webcollab-announce — Mailing list for WebCollab announcements only

[Webcollab-announce] Innovation in development of open source enterprise software

[Dominic R. M. <dom...@sm...>]

Dear Sirs,

my name is Dominic Markowski, I'm a student at the Hochschule Bonn
Rhein Sieg University of Applied Sciences and I'm writing my master
thesis about innovation during development of open source business
application software.

A major part of my thesis depends on the analysis of the open source
communities. You received this e-mail, because I identified it, as the
major contact address of one of the projects, where I’m researching on.
Now I’m asking you, to take place in a survey and to distribute it in
your community. Here is the link:

http://limesurvey.j-source.de/index.php/848325?lang=en

The survey is available in English and German and takes 5 to 15
minutes. The results will be presented on an open source software
conference in Germany and on a System Science Conference in the USA
(if I get enough results). To increase the publicity of your software,
I need as much as replies as possible of your community.

Please let me know, if you are interested in the results of my elaboration.

Yours sincerely

Dominic Markowski

-

Sehr geehrte Damen und Herren,

mein Name ist Dominic Markowski, ich bin Student an der Hochschule
Bonn Rhein Sieg University of Applied Sciences und ich schreibe zur
Zeit meine Masterarbeit über Innovation bei der Entwicklung von Open
Source Unternehmenssoftware.

Ein wesentlicher Bestandteil meiner Arbeit basiert auf der Analyse von
Open Source Comminities. Sie erhalten diese E-Mail, da ich Sie als
Primäre Kontaktadresse von ei-nem der Projekte, die ich Erforsche,
identifiziert habe.

Ich möchte Sie bitten, an der folgenden Umfrage teilzunehmen und den
Link zur Um-frage in Ihrer Community zu verteilen. Hier ist der Link:

http://limesurvey.j-source.de/index.php/848325?lang=de

Die Umfrage ist in Englisch und Deutsch verfügbar und dauert 5 bis
15Minuten. Die Ergebnisse werden auf einer Open Source Software
Konferenz in Deutschland und auf einer Wirtschaftsinformatik-Konferenz
in den USA präsentiert (insofern genug Ergeb-nisse vorliegen). Zur
Erhöhung der Publicity Ihrer Software, benötige ich so viele
Rückmeldungen wie möglich aus Ihrer Community.

Falls Sie Interesse an den Ergebnissen haben, dann lassen Sie es mich wissen.

Mit freundlichen Grüßen

Dominic Markowski

[Webcollab-announce] WebCollab 3.40 Released

[Andrew S. <and...@pa...>]

Hello all,

I am pleased to announce the release of WebCollab 3.40 (Glenorchy).

This is a bug fix and general upgrade version.

Password security has been improved with new passwords being encrypted with the Blowfish algorithm.
Existing passwords will not be changed until the password is manually changed.  Note that this is
only applicable to versions of PHP 5.3.7 (or higher); since earlier versions of PHP have a buggy
implementation of the Blowfish algorithm.

Uploaded files are now stored with random hash id's instead of the file name.  This increases
security and solves potential problems with non-ascii filenames in filesystems.  Again, this only
applies to new uploaded files, and the code is still backwardly compatible with existing uploaded
files.

The Italian language translation has been updated.

Note that a database upgrade is necessary for earlier versions to implement the new hashed uploaded
file names.

Enjoy!

Andrew Simpson

[Webcollab-announce] Webcollab 3.31 Released

[Andrew S. <and...@pa...>]

Hello all,

I am pleased to announce the release of WebCollab 3.31 (Baldy).

This is a bug and security fix version with two changes.

Internet Security Auditors have found a HTTP Response Splitting Vulnerability in the 'help' files
(CVE-2013-2652). This vulnerability would appear to have been present since the first released
version of WebCollab, and is not considered to be high impact.  Nevertheless, all users are
recommended to upgrade. 

