/[smeserver]/cdrom.image/sme10/README.txt

Diff of /cdrom.image/sme10/README.txt

Parent Directory | Revision Log | View Revision Graph Revision Graph | View Patch Patch

-Revision 1.1 by unnilennium,
Wed May 18 11:10:40 2016 UTC
+Revision 1.4 by jpp,
Fri Dec 28 03:33:50 2018 UTC
 Line 1
- Koozali SME Server 10.alpha1  Release Notes
+ Koozali SME Server 10 Alpha 4 Release Notes
- ===========================================
+ =====================================
-May 2016
- The Koozali SME Server (SME Server) development team is pleased to announce
+ These are draft only and are in a constat state of update.
- the release of SME Server 10.apha1 which is based on CentOS 7.2.1511
- SME 10.alpha1 incorporates the very first packages for the 10 version
+Dec 2018
- TEST PURPOSE ONLY. DO NOT USE ON PRODUCTION SERVER !
+ The Koozali SME Server development team is pleased to announce the
+ release of SME Server 10 Alpha 4 which will be the next major release of
+ SME Server.
- CentOS 7.# has an EOL of 30 June 2024.
+ This release is based on CentOS 7. CentOS 7.# has an EOL of 30 June 2024.
+ ***************************
+ Koozali SME Server users should not upgrade production servers to this
+ release but those who can are encouraged to load the alpha to a
+ dedicated test machine and take part in the testing phase.
+ ***************************
+ Some notes on Koozali SME Server 10 can be found at
+ https://wiki.contribs.org/SME_Server_10.0_Development
+ SME10 Roadmap - Alpha 4
+ https://wiki.contribs.org/SME10_Roadmap#SME_10_Alpha_4
  Bug reports and reports of potential bugs should be raised in the bug
  tracker (and only there, please);
-     http://bugs.contribs.org/
+      https://bugs.koozali.org/
  Download
  ========
  You can download SME Server 10 from
- http://mirror.contribs.org/smeserver/releases/testing/10/
+ https://mirror.koozali.org/smeserver/releases/testing/10/
- or for other methods see http://wiki.contribs.org/SME_Server:Download
+ or for other methods see https://wiki.koozali.org/SME_Server:Download
  Please note it may take up to 48 hours for mirrors to finish syncing,
  during this time you may experience problems.
-Line 40 
 meeting our expenses, such as hosting co
+Line 52 
 meeting our expenses, such as hosting co
  As such, we ask for a donation to offset costs and fund further development.
- a) If you are a school, a church, a non-profit organisation or an individual
+ a) If you are a school, a church, a non-profit organisation or an
- using SME Server for private purposes, we would appreciate you to contribute
+ individual using SME Server for private purposes, we would appreciate
- within your means toward the costs associated with hosting, maintenance and
+ you to contribute within your means toward the costs associated with
- development.
+ hosting, maintenance and development.
- b) If you are a company or an integrator and you are deploying SME Server in
+ b) If you are a company or an integrator and you are deploying SME
- the course of your work to generate revenue, we expect you to make a donation
+ Server in the course of your work to generate revenue, we expect you to
- commensurate with the level of revenue you generate and the number of servers
+ make a donation commensurate with the level of revenue you generate and
- your have in the field. Please, help the project
+ the number of servers your have in the field. Please, help the project
- Please visit http://wiki.contribs.org/Donate to donate.
+ Please visit https://wiki.koozali.org/Donate to donate.
  Koozali Inc is happy to supply an invoice for any donations received,
- simply email treasurer@koozali.org
+ simply email treasurer at koozali.org
  Notes
  =====
- In-place upgrades are not supported. It is necessary to backup and then restore.
+ In-place upgrades are not supported. It is necessary to backup and then
- /boot partition is always RAID 1.
+ restore.
+ (Remember, testing purpose only)
  The spare handling for RAID arrays is not implemented.
  USB installs are now supported, see:
- http://wiki.contribs.org/Install_From_USB#SME_Server_9
+ https://wiki.koozali.org/Install_From_USB
- Minimal changes have been made from SME9.1rc1
+ Current installer is still branded CentOS. A kickstart script allows you
+ to go through the graphical installation process. If your disk is not
