/[smeserver]/cdrom.image/sme10/README.txt

Diff of /cdrom.image/sme10/README.txt

Parent Directory | Revision Log | View Revision Graph Revision Graph | View Patch Patch

-Revision 1.3 by unnilennium,
Wed May 31 17:52:31 2017 UTC
+Revision 1.10 by jpp,
Mon Mar 22 04:57:48 2021 UTC
 Line 1
- Koozali SME Server 10 Alpha 2 Release
+ Koozali SME Server 10 Release Candidate 1 Release Notes "Justine"
- =====================================
+ ============================================
+ These are draft only and are in a constant state of update.
-May 2017
+Mar 2021
- The Koozali SME Server development team is pleased to announce the release of
- SME Server 10 Alpha 3 which will be the next major release of SME Server.
+ The Koozali SME Server development team is pleased to announce the
+ release of SME Server 10 RC 1 which will be the next major release of
- This release is based on CentOS 7. CentOS 7.# has an EOL of 30 June 2024.
+ SME Server. Code named "Justine"
- ***************************
+ This release is based on CentOS 7. CentOS 7.# has an EOL of 30 June 2024.
- Koozali SME Server users should not upgrade production servers to this release
- but those who can are encouraged to load the alpha to a dedicated test machine
+ **********************************************************
- and take part in the testing phase.
+ Koozali SME Server users should not upgrade production servers to this
- ***************************
+ release but those who can are encouraged to load the release to a
+ dedicated test machine and take part in the testing phase.
- Some notes on Koozali SME Server 10 can be found at
+ **********************************************************
- https://wiki.contribs.org/SME_Server_10.0_Development
+ Some notes on Koozali SME Server 10 can be found at
- Bug reports and reports of potential bugs should be raised in the bug
+ https://wiki.contribs.org/SME_Server_10.0_Development
- tracker (and only there, please);
+ SME10 Roadmap - RC 1
-     https://bugs.koozali.org/
+ https://wiki.contribs.org/SME10_Roadmap#SME_10_RC_1
- Download
+ Bug reports and reports of potential bugs should be raised in the bug
- ========
+ tracker (and only there, please);
- You can download SME Server 10 from
- https://mirror.koozali.org/smeserver/releases/testing/10/
+      https://bugs.koozali.org/
- or for other methods see https://wiki.koozali.org/SME_Server:Download
+ Copy of releaase notes may be found here:
- Please note it may take up to 48 hours for mirrors to finish syncing,
+ https://lists.contribs.org/pipermail/updatesannounce/2021-March/
- during this time you may experience problems.
+ Download
- About SME Server
+ ========
- ================
+ You can download SME Server 10 from
- SME Server is the leading Linux distribution for small and medium
+ https://mirror.koozali.org/smeserver/releases/testing/10/
- enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
+ or for other methods see:
- a non-profit corporation that exists to provide marketing and legal support
+ https://wiki.koozali.org/SME_Server:Download
- for SME Server.
+ Please note it may take up to 48 hours for mirrors to finish syncing,
- SME Server is freely available under the GNU General Public License and
+ during this time you may experience problems.
- is only possible through the efforts of the SME Server community.
+ About SME Server
- However, the availability and quality of SME Server is dependent on
+ ================
- meeting our expenses, such as hosting costs, server hardware, etc.
+ SME Server is the leading Linux distribution for small and medium
+ enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
- As such, we ask for a donation to offset costs and fund further development.
+ a non-profit corporation that exists to provide marketing and legal support
+ for SME Server.
- a) If you are a school, a church, a non-profit organisation or an individual
- using SME Server for private purposes, we would appreciate you to contribute
+ SME Server is freely available under the GNU General Public License and
- within your means toward the costs associated with hosting, maintenance and
+ is only possible through the efforts of the SME Server community.
- development.
+ However, the availability and quality of SME Server is dependent on
- b) If you are a company or an integrator and you are deploying SME Server in
+ meeting our expenses, such as hosting costs, server hardware, etc.
- the course of your work to generate revenue, we expect you to make a donation
- commensurate with the level of revenue you generate and the number of servers
+ As such, we ask for a donation to offset costs and fund further development.
- your have in the field. Please, help the project
+ a) If you are a school, a church, a non-profit organisation or an
- Please visit https://wiki.koozali.org/Donate to donate.
+ individual using SME Server for private purposes, we would appreciate
+ you to contribute within your means toward the costs associated with
- Koozali Inc is happy to supply an invoice for any donations received,
+ hosting, maintenance and development.
