The icalendar team is pleased to announce that icalendar 7.2.1 and 7.2.2 have been released.
7.2.1 is a security fix.
Fixed GHSA-qjcq-q7h7-r74v: (Denial of service via unbounded VALARM REPEAT expansion · Advisory · collective/icalendar · GitHub) a crafted REPEAT on a VALARM could exhaust memory or CPU via Alarm.triggers and Alarms. Expansion is now capped at icalendar.config.MAX_ALARM_REPEAT. Its default is 10000. Set to -1 to disable the cap. vInt now also enforces the RFC 5545 signed 32-bit integer range on parse.
7.2.2 fixed duplicate vInt.min and vInt.max descriptions in the API reference that caused the documentation build to fail.
For the complete change log, visit:
Support icalendar
This release was made possible through the community built with the support from a NGI Zero Core grant from the NLnet Foundation as part of a larger project to develop the Open Web Calendar stack.
Funding development helps create a responsive community around the Python calendaring ecosystem.
As free and open source software, icalendar thrives and grows only when it receives support from you. You can help icalendar keep up-to-date with your platform and continue to use it in your applications in many ways.
- Make a one-time or recurring financial contribution through OpenCollective at https://opencollective.com/python-icalendar.
- Report security issues per https://github.com/collective/icalendar/blob/main/SECURITY.md.
- Report all other issues in the issue tracker.
- Comment on and resolve issues.
- Review and triage pull requests.
- Submit pull requests from your fork of the icalendar repository.
- Extend the documentation.
Join the icalendar community
The maintainer of icalendar, Nicco Kunzmann (GitHub: @niccokunzmann), gratefully appreciates the contributions for this release. See the list of contributors.
By fostering a warm and welcoming community around free and open source software, icalendar attracts both experienced and first-time contributors to participate. See how to contribute.
Additional references
Documentation
Change log
Upgrade guide
PyPI
Issues
Discussions
Mastodon