+ empty, you will need to use the Anaconda interface to format it and
+ partition it. If it is empty all is automatic. You will have to set your
+ root password twice: once during Anaconda installation (you could use a
+ lame password), a second time in the Koozali SME server configuration
+ process.
  Major changes in this release
  =============================
+ This release is based on CentOS 7.#
  Changes in this release
  =======================
+ see above and below
  General features
  ================
- - Based on CentOS 7.2.1511 and all available updates
+ - Based on CentOS 7.6.1810 and all available updates
+ Detailed changes in this release
+ =======================
+ Only the changes since SME Server 10 Alpha3 are listed, mainly
+ autogenerated from the changelogs.
+ Packages altered by Centos, Redhat, and Fedora-associated developers are
+ not included.
+ Backups
+ # e-smith-backup updated from 2.6.0-11.el7.sme to 2.6.0-12.el7.sme
+ - added patch for workstation backup lock [SME: 9127]
+ - code from Stefano Zamboni <zamboni@mind-at-work.it>
+ File Server
+ # e-smith-samba updated from 2.6.0-6.el7.sme to 2.6.0-7.el7.sme
+ - fix typo in  /server-resources/regedit/win10samba.reg  [SME: 10515]
+ # samba updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-common updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-common-tools updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-python updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-client-libs updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-client updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-winbind-krb5-locator updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-libs updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-dc updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-winbind-modules updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-dc-libs updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-winbind-clients updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # libwbclient updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-common-libs updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # libsmbclient updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ # samba-winbind updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
+ - import 4.6.2-12 [SME: 10429]
+ - change gnutls-devel >= 3.4.7 to gnutls-devel to allow build
+ - import to SME the two last upstream releases [SME: 10326]
+ - resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275
+ - resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163
+ - resolves: #1484423 - Require at least krb5 version 1.15.1
+ - resolves: #1484713 - Fix password changes for users via smbpasswd
+ - resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO
+                        returned errors
+ - resolves: #1481188 - Fix 'net ads changetrustpw'
+ - resolves: #1459936 - Fix regression with "follow symlinks = no"
+ - resolves: #1461336 - Fix smbclient username parsing
+ - resolves: #1460937 - Fix username normalization with winbind
+ - resolves: #1459179 - Fix smbclient session setup printing
+ - related: #1277999 - Add missing patchset
+ - resolves: #1431986 - Fix expand_msdfs VFS module
+ LDAP
+ Localisation
+ # smeserver-locale updated from 2.6.0-9.el7.sme to 2.6.0-11.el7.sme
+ - apply locale 2018-12-14 patch
+ - apply locale 2017-12-02 patch
+ Mail Server
+ # clamav updated from 0.99.2-1.el7.sme to 0.100.2-1.el7.sme
+ - Update to 0.100.2 [SME: 10578]
+ # e-smith-pop3 updated from 2.6.0-2.el7.sme to 2.6.0-3.el7.sme
+ - fix undefined fqdn for pop3 [SME: 10257]
+ # qpsmtpd updated from 0.96-18.el7.sme to 0.96-19.el7.sme
+ - add support to force spamcheck on specific IP for fetchmail [SME: 10290]
+ # smeserver-qpsmtpd updated from 2.6.0-30.el7.sme to 2.6.0-32.el7.sme
+ - add forcespamcheck support for fetchmail [SME: 10290]
+ - Log DMARC reporting in syslog instead of sending email to the admin.
+   Also suppress SSL connection failed warnings [SME: 10298]
+ # djbdns updated from 1.05-8.el7.sme to 1.05-10.el7.sme
+ - improve short ttl cname resolution and glueless answer from akadns [SME: 8362]
+ - 500-cutom-dnscache-maxloop.patch: increase QUERY_MAXLEVEL 5->10 , set  QUERY_MAXLOOP 160
+ --import patches from openwrt and rename already applied patches