As an alternative to upgrading, add the file '[webcollab]/help/help_language.php' from this release
to any earlier release, overwriting the existing file of the same name.

A bug in setting passwords with PHP 5.5+ has been fixed.  An internal function shared a common name
with a new reserved function in PHP 5.5.

I am aware that WebCollab is often vetted and inspected by various organisations looking for
security issues.  However, in over 10 years of WebCollab releases this is only the second time that
a security vulnerability has been reported.

Enjoy!

Andrew

[Webcollab-announce] WebCollab 3.30 Released

[Andrew S. <and...@pa...>]

Hello all,

I am pleased to announce the release of WebCollab 3.30 (Aotuhia).  The release was made a few days
ago and seems to have raised no issues.

This version has bugfixes and a minor feature improvement in reparenting.  

Password encryption internally has been changed from MD5 (now considered weak) to either MD5, or
SHA256 encryption. SHA256 is preferred and will be used with versions of PHP 5.3.2, and higher.

There is provision in the code for the blowfish algorithm, but this has not been enabled for
general use, mainly because blowfish in PHP prior to 5.3.8 is reportedly buggy (PHP Manual).  

Password re-encryption for existing installations will occur as users change their passwords, or
new users are created.

Active Directory authentication has been added.  This is considered experimental.  Please file bug
reports as necessary.

Note that for upgrades, setup.php must be run to add and write the small change in the config
file.  See Release Notes for more details.

Enjoy!

Andrew Simpson

[Webcollab-announce] WebCollab 3.21 Released

[Andrew S. <and...@pa...>]

Hello all,

I am pleased to announce the release of WebCollab 3.21 (Kaitake):

This version has principally bugfixes of a minor nature as the 3.00 series becomes stabilised. 

Note that in versions 3.00 and 3.10, when a task/project was deleted the uploaded files were not 
physically deleted from the server due to a coding bug.  This was unlike all other versions of 
WebCollab where uploaded files are physically deleted with projects/tasks.  This bug is now fixed, 
and files will be deleted when the task/project is deleted.   

This version 3.21 is a re-release of version 3.20 with WebCollab Bug #3535626 fixed.  This was in
fact not a WebCollab bug, but a database bug present in some versions of PHP.        

Enjoy!

Andrew Simpson 

[Webcollab-announce] WebCollab 3.00

[Andrew S. <and...@pa...>]

Hello all,

I am pleased to announce the release of WebCollab 3.00 (Avon):

This version is similar to the former 2.xx series, but has bugfixes and some new features added. 
The principal change is the database backend now uses prepared statements and a PHP Data Objects
(PDO) interface.  Minor speed improvements are expected with database interactions.

The prepared statements with PDO interface provide very good protection against SQL injection
attacks, which in turn are often due to poor coding. (WebCollab has previously had no known SQL 
injection problems).

WebCollab is now fully UTF-8 only.  It has been seven years since the first WebCollab UTF-8
experimental versions were released and UTF-8 offers substantial advantages for
internationalisation. 

The XHTML produced is fully compliant with XHTML 1.0 strict and WebCollab now has a table-less box
model using CSS.  The CSS code has been totally rewritten to allow better CSS skinning of the
display.  The display is buffered using PHP buffers to give better throughput and screen control.

Users can now gain remote access to iCal files using web authorisation.    

Note that new MySQL databases will created be as innodb databases.  The older MyISAM option has
been deprecated in this version.  

The previous release WebCollab 2.71 was a minor release that cleaned up the few known minor bugs and
provided a final clean release for the 2.xx series.

Enjoy!

Andrew Simpson 

[Webcollab-announce] WebCollab 2.70 (May Queen) released!!

[Andrew S. <and...@pa...>]

Hello all,

I am pleased to announce the release of WebCollab 2.70 (May Queen):

This version includes improvements to the appearance and use of the
calendar pages, and a simple javascript editing tool for the formatting
of text in boxes.