- simply email treasurer@koozali.org
+ b) If you are a company or an integrator and you are deploying SME
- Notes
+ Server in the course of your work to generate revenue, we expect you to
- =====
+ make a donation commensurate with the level of revenue you generate and
- In-place upgrades are not supported. It is necessary to backup and then restore.
+ the number of servers your have in the field. Please, help the project
- (Remember, testing purpose only)
+ Please visit https://wiki.koozali.org/Donate to donate.
- The spare handling for RAID arrays is not implemented.
+ Koozali Inc is happy to supply an invoice for any donations received,
- USB installs are now supported, see: https://wiki.koozali.org/Install_From_USB
+ simply email treasurer at koozali.org
- Current installer is still branded CentOS. A kickstart script allows you to go through the graphical installation process. If your disk is not empty, you will need to use the Anaconda interface to format it and partition it. If it is empty all is automatic. You will have to set your root password twice: once during Anaconda installation (you could use a lame password), a second time in the Koozali SME server configuration process.
+ Notes
+ =====
- Major changes in this release
+ In-place upgrades are not supported. It is necessary to backup and then
- =============================
+ restore. (Remember, testing purpose only),
- This release is based on CentOS 7
+ Restore of a sme9 console or workstation backup is now fully supported
- Changes in this release
- =======================
+ Single disk install no longer creates a degraded Raid1 array, Two or more disks
- see above
+ will be created as a Raid1-6 array, see wiki https://wiki.contribs.org/Raid
- General features
+ The spare handling for RAID arrays is now implemented.
- ================
- - Based on CentOS 7.2.1511 and all available updates
+ Support for further Raid configuration on install is now implemented - see wiki
- Detailed changes in this release
+ New Server-Manager Framework, Mojolicious, is now well on the way to full implementation
- =======================
- Only the changes since SME Server 10 Alpha2 are listed, mainly
+ USB installs are once again fully supported,
- autogenerated from the changelogs.
+ Note: it is important to use proposed apps to create the boot media
+ See: https://wiki.koozali.org/Install_From_USB
- Packages altered by Centos, Redhat, and Fedora-associated developers are
- not included.
+ Netinstall is once again fully supported
- General features - Based on CentOS 7.2.1511 and all available updates
+ Install to a system supporting a UEFI BIOS is also now fully supported
- Backups
+ Console backup, and workstation backup to removable storages is now fully supported.
- e-smith-backup
+ A plethora of other under the hood changes, too numerous to list
- - added lock during backup to avoid multiple instance running [SME: 9127]
- - code from Stefano Zamboni <zamboni@mind-at-work.it>
+ The work that has gone into getting SME 10 to this stage has been enormous, an attempt to list
- - added support back to ext2 and ext3 [SME: 9299]
+ and detail the work that has been done in recent months would not do justice to the effort
- - fix removable device detection [SME: 9299]
+ contributed by the following,
- - console restoration can be launched again from console [SME: 9550]
- - fixed bug on the dar catalog when backups are not added in it [SME: 9563]
+ thank you one and all:
- - Added e-smith-backup-2.6.0.bz9563.UpdateDarCatalogFollowingBackups.patch
- - Remove the dar exclusion message in the email if there is no exclusion.
+ Jean Phillipe Pialasse
- - Modified e-smith-backup-2.6.0.Do_Dar_Exclusion.patch [SME: 9633]
+ Michel Begue
- - Added two commented files backup.{include,exclude} in /etc/backup-data.d
+ Brian Read
- - Modified e-smith-backup-2.6.0.Add_Or_Remove_Path_In_Backup.patch [SME: 9607]
+ Catton Durbrow
- - Add or remove path in your backup by a file *.include and *.exclude
+ Chris Sansom-Ninnes
- - Added e-smith-backup-2.6.0.Add_Or_Remove_Path_In_Backup.patch [SME: 9607]
+ Jean-pierre Odion
- - Test if the remote host (cifs/nfs) is up, else save and display a warning.
