Chandler Desktop 0.7.5 is available for download for Windows, Mac, and Linux at:

http://chandlerproject.org/download

Chandler Server is a server and Ajax web UI for managing and sharing calendars, events, and tasks. It implements open data standards including CalDAV, WebDAV, Atom, and Atompub.

This release includes a major security fix as well as a small amount of minor bug fixes. The focus for this release was to fix the security hole present in prior versions that allowed users to gain write access to items without a read-write ticket. Part of this fix required changes to the desktop client, so upgrading the server to 0.13.0 will require upgrading Chandler Desktop to 0.7.5 in order to support certain features (sharing items in multiple collections). It is strongly recommended that the desktop client be upgraded to 0.7.5 when upgrading the server to 0.13.0. Chandler Desktop can be downloaded here: http://chandlerproject.org/Projects/DownloadChandlerDesktop

Chandler Server 0.13.0 is available for download as a ready-to-run bundle at:

http://chandlerproject.org/serverdownload

and the source code is available from subversion at:

http://svn.osafoundation.org/server/cosmo/tags/rel_0.13.0

Send us feedback at the open mailing list (no subscription required):

chandler-users@osafoundation.org

We look forward to hearing from you!

The bugs fixed in this release include:

• #11867 fix items in multiple collections security hole
• #11794 support for PostgreSQL in migration tool
• #10814 Can’t update an item that isn’t owned by user from webui
• #11779 changing calendar selection while looking at future weeks resets view to this week without grabbing this week’s elements
• #11797 Chandler requires JVM properties to be set
• #11641 HCalendarParser broken when ical4j.relaxed.parsing is set
• #11863 updating item using DAV results in owner always being set
• #11931 Can’t access account browser for any of my collections
• #11909 hibernate session not getting flushed after optimistic locking failures

There was a minor change to the database schema for Chandler Server in version 0.13.0. Instructions for upgrading from previous versions of Chandler Server can be found at: <http://chandlerproject.org/Developers/ServerBundleInstallation#Upgrading%20from%20previous%20versions> Please remember to backup your database before attempting migration!