+ --fix security issues [SME: 10374]
+ - 020-dnsroots-update.patch: update list of root DNS servers
+ - 070-dnscache-dpos-tcp-servfail.patch: SERVFAIL rename previous patch dns_transmit-bug.patch
+ - 080-dnscache-cache-negatives.patch: rfc2308 ?
+ - 210-dnscache-strict-forwardonly.patch: rename previous patch dnscache-strict-forwardonly.patch
+ - 240-tinydns-alias-chain-truncation.patch: rename previous patch tinydns-alias-chain-truncation.patch
+ - 270-dnscache-sigpipe-fix.patch: SIGPIPE
+ - 300-bugfix-dnscache-dempsky-poison.patch: CVE-2009-0858
+ - 310-bugfix-dnscache-merge-outgoing-requests.patch: CVE-2008-4392
+ - 320-bugfix-dnscache-cache-soa-records.patch: CVE-2008-4392
+ - 450-dnscache-ghost-domain-CVE-2012-1191.patch: CVE-2012-1191 http://marc.info/?l=djbdns&m=134190748729079&w=2
+ --bug fixes [SME: 10374]
+ - 060-dnscache-big-udp-packets.patch: accept and handle longer than 512 bytes UDP packets
+ - 230-tinydns-data-semantic-error.patch: handle semantic error to avoid publishing false dns records
+ --fix issue with short ttl cname like akamaid [SME: 8362]
+ - 200-dnscache-cname-handling.patch: rename previous patch dnscache-cname-handling.patch
+ - 330-fix-dnscache-cname-handling.patch: fix dnscache cname for short ttl
+ - 500-cutom-dnscache-maxloop.patch: set max loop to 200
+ --needed for previous patches to apply cleanly
+ - 030-srv-records-and-axfrget.patch: add SRV record type and axfr-get decompose SRC and PTR records (for 230-*.patch)
+ - 050-tinydns-mmap-leak.patch: report cdb leak
+ - 080-dnscache-cache-negatives.patch: rfc2308 ?
+ - 090-tinydns-one-second.patch: improve tinydns with 8 or more  concurent connections (for 240-*.patch)
+ - 120-compiler-temporary-filename.patch: change tmp filename to avoid conflicts (for 230-*.patch)
+ # smeserver-spamassassin updated from 2.6.0-7.el7.sme to 2.6.0-8.el7.sme
+ - disable auto_learn by default when enabling Bayes [SME: 8160]
+ - added properties UseBayesAutoLearn, BayesAutoLearnThresholdSpam and BayesAutoLearnThresholdNonSpam
+ # e-smith-qmail updated from 2.6.0-3.el7.sme to 2.6.0-4.el7.sme
+ - Update aliases files for every groups passed as argument [SME: 10386]
+ Server manager
+ php
+ - load openssl configuration file on startup #1408301
+ - gd: fix buffer over-read into uninitialized memory CVE-2017-7890
+ - fix php should provide php(httpd) #1215429
+ - fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010
+ default value is "yes", preserving previous behaviour
+ - openssl: fix default_socket_timeout does not work with SSL #1378196
+ - gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167
+ - gd: Signed Integer Overflow gd_io.c CVE-2016-10168
+ Webmail and Groupware
+ Web Server
+ Other fixes and updates
+ # e-smith-base updated from 5.8.0-35.el7.sme to 5.8.0-38.el7.sme
+ - icleaning xinetd.conf fragment out of the package [SME: 10219]
+ - revert previous change - wrong package
+ - added post transaction rule for ntp [SME: 10190]
+ - thank you to Stefano Zamboni for this work
+ # smeserver-yum updated from 2.6.0-16.el7.sme to 2.6.0-17.el7.sme
+ - add yum-plugin-post-transaction-actions as requirement [SME: 1100]
+ # e-smith-devtools updated from 2.6.0-6.el7.sme to 2.6.0-7.el7.sme
+ - ease update of e-smith-devtools on non SME builders [SME: 10536]
+ # smeserver-support updated from 2.8.0-12.el7.sme to 2.8.0-15.el7.sme
+ - exclude libtevent,python-tevent from base and updates to avoid conflict with localy build version of samba [SME: 10573]
+ - add back perl(LWP::Protocol::https) support  [SME: 10516]
+ - upstream samba packages were not all excluded [SME: 10428]
+ # e-smith-ntp updated from 2.6.0-3.el7.sme to 2.6.0-4.el7.sme
+ - added post transaction rule for ntp [SME: 10190]
+ - thank you to Stefano Zamboni for this work
+ # e-smith-lib updated from 2.6.0-6.el7.sme to 2.6.0-7.el7.sme
+ - Skip tap_soft interfaces (eg SoftEther, code from Hsing-Foo Wang)
+   [SME: 10445]
- On behalf of the SME Server development team
+ On behalf of the Koozali SME Server development team

 Legend:



Removed lines/characters
 


Changed lines/characters


 
Added lines/characters
 Legend:



Removed lines/characters
 


Changed lines/characters


 
Added lines/characters
-Removed lines/characters
+Added lines/characters

admin@koozali.org	ViewVC Help
Powered by ViewVC 1.2.1