+ Zsolt Vasarhelyi
- - Added e-smith-backup-2.6.0.bz9090.Testing_the_remote_host_parameters.patch [SME: 9090]
+ John Crisp
- - The 'tar backup to desktop' of the backup panel takes consideration of exclusion
- - Added e-smith-backup-2.6.0.Do_Tar_Exclusion_In_Panel.patch [SME: 9635]
+ there have also been many others who have done what they can, thank you:
- - The 'dar workstation backup' of the backup panel takes consideration of exclusion
- - Added e-smith-backup-2.6.0.Do_Dar_Exclusion.patch [SME: 9633]
+ The changes that have been implemented to ensure the Koozali Sme Server way is fully implemented
- - The 'tar backup' of the console takes consideration of exclusion and display a page with the exclusion content
+ have been far reaching, far to many to try and list, suffice to say long live "Justine".
- - e-smith-backup-2.6.0.Do_Tar_Exclusion_In_the_console.patch [SME: 9635]
+ Major changes in this release
- File Server
+ =============================
+ This release is based on CentOS 7.#
- e-smith-proftpd
- - fix typos [SME: 6804]
+ Changes in this release
- - set default as required
+ =======================
- - NB: client must be set as active connection, not passive
+ see above and below, to much to list
- - updated patch for certificate chain
- - Thanks to Daniel Berteaud
+ General features
- - Adding TLS support to proftp configuration [SME: 6804]
+ ================
- - default is enabled but not required, only TLSv1.1 and v1.2
+ - Based on CentOS 7.9.2009 and all available updates
- e-smith-samba
- - fix outlook error code 0x8004011c [SME: 10169]
+ Detailed changes in this release
- - when setting up and email account on a win10 computer joined to a domain (with roaming profiles)
+ =======================
- - add systemd skip redirect [SME: 9688]
+ Only the changes since SME Server 10 Alpha5 are listed, mainly
- - Fix deprecated syntax '~' in rsyslog [SME: 9398]
+ autogenerated from the changelogs.
- - added e-smith-samba-2.6.0.bz9398.DeprecatedRsyslogSyntaxSamba.patch
- proftpd
+ Packages altered by Centos, Redhat, and Fedora-associated developers are
- - AllowChrootSymlinks off could cause login failures depending on filesystem
+ not included.
- permissions: use the IDs of the logging-in user to perform the directory
- walk, looking for symlinks, to be more consistent with similar checks done
+ The changelogs are written per package
- during login (#1443507, upstream bug 4306)
- - Crypt::CrackLib always available now
+ SME built or modified packages - ChangeLogs
- - Update to 1.3.5e
- - SFTP clients using umac-64@openssh.com digest failed to connect
+March 2021
- (upstream bug 4287)
- - SFTP rekeying failure with ProFTPD 1.3.5d, caused by null pointer
+ Backups
- dereference (upstream bug 4288)
+ e-smith-backup
- - AllowChrootSymlinks off did not check entire DefaultRoot path for symlinks
+ - fix dar restore replacing rootdir symlinks by folders [SME: 11424]
- (CVE-2017-7418, upstream bug 4295)
+ - Remove duplicate gunzip call in perform_restore [SME: 11266]
- - Change shellbangs in shipped perl scripts to use system perl
+ - Remove debug output of device names
- - Drop EL-5 support
+ - Revert BlockDevices.pm and backup call to not filter to removable drives
- - Drop BuildRoot: and Group: tags
+ - Replace hal-* calls with BlockDevices [SME: 11319]
- - Drop explicit buildroot cleaning in %install section
+ - add update event [SME: 11124]
- - Drop explicit %clean section
+ - Added /etc/backup-data.d to backup paths [SME: 10245]
- - /etc/pam.d/password-auth always available now
+ - Added error handling to restore using pipe pattern from perform_backup [SME: 3139]
- - pcre 7.0 or later always available now
+ - Made reboot optional after console restore
- - Properly allocate (and clear) the UMAC contexts, to fix segfault in mod_sftp
+ - Fixed bootstrap restore not activating config changes [SME: 10921]
- (#1420365, upstream bug 4287)
+ - Manually added ext2 and ext3 to Block Device file system check where ext4 present
- - Update to 1.3.5d
+ - updated Block Device discovery to fix recovery from console [SME: 8244]
- - Support OpenSSL 1.1.x API (upstream bug 4275)
+ - Credit to Catton Durbrow
- Bug fixes:
- - SSH rekey during authentication can cause issues with clients
+ File Server
- (upstream bug 4254)
+ e-smith-proftpd
- - Recursive SCP uploads of multiple directories not handled properly
