gives a simple way to make specific rules at the top of the file independant from the generic ones. Many **improvements in this release are related to security**, you should upgrade Radicale as soon as possible: - Improve the regex used for well-known URIs (by Unrud) - Prevent regex injection in rights management (by Unrud) - Prevent crafted HTTP request from calling arbitrary functions (by Unrud) - Improve URI sanitation and conversion to filesystem path (by Unrud) - Decouple the daemon from its parent environment (by Unrud) Some bugs have been fixed and little enhancements have been added: - Assign new items to corret key (by Unrud) - Avoid race condition in PID file creation (by Unrud) - Improve the docker version (by cdpb) - Encode message and commiter for git commits - Test with Python 3.5 2016-02-12T17:46:43+00:00 Radicale 1.0.1 Radicale 1.0.1 2016-02-12T17:47:47+00:00 - Update the version because of a **stupid** "feature"™ of PyPI 2016-02-12T17:47:47+00:00 Radicale 1.0 Radicale 1.0 2016-02-12T17:48:00+00:00 - Enhanced performances (by Mathieu Dupuy) - Add MD5-APR1 and BCRYPT for htpasswd-based authentication (by Jan-Philip Gehrcke) - Use PAM service (by Stephen Paul Weber) - Don't discard PROPPATCH on empty collections (by Markus Unterwaditzer) - Write the path of the collection in the git message (by Matthew Monaco) - Tests launched on Travis 2016-02-12T17:48:00+00:00 Radicale 2.0.0rc1 Radicale 2.0.0rc1 2017-05-21T10:34:39+00:00 2017-05-21T10:34:39+00:00 Radicale 1.1.2 Radicale 1.1.2 2017-05-21T10:35:06+00:00 - **Security fix**: Add a random timer to avoid timing oracles and simple bruteforce attacks when using the htpasswd authentication method. - Various minor fixes. 2017-05-21T10:35:06+00:00 Radicale 2.0.0rc2 Radicale 2.0.0rc2 2017-05-21T10:35:17+00:00 2017-05-21T10:35:17+00:00 Radicale 1.1.3 Radicale 1.1.3 2017-05-27T09:03:36+00:00 - Add a `--export-storage=FOLDER` command-line argument (by Unrud, see #606) 2017-05-27T09:03:36+00:00 Radicale 2.0.0 Radicale 2.0.0 2017-05-27T16:21:16+00:00 This feature is not compatible with the 1.x.x versions. See http://radicale.org/1to2/ if you want to switch from 1.x.x to 2.0.0, and see #372 if you want to know how and why these changes happened. - Support Python 3.3+ only, Python 2 is not supported anymore - Keep only one simple filesystem-based storage system - Remove built-in Git support - Remove built-in authentication modules - Keep the WSGI interface, use Python HTTP server by default - Use a real iCal parser, rely on the "vobject" external module - Add a solid calendar discovery - Respect the difference between "files" and "folders", don't rely on slashes - Remove the calendar creation with GET requests - Be stateless - Use a file locker - Add threading - Get atomic writes - Support new filters - Support read-only permissions - Allow External plugins for authentication, rights management, storage and version control 2017-05-27T16:21:16+00:00 Radicale 2.1.0rc1 Radicale 2.1.0rc1 2017-06-17T00:06:25+00:00 This release is compatible with version 2.0.0. * Built-in web interface for creating and managing address books and calendars * can be extended with web plugins * Much faster storage backend * Significant reduction in memory usage * Improved logging * Include paths (of invalid items / requests) in log messages * Include configuration values causing problems in log messages * Log warning message for invalid requests by clients * Log error message for invalid files in the storage backend * No stack traces unless debugging is enabled * Time range filter also regards overwritten recurrences * Items that couldn't be filtered because of bugs in VObject are always returned (and a warning message is logged) * Basic error checking of configuration files * File system locking isn't disabled implicitly anymore, instead a new configuration option gets introduced * The permissions of the lock file are not changed anymore * Support for sync-token * Support for client-side SSL certificates * Rights plugins can decide if access to an item is granted explicitly * Respond with 403 instead of 404 for principal collections of non-existing users when ``owner_only`` plugin is used (information leakage) * Authentication plugins can provide the login and password from the environment * new ``remote_user`` plugin, that gets the login from the ``REMOTE_USER`` environment variable (for WSGI server) * new ``http_x_remote_user`` plugin, that gets the login from the ``X-Remote-User`` HTTP header (for reverse proxies) 2017-06-17T00:06:25+00:00 Radicale 2.1.0rc2 Radicale 2.1.0rc2 2017-06-21T08:07:04+00:00 This release is compatible with version 2.0.0. * Allow extra configuration options, when external plugins are used. * Add request method and path to exceptions that happen during requests. 