Radicale

Communication & Email

Small but powerful CalDAV and CardDAV server for calendars, contacts, and to-do lists

Track releases GitHub Website

Python Latest v3.7.4 · 6d ago Security brief →

Features

Shares calendars and contact lists through CalDAV, CardDAV and HTTP
Supports events, todos, journal entries and business cards
Works out-of-the-box with no complicated setup or configuration
Authenticates access and secures connections with TLS
Stores all data on the file system in a simple folder structure
Extensible with plugins

Recent releases

View all 7 releases →

No immediate action

v3.7.4 Mixed 6d

Dark theme + sharing improvements

Open

No immediate action

v3.7.3 Feature 20d

Conditional logging

Open

v3.7.2 Mixed 1mo

Notable features

validate_user_value/validate_path_value options to block unwanted values
Sharing now supports unicode

Full changelog

Fixes

Fix: sharing/csv: quote handling and honor stock encoding
Fix: broken storage/mtime granularity detection on vfat

Improvements

Improve: path_to_filesystem() by pre-detection of collision-free file system
Improve: [auth] catch bcrypt>=5.0.0 enforced max password length early and support legacy "passlib" as well as "libpass" (rework 3.6.0, "packaging" not needed anymore)
Improve: application will stop on startup if TEMP is provided but not existing or not writable
Improve: sharing supports now unicode
Improve: WebUI (general and relating to sharing)

Adjustments

Adjustment: MKCOL/MKCALENDAR return now CONFLICT instead of BADREQUEST of file name collision
Adjust: several log levels incl. final result depending on status code
Adjust: respond with 500 in case principal collection cannot be created (e.g. filesystem issues)

Extensions

Extension: tox with new optional test cases to test with LinuxOS vfat, hfsplus, ntfs filesystems
Extension: sharing: add ICAL:calendar-order to property overlay whitelist
Extension: extend hook data with 'actor' to keep original 'user' before mapping a share

New

Add: [server] new options validate_user_value/validate_path_value for ability to block unwanted values (autoenable "strict" on non-unicode filesystem)

View release on GitHub

v3.7.1 Bug fix 1mo

Fixes sharing permissions, propfind/proppatch, path_to_filesystem softlink handling, and email hook support

View release on GitHub

v3.7.0 New feature 1mo

Added collection sharing via map or token and address-book birthday calendar, extended OAuth2 client config, improved performance and WebUI security, and deprecated LDAP SSL option.

View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.