+ - cleanup in /etc/rc.d [SME: 9692]
- (upstream bug 4257)
+ - redirect log away from message [SME: 11384]
- - LIST returns different results for file, depending on path syntax
+ - fix circular Conflict with proftpd [SME: 11357]
- (upstream bug 4259)
+ - improve protect from proftpd.service running [SME: 11106]
- - "AuthAliasOnly on" in server config breaks anonymous logins
+ - protect from proftpd.service running in place of ftp.service [SME: 11106]
- (upstream bug 4255)
+ - remove system-preset file from usr [SME: 10958]
- - CapabilitiesEngine directive not honored for <IfUser>/<IfGroup> sections
+ - SSL crt and key to self signed if path does not exist [SME: 11316]
- (upstream bug 4272)
+ - add Requires=runit.service [SME: 11245]
- - Memory leak when mod_facl is used (upstream bug 4278)
+ - execute systemd-reload before service adjust in events [SME: 11228]
- - All FTP logins treated as anonymous logins again (upstream bug 4283,
+ - remove S95reset-unsavedflag [SME: 11229]
- regression in 1.3.5c of upstream bug 3307)
+ - Remove ftp from 'init.d/supervise' [SME: 11106] [SME: 11150]
- - Handle client/server version skew in mod_sql_mysql
+ - Move ftp service to systemd [SME: 11106]
- (https://forums.proftpd.org/smf/index.php?topic=11887.0)
+ - Create e-smith-proftpd-update event [SME: 11150]
- - Fix a possible cause of segfaults in mod_sftp (#1337880, upstream bug 4203)
- - See if we can fix crash in mod_lang
+ e-smith-samba
- - BR: perl-generators for correct dependencies in utils sub-package
+ - clean rsyslog syntax for smbd and nmbd [SME: 11422]
- - Prefer %global over %define
+ - fix noise in message log from nmbd and smbd redirected to dedicated logs [SME: 11349]
+ - allow using user-create-profiledir action with temp or package-update events [SME: 11348]
- LDAP
+ - fix log noise for smb.service [SME: 11157]
+ - add Restart=always [SME: 11118]
- e-smith-ldap
+ - add Restart=always [SME: 11117]
- - Disable SSLv3, but keep the possibility to enable it again [SME: 10108]
+ - migrate nmbd to systemd [SME: 11118]
- - Better default cipher suite, and honor global suite [SME: 10108]
+ - migrate smbd to systemd [SME: 11117]
- - systemd skip redirect [SME: 9688]
+ - create general smb.service service
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - create e-smith-samba-update event [SME: 11157]
+ - Fix mutex locking [SME: 11199]
- Localisation
+ - Fix pid directory [SME: 11198]
+ - Add /etc/krb5.conf as template using templates from smeserver-samba[SME: 11093]
- smeserver-locale
+ - remove win98pwdcache.reg from server-resources [SME: 9060]
- - apply 2017-04-26 translation patch [SME: 10252]
+ - set min server and client protocol SMB2 [SME: 10576]
- - updated donate patch to correct location https://wiki.koozali.org/Donate [SME: 9595]
+ - add check so max always greater than min
- - applied smeserver-locale-2.6.0-locale-2017-03-03
+ - add port 445 if min server protocol is SMB2 or SMB3 [SME: 10963]
- - Added translations smeserver-locale-2.6.0-locale-2016-07-17.patch
- - fix wrongly converted http to https in
- - URL starting with http:// or ftp://
+ Mail Server
- - fix path to documentations (wiki) [SME: 9595]
+ e-smith-email
- - convert all koozali url to https
+ - webmail is only SSL [SME: 11443]
- - change http://www.smeserver.org\donate to https://wiki.koozali.org/donate [SME: 9595]
+ - create -update event [SME: 11133]
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - move smtp-auth-proxy to systemd [SME: 11102]
- - change contribs.org to koozali.org [SME: 9595]
+ - allow creation of pseudonyms with setting of local only [SME: 3802]
- Mail Server
+ smeserver-dovecot
+ - clean rsyslog syntax for dovecot [SME: 11422]
- e-smith-email
+ - add Restart=always [SME: 11101]
- - fix webmail status not displaying correctly in manager [SME: 9594]
+ - fix path for event -update [SME: 11101]
- - More change from smtpd to qpsmtpd in masq templates [SME: 9561]
+ - cleanup /var/service/dovecot [SME: 11101]
- - Replace smtpd with qpsmtpd in smtp-auth-proxy [SME: 9554]
+  -close logger and service from previous runit instance before starting systemd one
- e-smith-pop3
+ - add systemd drop-in expand in bootstrap-console-save, console-save, post-install, post-upgrade [SME: 11101]
- - Honor ConcurrencyLimit and ConcurrencyLimitPerIP prop for pop3 and pop3s
+ - move service to systemd [SME: 11101]
- [SME: 10271]