The javascript editor adds bbcodes to the text in the text box.  In
common with many web-based programs, WebCollab then 'reads' the bbcode
and translates to HTML on output.  Using bbcode removes the security
problems associated with accepting HTML in text inputs.

The usual minor bugfixes and small coding improvements have also been
made in this release.

Enjoy!

Andrew Simpson 

[Webcollab-announce] WebCollab 2.61 (Bodicea) released!

[Andrew S. <and...@pa...>]

Hi all,

I am pleased to announce the release of WebCollab 2.61.

This follows the recent release of WebCollab 2.60.  This previous
release didn't get advertised too much, because soon after release, a
couple of annoying bugs quickly became apparent.

WebCollab has a new logo; there are few bugfixes and some useful code
optimisations.

Enjoy!

Andrew 

 

[Webcollab-announce] WebCollab 2.50 (Billy Goat) released!

[Andrew S. <and...@pa...>]

Hi all,

I am pleased to announce the release of WebCollab 2.50 (Billy Goat).

This release has minor feature improvements and bug fixes.

Secunia Research have issued Advisory SA34568 on behalf of Russ McRee for a CSRF vulnerability 
and a single XSS issue discovered in WebCollab 2.40.  Both these issues are patched in this 
release of WebCollab.  This is the first publicly notified issue with WebCollab in more than 
six years of releases.

The CRSF issue would need to be exploited by tricking an administrator to open a malformed link 
whilst they were logged on to WebCollab.  Nevertheless, upgrading is recommended for all sites.

All of the code has subsequently been given a security review and several improvements made.  This
has included security tokens on most forms, and changing GET requests with actions to POST
requests.  This means that [delete] actions have now been generally shifted to the [edit] pages and
are now buttons instead of hyperlinks.

The setup pages have been heavily modified and improved.  The code is now XHTML strict compliant (previously had validation errors).  The character set handling has been improved for the standard WebCollab.

Setup has also now been configured to accept language files.  Contributions of translations are welcomed!

Long posts in the forums are now truncated until a 'drop down button' is selected. 

----

The UTF-8 version of WebCollab is recommended for all users, provided the optional mb_strings
library is installed in PHP.  For users with languages other than English, the UTF-8 version is
strongly recommended because it has far superior internationalisation.

Andrew

-- 
Andrew Simpson <and...@pa...>

[Webcollab-announce] WebCollab 2.40 (Avocado) released!

[Andrew S. <and...@pa...>]

Hi all,

I am pleased to announce the release of WebCollab 2.40 (Avocado).
 
This release has minor bugfixes and some feature enhancements.  The PHP mail() function has been made available as an option for systems that cannot handle SMTP directly.   An option to enable RSS auto-discovery has been added to the configuration file.  

The UTF-8 version of WebCollab is recommended for all users, provided the optional mb_strings library is installed in PHP.  For users with languages other than English, the UTF-8 version is strongly recommended because it has far superior internationalisation.

Andrew

-- 
Andrew Simpson <and...@pa...>

[Webcollab-announce] WebCollab 2.31 Aberdeen released!

[Andrew S. <and...@pa...>]

Hi all,

I am pleased to announce the release of WebCollab 2.31 Aberdeen.
 
This release has minor bugfixes and a Portuguese translation added.

The UTF-8 version of WebCollab is recommended for all users, provided the optional mb_strings library is installed in PHP.  For users with languages other than English, the UTF-8 version is strongly recommended because it has far superior internationalisation.

Andrew

-- 
Andrew Simpson <and...@pa...>

[Webcollab-announce] WebCollab 2.30 Stargazer released

[Andrew S. <and...@pa...>]

I am pleased to announce the release of WebCollab 2.30 Stargazer.
 
This release has minor feature improvements and bugfixes to RSS.  Notable changes are:

  - Forum messages can now be edited.

  - Start day of week for calendar can be altered in the config file.

  - The forums and description fields now accept 'bbcodes'.

