Indico

Latest version: v3.3.6

Safety actively analyzes 723650 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 8 of 11

2.2.2

Not secure
-------------

*Released on August 23, 2019*

Bugfixes
^^^^^^^^

- Remove dependency on ``pyatom``, which has vanished from PyPI

2.2.1

Not secure
-------------

*Released on August 16, 2019*

Improvements
^^^^^^^^^^^^

- Make list of event room bookings sortable (:issue:`4022`)
- Log when a booking is split during editing (:issue:`4031`)
- Improve "Book" button in multi-day events (:issue:`4021`)

Bugfixes
^^^^^^^^

- Add missing slash to the ``template_prefix`` of the ``designer`` module
- Always use HH:MM time format in book-from-event link
- Fix timetable theme when set to "indico weeks view" before 2.2 (:issue:`4027`)
- Avoid flickering of booking edit details tooltip
- Fix outdated browser check on iOS (:issue:`4033`)

2.2

Not secure
-----------

*Released on August 06, 2019*

Major Changes
^^^^^^^^^^^^^

- ⚠️ **Drop support for Internet Explorer 11 and other outdated or
discontinued browser versions.** Indico shows a warning message
when accessed using such a browser. The latest list of supported
browsers can be found `in the README on GitHub <https://github.com/indico/indico#browser-support>`__,
but generally Indico now supports the last two versions of each major
browser (determined at release time), plus the current Firefox ESR.
- Rewrite the room booking frontend to be more straightforward and
user-friendly. Check `our blog for details <https://getindico.io/indico/update/release/milestone/2019/02/22/indico-2-2-news.html>`__.

Improvements
^^^^^^^^^^^^

- Rework the event log viewer to be more responsive and not freeze the
whole browser when there are thousands of log entries
- Add shortcut to next upcoming event in a category (:issue:`3388`)
- Make registration period display less confusing (:issue:`3359`)
- Add edit button to custom conference pages (:issue:`3284`)
- Support markdown in survey questions (:issue:`3366`)
- Improve event list in case of long event titles (:issue:`3607`,
thanks :user:`nop33`)
- Include event page title in the page's ``<title>`` (:issue:`3285`,
thanks :user:`bpedersen2`)
- Add option to include subcategories in upcoming events (:issue:`3449`)
- Allow event managers to override the name format used in the event
(:issue:`2455`)
- Add option to not clone venue/room of an event
- Show territory/country next to the language name (:issue:`3968`)
- Add more sorting options to book of abstracts (:issue:`3429`, thanks
:user:`bpedersen2`)
- Add more formatting options to book of abstracts (:issue:`3335`, thanks
:user:`bpedersen2`)
- Improve message when the call for abstracts is scheduled to open but
hasn't started yet
- Make link color handling for LaTeX pdfs configurable (:issue:`3283`,
thanks :user:`bpedersen2`)
- Preserve displayed order in contribution exports that do not apply
any specific sorting (:issue:`4005`)
- Add author list button to list of papers (:issue:`3978`)

Bugfixes
^^^^^^^^

- Fix incorrect order of session blocks inside timetable (:issue:`2999`)
- Add missing email validation to contribution CSV import (:issue:`3568`,
thanks :user:`Kush22`)
- Do not show border after last item in badge designer toolbar
(:issue:`3607`, thanks :user:`nop33`)
- Correctly align centered footer links (:issue:`3599`, thanks :user:`nop33`)
- Fix top/right alignment of session bar in event display view (:issue:`3599`,
thanks :user:`nop33`)
- Fix error when trying to create a user with a mixed-case email
address in the admin area
- Fix event import if a user in the exported data has multiple email
addresses and they match different users
- Fix paper reviewers getting notifications even if their type of reviewing
has been disabled (:issue:`3852`)
- Correctly handle merging users in the paper reviewing module (:issue:`3895`)
- Show correct number of registrations in management area (:issue:`3935`)
- Fix sorting book of abstracts by board number (:issue:`3429`, thanks
:user:`bpedersen2`)
- Enforce survey submission limit (:issue:`3256`)
- Do not show "Mark as paid" button and checkout link while a transaction
is pending (:issue:`3361`, thanks :user:`driehle`)
- Fix 404 error on custom conference pages that do not have any ascii chars
in the title (:issue:`3998`)
- Do not show pending registrants in public participant lists (:issue:`4017`)

Internal Changes
^^^^^^^^^^^^^^^^

- Use webpack to build static assets
- Add React+Redux for new frontend modules
- Enable modern ES201x features


----

2.1.11

Not secure
--------------

*Released on October 16, 2019*

Security fixes
^^^^^^^^^^^^^^

- Fix more places where LaTeX input was not correctly sanitized. While the biggest
security impact (reading local files) has already been mitigated when fixing the
initial vulnerability in the previous release, it is still strongly recommended
to update.

2.1.10

Not secure
--------------

*Released on October 08, 2019*

Security fixes
^^^^^^^^^^^^^^

- Strip `, ``+``, ``-`` and ``=`` from the beginning of strings when exporting
CSV files to avoid `security issues <https://www.owasp.org/index.php/CSV_Injection>`__
when opening the CSV file in Excel
- Use 027 instead of 000 umask when temporarily changing it to get the current umask
- Fix LaTeX sanitization to prevent malicious users from running unsafe LaTeX commands
through specially crafted abstracts or contribution descriptions, which could lead to
the disclosure of local file contents

2.1.9

Not secure
-------------

*Released on August 26, 2019*

Bugfixes
^^^^^^^^

- Fix bug in calendar view, due to timezones (:issue:`3903`)
- Remove dependency on ``pyatom``, which has vanished from PyPI (:issue:`4045`)

Page 8 of 11

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.