+ - add imap idle notify interval setting [SME: 10947]
- e-smith-qmail
+ - fix typo in enabling TLSv1.2 as default [SME: 10934]
- - Add possibility to exclude users or members of other groups from group
+ - fix typo in 35ssl template [SME: 10934]
- email address [SME: 9523]
+ - fix typo in createlinks [SME: 10932]
- qmail
+ - revert property names with period in it [SME: 10934]
- - added documentation [SME: 9705]
+ - add property AcceptFullEmail with enabled as default [SME: 9865]
- - added binaries ipmetest et ipmeprint to help configuration
- - add moreip to avoid loop [SME: 9705]
+ smeserver-qpsmtpd
- - patch from Scott Gifford
+ - remove /usr/lib/systemd/system-preset/80-koozali-qpsmtpd.preset [SME: 10958]
- - remove qmail-0.0.0.0.patch as it is included
+ - modify for clamav 0.103.0 [SME: 11210]
- - Consider literal <> as null sender [SME: 9884]
+ - roll up patches
- qpsmtpd
+ - add Requires=runit.service (qpsmtpd & sqpsmtpd) [SME: 11245]
- - Removed Message-Id validation, as it rejects MS account validation email [SME: 10139]
+ - fix service not enabled [SME: 11107]
- - fix whitelist plugin to support helo with naughty rejecting at mail stage [SME: 10112]
+ - remove reset-unsavedflag
- - Validate domains found in uribl with Data::Validate::Domain [SME: 9467]
+ - Move qpsmtpd & sqpsmtpd services to systemd [SME: 11107]
- - Use eval to fetch dkim policies, prevent fatal errors in case of DNS
+ - Create smeserver-qpsmtpd-update event [SME: 11164]
- timeout [SME: 9480]
+ - expand badrcptto_ext when needed [SME: 10638]
- - Remove karma rcpt handling (buggy and doesn't make a lot of sense)
+ - this avoid user, group or pseudonyms for internal purpose to be reachable
- [SME: 9462]
+ - from outside
- qpsmtpd-plugins
+ - minimum Protocol TLSv1.0 [SME: 10460]
- - remove whitelit_soft [SME: 10126]
+ - better ciphers order.
- smeserver-dovecot
- - Better default cipher suite, and honor global suite [SME: 10110]
+ Server manager
- smeserver-qpsmtpd
+ e-smith-formmagick
- - Turn DMARC reporting off by default [SME: 10303]
+ - increase CSRF timeout from 120s to 180s [SME: 10902]
- - update patch smeserver-qpsmtpd-2.6.0-smtpd_to_qpsmtpd.patch [SME: 9478]
+ - added property httpd-admin{csrfTimeout} in second to override
- - Greeting property was still attached to smtpd in a template
+ - added hability to ovarride the Timeout from panel to panel
- - updated regex for RBL and SBL in smeserver-qpsmtpd-2.6.0-change_rbl_sbl_list_separator.patch
+ - add update event [SME: 11136]
- - to take into account list using a subdomain [SME: 10123]
+ - add locale for CSRF [SME: 10626]
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - add CSRF patch [SME: 10626] - thank you to Daniel Berteaud
- - Turn SPF and DMARC rejects off by default [SME: 9664]
- - Fix disabling DMARC reporting [SME: 9206]
+ e-smith-manager
- - Add missing tnef2mime and MaximumDateOffset to qpsmtpd [SME: 9560]
+ - take 2 wrong system mode reported in bugreport [SME: 10448]
- smeserver-spamassassin
+ - fix wrong system mode reported in bugreport [SME: 10448]
- - Rewrite spamd run script to add support for --allow-tell [SME: 10137]
+ - create -update event [SME: 11144]
+ - migrate httpd-admin to systemd [SME: 11110]
- Server manager
+ - removing hardcoded ports [SME: 10967]
+ - Add a FollowSymlinks for user-password in password/cgi-bin (perl-suid) [SME: 9677]
- e-smith-manager
+ - update apache icon path [SME: 9591]
- - add a panel to ease reporting bugs [SME: 8783]
+ - add message to indicate EOL after Jun 30 2024 fix [SME: 10170]
- - Original work from Mats Schuh m.schuh@neckargeo.net
- - fix warning uninitialized value in lc [SME: 10209]
+ perl-CGI-FormMagick
- - fix typo in e-smith-manager-2.8.0-bz10167-emptyback.patch
+ - increase default timeout, allow setting from outside [SME: 10902]
- - avoid internal server error if empty back parameter [SME: 10167]
+ - add timeout [SME: 10626]
- - return user friendly message
+ - update CSRF patch [SME: 10626]
- - fix too short timeout in server-manager [SME: 9921]
+ - add requires perl(Session::Token) [SME: 10626]
- - now 30 min as default instead of 5
+ - fix add CSRF patch [SME: 1723] - thank you to Daniel Berteaud
- - possibility to change this and adapt the default 0.66 of timeout remaining to reset it
- - by default only a session cookie, can activate persistent cookie
+ Webmail and Groupware
- - sha256 as encryption.