  - Priority sort field has been added to Task Summary.

The UTF-8 version of WebCollab is recommended for all users, provided the optional mb_strings library is installed in PHP.  For users with languages other than English, the UTF-8 version is strongly recommended because it has far superior internationalisation.

For upgrading from earlier versions of WebCollab, you need to update the database as tables have been added. You also need to run setup again as some configuration items have been changed.  More details on this are given in the included RELEASE NOTES.


-- 
Andrew Simpson <and...@pa...>

[Webcollab-announce] Release of WebCollab 2.20 (Orion)

[Andrew S. <and...@pa...>]

Hi all,

I am pleased to announce the release of WebCollab 2.20 (Orion).

This release has feature improvements, minor bugfixes and internal improvements.  Notable changes
are:

  - Uploaded files can now be updated (instead of manually deleting and adding a new file).

  - The deadline can be changed on cloned projects with all child tasks altering by the same amount.

  - Optional VEVENT configuration parameter for iCalendar to allow Google, Outlook compatibility,
     or other software that does not support VTODO.

  - Setup program now uses UTF-8 for better internationalisation.

  - Admin user setup is now done during first setup.

  - Brazilian Portuguese, Dutch and Spanish translation updates

The UTF-8 version of WebCollab (webcollab-utf8-2.20) is recommended for all users, provided the 
optional mb_strings library is installed in PHP.  For users with languages other than English, 
the UTF-8 version is strongly recommended because it has far superior internationalisation.

Andrew Simpson

[Webcollab-announce] WebCollab 2.11 (Archimedes)

[Andrew S. <and...@pa...>]

Hi all,

I am pleased to announce WebCollab 2.11 (Archimedes), has been released. 

This release has a number of minor bugfixes for problems in WebCollab 2.10a, and updated translations.  The Esperanto language has also been added.

The UTF-8 version is now more closely aligned with the standard version to make maintaining the code easier.  The Sourceforge demo site has been running the UTF-8 version now for several weeks, since Sourceforge finally enabled the necessary mb_strings library in their PHP load.

Regards

Andrew Simpson  

[Webcollab-announce] WebCollab 2.10 (Speedway)

[Andrew S. <and...@pa...>]

Hi all,

I am pleased to announce WebCollab 2.10 (Speedway), has been released. 

This release has the usual slew of minor bugfixes and updated translations.  Minor usability improvements have been made too.

The most notable change is the addition of new graphic icons.  Mark James, publisher of the Silk icons, has kindly made his icons available under the GPL for use in WebCollab (Normally they are under the slightly different Creative Commons Licence).

New translations have been added for Dutch, Norwegian and Slovenian.  The Traditional Chinese translation has been updated.

On a technical note, the software development repository has been changed from a CVS repository to Subversion repository.  Anyone can browse, or download the current development code from the Subversion repository at the Sourceforge site.

Regards

Andrew Simpson      

[Webcollab-announce] WebCollab 2.01 Released

[Andrew S. <and...@pa...>]

I am pleased to announce the recent release of WebCollab 2.01 (Greenlane)

This is a bugfix and maintenance release.  A number of small bugs are fixed, the Serbian and Turkish translations are updated.

Andrew Simpson

[Webcollab-announce] WebCollab 2.00 development version

[Andrew S. <and...@pa...>]

I an pleased to announce development version - that is WebCollab 2.00-devel.

The general blurb follows:

----

The much requested iCalendar download provision has been added.  This allows users to create downloadable files in the iCalendar format.  The iCalendar files can be read by third party calendar software, such as WebCalendar (no relation to Webcollab!), Mozilla Sunbird, Apple iCal, GNOME Evolution, etc.

The calendar now has colourised projects and tasks.  This, along with other minor cosmetic changes have made the calendar much more attractive and readable.

Contacts can now be entered at tasks and project level.  Be warned that contacts associated with tasks and projects will be deleted when that project or task is deleted.

