Recently a spammer exploited a security hole in the version of Horde we run for UMS web mail. The hole allowed them to forge the From: line. The version of Horde we run (1.0.8) was released last Fall and is no longer considered a supported version and there have been a number of security fixes made to Horde since then. This means that to bring Horde up to date with known security fixes we need to upgrade to a new level. For this reason, we are upgrading to Horde-Webmail 1.1.6. Normally we run both new and old versions in parallel for a period of time to shake out any bugs in the new version. Unfortunately, the changes between these versions are large enough that we cannot make them use the same database. Since this new version fixes known security issues, we need to get it in place as soon as possible. Horde will be upgraded this coming Sunday morning (November 1st). Most of the changes are internal or cosmetic and will hopefully not cause problems for our users. Also note that since this is UMS Horde webmail, it does not affect students or retirees since they have all been moved to Google mail or anyone who uses a mail client like Thunderbird, Pegasus, Eudora or Outlook. So that you can take a look at this new version ahead of time, we have it running with a converted COPY of the Horde database: https://mail1.maine.edu/horde-webmail-1.1.6 Please note: Any changes you make to Calendar, Notes, Filters, Tasks, preferences, etc using this new version prior to Sunday morning. will be lost when we re-copy and convert the database Sunday morning. -- Irelann Kerry Anderson phone: (207)561-3508 Systems and Operations Information Technology Services University of Maine System 5752 Neville Hall Orono, Maine 04469-5752