+ smeserver-horde
- - fix bad redirection parameter that might reveal session information to remote site [SME: 9924]
+ - clean rsyslog syntax for horde [SME: 11422]
- - added missing template-begin for tkt.css [SME: 9676]
+ - improved php basedir, with filtering of noise for gpg [SME: 10945]
- - Update server-manager to Koozali branding [SME: 9676]
+ - force SSL for horde [SME: 11443]
- - We thanks John Crisp for his wonderful work.
+ - fix horde not honoring switch to php-fpm 5.4 [SME: 11433]
- - change link for donation to koozali.org [SME: 9599]
+ - update mail settings for the php-pool [SME: 11431]
- - Fix syntax for removing Indexes options [SME: 9587]
+ - spamd SpamLearning property migrated to spamassassin SpamLearning [SME: 11376]
- - Remove index option for manager's resources [SME: 9587]
+ - Configuration is not up to date, hash to update [SME: 11308]
- - fix 307 redirection to http when https is used [SME: 8825] [SME: 9583]
+ - fix wrong template path for php55, php56 and php [SME: 11255]
- - update syntaxe for TKT Auth
+ - fix webmail not accessible after enabling from manager [SME: 11233]
- - bump 8 for typo
+ - update rsyslog syntax [SME: 11016]
- - Fix a syntax error in server-manager's logout script [SME: 9527]
+ - move fragment so syntax is similar to message
- e-smith-starterwebsite
+ - remove harcoded ports [SME: 10969]
- - fix can't chownfile index file [SME: 9900]
+ - add gpg to php base dir [SME: 10945]
- perl-CGI-FormMagick
+ - workaround logging noise caused by libsasl [SME: 10943]
- - fix uninitialized value $what_to_make in lc [SME: 10210]
+ - log as admin and not admin@domain for cli tasks [SME: 10910]
- php
+ - fix ingo imap preferences [SME: 10912]
- - bz2: fix improper error handling in bzread() CVE-2016-5399
+ - allow httpd-auth for calendar, tasks access using rpc.php ... [SME: 10908]
- - gd: fix integer overflow in _gd2GetHeader() resulting in
+ - add smeserver-horde-update event [SME: 10909]
- heap overflow CVE-2016-5766
+ - avoid loss of user parameter on Primary Domain change [SME: 1005]
- - gd: fix integer overflow in gdImagePaletteToTrueColor()
+ - this will also avoid the loss of parameter if we log with a different virtualhost
- resulting in heap overflow CVE-2016-5767
+ - horde preference is now stored with the SME username without @domain
- - mbstring: fix double free in _php_mb_regex_ereg_replace_exec
+ - fix bad regex to strip domain [SME: 10224]
- CVE-2016-5768
+ - also we can now force Primary domain to use as default email
- - don't set environmental variable based on user supplied Proxy
+ - we can strip heading string from virtualhost domain to create email
- request header CVE-2016-5385
+ - default identity email will update as long as no other identity is created for the user
- - fix segmentation fault in header_register_callback #1344578
+ - fix typo in php-fpm patch [SME: 10872]
- - curl: add options to enable TLS #1291667
+ - remove php3 references [SME: 10866]
- - mysqli: fix segfault in mysqli_stmt::bind_result() when
+ - remove strict and warning alert from error log [SME: 10823]
- link is closed #1096800
+ - dedicated php-fpm pool for horde [SME: 10872]
- - fpm: fix incorrectly defined SCRIPT_NAME variable when
+ - apply patches from John H. Bennett III [SME: 10717]
- using Apache #1138563
+ - cvs admin -ko on patch1
- - core: fix segfault when a zend_extension is loaded twice #1289457
- - openssl: change default_md algo from MD5 to SHA1 #1073388
- - wddx: fix segfault in php_wddx_serialize_var #1131979
+ Other fixes and updates
- - session: fix segfault in session with rfc1867 #1297179
+ e-smith-base
+ - fix masq failing on initial boot
- Webmail and Groupware
+ - removing weekly cron for ddns update, targeted script has been removed [SME: 11470]
+ - revert e-smith-service file [SME: 9692]