2017-06-21T08:07:04+00:00 Radicale 2.1.0rc3 Radicale 2.1.0rc3 2017-06-23T20:23:37+00:00 This release is compatible with version 2.0.0. * Include VObject version in item cache hash * Improve logging of client timeouts 2017-06-23T20:23:37+00:00 Radicale 1.1.4 Radicale 1.1.4 2017-06-25T08:40:39+00:00 * Use ``shutil.move`` for ``--export-storage`` 2017-06-25T08:40:39+00:00 Radicale 2.1.0 Radicale 2.1.0 2017-06-25T09:19:54+00:00 This release is compatible with version 2.0.0. * Built-in web interface for creating and managing address books and calendars * can be extended with web plugins * Much faster storage backend * Significant reduction in memory usage * Improved logging * Include paths (of invalid items / requests) in log messages * Include configuration values causing problems in log messages * Log warning message for invalid requests by clients * Log error message for invalid files in the storage backend * No stack traces unless debugging is enabled * Time range filter also regards overwritten recurrences * Items that couldn't be filtered because of bugs in VObject are always returned (and a warning message is logged) * Basic error checking of configuration files * File system locking isn't disabled implicitly anymore, instead a new configuration option gets introduced * The permissions of the lock file are not changed anymore * Support for sync-token * Support for client-side SSL certificates * Rights plugins can decide if access to an item is granted explicitly * Respond with 403 instead of 404 for principal collections of non-existing users when ``owner_only`` plugin is used (information leakage) * Authentication plugins can provide the login and password from the environment * new ``remote_user`` plugin, that gets the login from the ``REMOTE_USER`` environment variable (for WSGI server) * new ``http_x_remote_user`` plugin, that gets the login from the ``X-Remote-User`` HTTP header (for reverse proxies) 2017-06-25T09:19:54+00:00 Radicale 2.1.1 Radicale 2.1.1 2017-07-01T03:19:24+00:00 This release is compatible with version 2.0.0. * Add missing UIDs instead of failing * Improve error checking of calendar and address book objects * Fix upload of whole address books 2017-07-01T03:19:24+00:00 Radicale 1.1.6 Radicale 1.1.6 2017-07-24T02:25:50+00:00 * Improve logging for ``--export-storage`` 2017-07-24T02:25:50+00:00 Radicale 2.1.2 Radicale 2.1.2 2017-07-24T02:39:11+00:00 This release is compatible with version 2.0.0. * Remove workarounds for bugs in VObject < 0.9.5 * Error checking of collection tags and associated components * Improve error checking of uploaded collections and components * Don't delete empty collection properties implicitly * Improve logging of VObject serialization 2017-07-24T02:39:11+00:00 Radicale 2.1.3 Radicale 2.1.3 2017-08-02T15:47:44+00:00 This release is compatible with version 2.0.0. * Enable timeout for SSL handshakes and move them out of the main thread * Create cache entries during upload of items * Stop built-in server on Windows when Ctrl+C is pressed * Prevent slow down when multiple requests hit a collection during cache warm-up 2017-08-02T15:47:44+00:00 Radicale 2.1.4 Radicale 2.1.4 2017-08-04T13:12:30+00:00 This release is compatible with version 2.0.0. * Fix incorrect time range matching and calculation for some edge-cases with rescheduled recurrences * Fix owner property 2017-08-04T13:12:30+00:00 Radicale 2.1.5 Radicale 2.1.5 2017-08-26T13:41:52+00:00 This release is compatible with version 2.0.0. * Add ``--verify-storage`` command-line argument * Allow comments in the htpasswd file * Don't strip whitespaces from user names and passwords in the htpasswd file * Remove cookies from logging output * Allow uploads of whole collections with many components * Show warning message if server.timeout is used with Python < 3.5.2 2017-08-26T13:41:52+00:00 Radicale 2.1.6 Radicale 2.1.6 2017-09-11T18:38:45+00:00 This release is compatible with version 2.0.0. * Fix content-type of VLIST * Specify correct COMPONENT in content-type of VCALENDAR * Cache COMPONENT of calendar objects (improves speed with some clients) * Stricter parsing of filters * Improve support for CardDAV filter * Fix some smaller bugs in CalDAV filter * Add X-WR-CALNAME and X-WR-CALDESC to calendars downloaded via HTTP/WebDAV * Use X-WR-CALNAME and X-WR-CALDESC from calendars published via WebDAV 2017-09-11T18:38:45+00:00 Radicale 2.1.7 Radicale 2.1.7 2017-09-19T17:20:07+00:00 