Forums entries can now be searched.  This makes the forums much more useful to users.

Ordinary users can now clone projects.  However, private tasks (within the project) that they cannot otherwise view, will not be cloned.

Basic RSS feeds have been provided.

The minimum database version for MySQL is now 4.1.3.  MySQL 4.1.3 was released in June 2004, and has a number of very useful improvements over the 3.23.x versions.  Subqueries can now be done by the database, rather than in PHP coding; the database supports timezones internally and character sets are now properly supported.

There is no change to the minimum versions of PostgreSQL.  The above features have all been in PostgreSQL for some time.

The unicode version of WebCollab is now closely integrated with the standard version.  This means that one version can be maintained rather than two source trees. 

---

As can be seen some fairly major additions and changes.  However, users familiar with WebCollab will find that the software is much the same as always.

My intention is to try and get the language translations updated, carry out more testing, and then provide a formal release.

Regards

Andrew Simpson

[Webcollab-announce] WebCollab 1.80 - Ardness

[Andrew S. <and...@pa...>]

I am pleased to announce WebCollab 1.81 - Ardness, released a few days
ago.  This is minor bugfix and translation update release.

Minor bugs from WebCollab 1.80 have been fixed; Chinese, Czech, Greek
and Turkish translations have been added.  The Chinese language consists
of two translations - Traditional Chinese & Simplified Chinese.  The
translator has emphasized that the Traditional Chinese translation is a
Hong Kong variant (not a Taiwanese variant).

The Chinese language, being a multibyte encoding, is only in the Unicode
version of WebCollab.   

Regards

Andrew Simpson

[Webcollab-announce] WebCollab 1.80 (Allendale)

[Andrew S. <and...@pa...>]

Hi all,

I am pleased to announce WebCollab 1.80 (Allendale), has been released. 
This release includes both the standard and Unicode versions.

Included is SMTP PIPELINING which should increase the throughput of
emails dramatically - I have seen figures of 30% suggested - though this
would depend on a number of variables.  A number of user requests have
been implemented and some small improvements have been made to the
graphical layout.  The CSS files are now referenced in the config file
to make it easier to implement custom CSS.

All the pages have been revalidated as XHTML (strict), and the APD
profiler used to identify some PHP bottlenecks.

A Serbian translation has been added, and a Greek translation was
uploaded to CVS just after this release.

Regards

Andrew Simpson      

[Webcollab-announce] WebCollab 1.71a (Karekare) released

[Andrew S. <and...@pa...>]

I am pleased to announce WebCollab 1.71a - Karekare, which has been
released a few days ago.  This release has been done with the standard
and Unicode versions at the same time.

This is minor bugfix release of the original WebCollab 1.71 release. 
The changes are listed in the changelog, and are principally usability
issues.

The Spanish language translation has also been updated.

For something more cutting edge: The CVS should be relatively stable and
has some fairly intensive code reviewing and bug squashing.  In
particular, the email code is much faster.

Regards

Andrew Simpson

[Webcollab-announce] WebCollab 1.71 - Karekare

[Andrew S. <and...@pa...>]

I am pleased to announce WebCollab 1.71 - Karekare, which has been
released a few days ago.  This release has been done with the standard
and Unicode versions at the same time.

This is primarily a bugfix release.  A significant number of minor bugs
have been uncovered and reported by various users (Thank you). The
project list homepage and todo lists have been refactored to reduce
database calls by memory caching of results.  This gives better
execution speed and efficiency.  

The calendar has been reworked by Manolis Stamatogiannakis (mstamat) and
is vastly improved.

Five new languages have been added - Swedish, Russian, Hungarian, Korean
and Japanese.  The Japanese language is in UTF-8 character set, while
the Korean language is in EUC-KR character set.  Both these latter
languages are only in in the Unicode version of WebCollab.