+ - add systemctl wrapper [SME: 11345]
- Web Server
+ - clean rsyslog syntax for dhcpd [SME: 11422]
+ - cleanup /etc/rc.d and /var/service [SME: 9692]
- e-smith-php
+ - remove klogd references [SME: 11363]
- - clean daily session and tmp folders [SME: 9626]
+ - restore part of pptp code and move to generik vpn entry [SME: 11374]
- - updated path for ibays' session and tmp folders to /var/cache
+ - drop dyndns core support [SME: 11415]
- - add tmp folder to ibays [SME: 7011]
+ - fix enabled service not started on reboot [SME: 11355]
- - add session folder to ibays [SME: 9620]
+ - unless a power outage, as long as you reboot, halt or shutdown systemd will
- - change global session folder from /tmp to /var/lib/php/session/ [SME: 139]
+ - be in sync
+ - fix console::startup run twice [SME: 11358 ]
- Other fixes and updates
+ - improve run order in systemd-default [SME: 11356]
+ - fix uninitialized value during post-install [SME: 11350]
- e-smith-base
+ - fix user with rssh shell need to be member of rsshusers group [SME: 9155]
- - Expand route-bond0 when nic bonding is enabled [SME: 10272]
+ - add missing /sbin/e-smith/bootstrap-runlevel7 [SME: 11318]
- - improve regex to catch local [SME: 9724]
+ - fix typo for isolate [SME: 11246]
- - change smtpd to qpsmtpd for default service access [SME: 9478]
+ - separate bootstrap-console from run level service launch [SME: 11318]
- - add translation links for manager to most language variations we support [SME: 11121]
+ - only run isolate if sme-server.target is not active [SME: 11246]
- - prevent restoration from being called on regular and post-upgrade reboot [SME: 9550]
+ - update system-preset usr/lib file [SME: 10958]
- - console restoration can be launched again from console
+ - fix loss of httpd basic auth [SME: 11309]
- - Use ip route syntax to define routes to local network [SME: 10083]
+ - fix services starting when they are in Wants= for sme-server.target and preset disabled [SME: 11247]
- - Allow /32 masks on the external interface, in which case we don't
+ - rewrite of manageRAID.pl and add_drive_to_raid for SME10 [SME: 10918]
- check if the gateway is on the correct network) [SME: 9610]
+ - added gdisk as a dependency to support GPT systems
- - fix config db locale property [SME: 9724]
+ - fix modSSL key crt and keychain files really exist [SME: 11252]
- - adapt e-smith service command to systemd [SME: 9672]
+ - add ldap.init as exception for preset
- - add systemd skip redirect to e-smith-service [SME: 9688]
+ - fix init-accounts [SME: 9642]
- - fix broken link /etc/init.d/supervise/local link [SME: 9687]
+ - validate modSSL key crt and keychain files really exist [SME: 11252]
- - fix mysqld to mariadb [SME: 9438]
+ - if not we use self generated
- - fix missing path to chkconfig [SME: 9641]
+ - drop pptpd support [SME: 11250]
- - Fix deprecated syntax '*' in rsyslog [SME: 9398]
+ - add bash-completion [SME: 11244]
- - Added e-smith-base-5.8.0.bz9398.DeprecatedRsyslogSyntax.patch
+ - improve local service to systemd [SME: 11119]
- - Set the hostname by hostnamectl [SME: 9631]
+ - now run rc.local file as part of the event
- - Stefano Zamboni <zamboni@mind-at-work.it>
+ - move local service to systemd [SME: 11119]
- - fix Lang and keyboard layout configured are not used [SME: 9539]
+ - make it run /etc/rc.d/rc.local
- - Fix display of email forward fields since smtpd entry has been merged
+ - cleaning /var/service/syslog still there
- qpsmtpd [SME: 9552]
+ - workaround drop-in install section ignored by systemctl preset [SME: 11231]
- e-smith-devtools
+ - some cleanup
- - added grub2 directories to ignore list [SME: 10325]
+ - remove S95reset-unsavedflag [SME: 11229]
- - Quote filenames in genfilelist so filenames containing spaces are correctly
+ - add exclusion for lpd [SME: 11006]