This release is compatible with version 2.0.0. * Don't print warning when cache format changes * Add documentation for ``BaseAuth`` * Add ``is_authenticated2(login, user, password)`` to ``BaseAuth`` * Fix names of custom properties in PROPFIND requests with ``D:propname`` or ``D:allprop`` * Return all properties in PROPFIND requests with ``D:propname`` or ``D:allprop`` * Allow ``D:displayname`` property on all collections * Answer with ``D:unauthenticated`` for ``D:current-user-principal`` property when not logged in * Remove non-existing ``ICAL:calendar-color`` and ``C:calendar-timezone`` properties from PROPFIND requests with ``D:propname`` or ``D:allprop`` * Add ``D:owner`` property to calendar and address book objects * Remove ``D:getetag`` and ``D:getlastmodified`` properties from regular collections 2017-09-19T17:20:07+00:00 Radicale 2.1.8 Radicale 2.1.8 2017-09-24T00:24:29+00:00 This release is compatible with version 2.0.0. * Flush files before fsync'ing 2017-09-24T00:24:29+00:00 Radicale 2.1.9 Radicale 2.1.9 2018-04-21T14:28:44+00:00 This release is compatible with version 2.0.0. * Specify versions for dependencies * Move WSGI initialization into module * Check if ``REPORT`` method is actually supported * Include ``rights`` file in source distribution * Specify ``md5`` and ``bcrypt`` as extras * Improve logging messages * Windows: Fix crash when item path is a directory 2018-04-21T14:28:44+00:00 Radicale 2.1.10 Radicale 2.1.10 2018-08-16T06:13:29+00:00 This release is compatible with version 2.0.0. * Update required versions for dependencies * Get ``RADICALE_CONFIG`` from WSGI environ * Improve HTTP status codes * Fix race condition in storage lock creation * Raise default limits for content length and timeout * Log output from hook 2018-08-16T06:13:29+00:00 Radicale 2.1.11 Radicale 2.1.11 2018-11-05T15:37:53+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/2.1.11/NEWS.md) 2018-11-05T15:37:53+00:00 Radicale 1.1.7 Radicale 1.1.7 2020-05-19T01:08:46+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/1.1.7/NEWS.rst) 2020-05-19T01:08:46+00:00 Radicale 2.1.12 Radicale 2.1.12 2020-05-19T01:32:41+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/2.1.12/NEWS.md) 2020-05-19T01:32:41+00:00 Radicale 3.0.0 Radicale 3.0.0 2020-05-19T05:28:47+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/3.0.0/NEWS.md) 2020-05-19T05:28:47+00:00 Radicale 3.0.1 Radicale 3.0.1 2020-05-22T14:49:52+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/3.0.1/NEWS.md) 2020-05-22T14:49:52+00:00 Radicale 3.0.2 Radicale 3.0.2 2020-05-24T11:56:08+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/3.0.2/NEWS.md) 2020-05-24T11:56:08+00:00 Radicale 3.0.3 Radicale 3.0.3 2020-06-06T19:21:34+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/3.0.3/NEWS.md) 2020-06-06T19:21:34+00:00 Radicale 3.0.4 Radicale 3.0.4 2020-08-18T21:10:07+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/3.0.4/NEWS.md) 2020-08-18T21:10:07+00:00 Radicale 3.0.5 Radicale 3.0.5 2020-08-31T12:28:59+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/3.0.5/NEWS.md) 2020-08-31T12:28:59+00:00 Radicale 3.0.6 Radicale 3.0.6 2020-09-14T19:43:49+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/3.0.6/NEWS.md) 2020-09-14T19:43:49+00:00 Radicale v3.1.0 Radicale v3.1.0 2021-12-26T11:28:18+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/v3.1.0/NEWS.md) 2021-12-26T11:28:18+00:00 Radicale v3.1.1 Radicale v3.1.1 2022-01-19T00:09:25+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/v3.1.1/CHANGELOG.md) 2022-01-19T00:09:25+00:00 Radicale v3.1.2 Radicale v3.1.2 2022-01-21T23:52:12+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/v3.1.2/CHANGELOG.md) 2022-01-21T23:52:12+00:00 Radicale v3.1.3 Radicale v3.1.3 2022-01-26T21:30:41+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/v3.1.3/CHANGELOG.md) 2022-01-26T21:30:41+00:00 Radicale v3.1.4 Radicale v3.1.4 2022-02-01T19:49:25+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/v3.1.4/CHANGELOG.md) 2022-02-01T19:49:25+00:00 Radicale v3.1.5 Radicale v3.1.5 2022-02-08T16:15:53+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/v3.1.5/CHANGELOG.md) 2022-02-08T16:15:53+00:00 Radicale v3.1.6 Radicale v3.1.6 2022-04-18T21:58:53+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/v3.1.6/CHANGELOG.md) 2022-04-18T21:58:53+00:00 Radicale v3.1.7 Radicale v3.1.7 2022-04-20T16:06:33+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/v3.1.7/CHANGELOG.md) 2022-04-20T16:06:33+00:00 Radicale v3.1.8 Radicale v3.1.8 2022-07-14T20:36:02+00:00 [Changelog](https://github.com/Kozea/Radicale/blob/v3.1.8/CHANGELOG.md) 2022-07-14T20:36:02+00:00