The intention is to merge the Unicode version into the standard
WebCollab as later versions of PHP (with multibyte support for Unicode)
and MySQL version 4.1+ (which has Unicode support) become more
mainstream.  At present, these versions are still too new for the
majority of bundled software packages and hosting providers.

Special thanks to contributors and translators that have put together
this release. 

Andrew Simpson

[Webcollab-announce] WebCollab Unicode 1.62 Release

[Andrew S. <and...@pa...>]

Hi all

Pleased to announce the release of WebCollab Unicode 1.62.  This is a
complementary UTF-8 (Unicode) version to match WebCollab 1.62a
(Canopus).

Like most other web-based software, the default WebCollab uses the
ISO-8859-x character set.  This works well for Western European
originated languages, but has two major disadvantages:

 - Each ISO-8859-x character set only works for a narrow set of
languages.  For instance, German and Bulgarian use ISO-8859-1 and
IS0-8859-5 respectively, and cannot be mixed.
   
 - Other languages (not originating in Western Europe) have varying
support. 

This package uses the Unicode (UTF-8) character set, which natively
supports over 650
languages, and as such is a 'universal' character set.

The intention is to eventually merge this package into the mainstream
WebCollab source.  However, at present UTF-8 requires very recent
databases (MySQL 4.1) and optional libraries in PHP (mb_strings).

For the mainstream WebCollab: The CVS is currently stabilising towards a
version 1.70 release.  Most translation files will need updating in due
course.

Regards

Andrew Simpson

[Webcollab-announce] WebCollab-1.62 (Canopus) released

[Andrew S. <and...@pa...>]

Hi all,

I am pleased to announce WebCollab-1.62 (Canopus) has been released. 
This release picks up minor bugs that have been found, updates the
Italian translation and provides timezone settings.  Essentially it is a
bugfix and maintenance release. 

Andrew Simpson

[Webcollab-announce] WebCollab 1.61 - Celmisia

[Andrew S. <and...@pa...>]

I am pleased to announce WebCollab 1.61 - Celmisia, which has been
released a few days ago.

Essentially this is a bugfix release for the WebCollab 1.60 of a few
weeks ago, which was a bit more buggy than I would have wished - despite
some rigorous pre-release testing.

Various minor bugs have been fixed, including a bug that prevented
PostgreSQL databases being created properly. The code now produces valid
XHTML 1.0 Strict, and should render in standards mode in all
contemporary browsers.

This maintenance release puts the current version significantly ahead of
the very successful 1.51 Hebe version in terms of functionality, 
scalability and execution efficiency.  

Andrew Simpson

[Webcollab-announce] WebCollab 1.60a - Neptune

[Andrew S. <and...@pa...>]

I am pleased to announce the release of WebCollab 1.60a (Neptune)
available immediately.  This is the first stable release in six months
and is the result of some intensive development work.

Also available is Unicode add-ons to enable the use of UTF-8 character
sets.  This is being provided as an add-on, since MySQL does fully not
support Unicode in a stable release.  MySQL 4.1, presently in alpha
release, will support Unicode.  PostgreSQL does support Unicode and is
recommended.

An annotated changelog of changes since 1.51 (Hebe) follows:
 
 - added clone function to replicate projects (admin only)
 
 - added email notification for forum posts and file uploads
 
 - added private users and private usergroups
 
 - added 'view only active' toggle to project list page
 
 - added 'printer friendly' toggle to project/task listing pages
 
 - added javascript date checking and missing field validation
 
 - added Bulgarian and Danish languages 
 
 - review and upgrade security to a better implemented
model-view-controller approach
 
 - add login timeouts to enhance dictionary attack protection
 
 - add optional prefix to database table names (Feature Request 975181)
 
 - sub-directories now protected with .htaccess for better security 
 
 - input text validation procedures improved (again!)
 
 - usability improvements
 
 - upgrade to valid XHTML
 
 - change CSS to give more readable links 
 
 - major code speed-ups by reducing database calls and refactoring
 
 - bugfixes!