[cosmo-dev] Chandler Server (Cosmo) 0.13.0 released

[Randy Letness]

The Chandler Project is pleased to announce the 0.13.0 release of 
Chandler Server (Cosmo)!

Chandler Server is a server and Ajax web UI for managing and sharing 
calendars, events, and tasks. It implements open data standards 
including CalDAV, WebDAV, Atom, and Atompub.

This release includes a major security fix as well as a small amount of 
minor bug fixes. The focus for this release was to fix the security hole 
present in prior versions that allowed users to gain write access to 
items without a read-write ticket. Part of this fix required changes to 
the desktop client, so upgrading the server to 0.13.0 will require 
upgrading Chandler Desktop to 0.7.5 in order to support certain features 
(sharing items in multiple collections). It is strongly recommended that 
the desktop client be upgraded to 0.7.5 when upgrading the server to 
0.13.0. Chandler Desktop can be downloaded here: 
http://chandlerproject.org/Projects/DownloadChandlerDesktop

Chandler Server 0.13.0 is available for download as a ready-to-run 
bundle at:

http://chandlerproject.org/serverdownload

and the source code is available from subversion at:

http://svn.osafoundation.org/server/cosmo/tags/rel_0.13.0

Send us feedback at the open mailing list (no subscription required):

chandler-users at osafoundation.org

We look forward to hearing from you!

The bugs fixed in this release include:

#11867 fix items in multiple collections security hole
#11794 support for PostgreSQL in migration tool
#10814 Can’t update an item that isn’t owned by user from webui
#11779 changing calendar selection while looking at future weeks resets 
view to this week without grabbing this week’s elements
#11797 Chandler requires JVM properties to be set
#11641 HCalendarParser broken when ical4j.relaxed.parsing is set
#11863 updating item using DAV results in owner always being set
#11931 Can’t access account browser for any of my collections
#11909 hibernate session not getting flushed after optimistic locking 
failures

There was a minor change to the database schema for Chandler Server in 
version 0.13.0. Instructions for upgrading from previous versions of 
Chandler Server can be found at: 
<http://chandlerproject.org/Developers/ServerBundleInstallation#Upgrading%20from%20previous%20versions> 
Please remember to backup your database before attempting migration!