- handled [SME: 9750]
+ - execute systemd-reload before service adjust in events [SME: 11228]
- e-smith-grub
+ - fix ExecStart for raidmonitor [SME: 11094]
- - rebuild for file ownership conflict [SME: 10325]
+ - fix permission for /sbin/e-smith/systemd/mdmonitor-pre [SME: 11094]
- - fix edition and consol grub terminal not visible because of koozali logo [SME: 9728]
+ - Don't ask for confirmation to save changes on first install configuration [SME: 11193]
- - enable quota for groups and users with XFS [SME: 10211]
+ - Fix RAID detection regex for disk redundancy screen [SME: 10918]
- - Koozali grub splash screen
+ - add Install part of systemd unit [SME: 11100]
- - Write the full path for the grub Action [SME: 9668]
+ - move dhcpd to systemd [SME: 11100]
- - Added e-smith-grub-2.6.1.bz9668.AddFullPath2GrubAction.patch
+ - get dhcpd log out of message [SME: 2408]
- - New source [SME: 9321]
+ - also configure logrotate for /var/log/dhcpd/dhcpd.log and /var/log/dhcpd/current
- - Adaptation to grub2 [SME: 9321]
+ - reverte previous changes for service2adjust and util.pm [SME: 11177]
- e-smith-hosts
+ - files are owned by e-smith-lib
- - remove reference to smtpd [SME: 9478]
+ - allow more systemctl controls [SME: 11177]
- - fix servicename syslog to rsylog [SME: 9691]
+ - convert unrecognized signals from service2adjust in events for systemd
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - handle unsupervised services the same way supervised were in adjust-services
- by assuming the date is correct and changing the weekday.
+ - make service-status only log when service disabled and not fail it
- - fix mysqld to mariadb [SME: 9438]
+ - add template for /etc/systemd/system-preset/49koozali.preset [SME: 11174]
- e-smith-ibays
+ - this will help systemd integration in enabling and disabling services
- - fix typo thanks to Stephane de Labrusse [SME: 7011]
+ - remove wan link
- - ibay to ibays
+ - move raidmonitor to systemd [SME: 11094]
- - as per comment 2 of bug 0600 instead of 0700 for perms [SME: 9621]
+ - move network service to systemd [SME: 11090]
- - as discussed, moving cache and tmp out of ibay folder [SME: 9105] [SME: 9621]
+ - move wan service to systemd [SME: 11091]
- - creating basedir /var/cache/e-smith/files/ibays for tmp and cache
+ - create e-smith-base-update event [SME: 11012]
- - create tmp folder in ibays when needed [SME: 9105]
+ - create sme-server.target [SME: 10957]
- - create session folder in ibays when needed [SME: 9621]
+ - make sme-server.target default target
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - change default target on signal-event post-upgrade, post-install, e-smith-base-update
- e-smith-lib
+ - requires update or smeserver-php and e-smith-runit
- - remove reference to smtpd in configuration.conf [SME: 9478]
+ - add an executable to check if service is enabled in e-smith db
- - fix console startup display [SME: 9352]
+ - validate submask on remote access panel [SME: 6536]
- - fix service name syslog to rsyslog [SME: 9691]
+ - accept netmask bit and convert it
- - fix mysqld to mariadb [SME: 9438]
+ - validate subnet mask on local network panel [SME: 10974]
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - accept netmask bit and convert it
- - fix esmith::util::serviceControl to manage systemd service [SME: 9660]
+ - remove info.txt [SME: 9590]
- - Added e-smith-lib-2.6.0.bz9660.serviceControlSystemd.patch
- e-smith-mysql
+ e-smith-dnscache
- - systemd skip redirect [SME: 9688]
+ - cleanup in /etc/rc.d/ [SME: 9692]
- - Corrected a typo in e-smith-mysql-2.6.0.bz9671.RemoveDummyMysqlDatabase.patch
+ - remove /usr/lib/systemd/system-preset/80-koozali-dnscache.preset [SME: 10958]
- - [SME: 9671]
+ - add Requires=runit.service (dnscache & dnscache.forwarder) [SME: 11245]
- - fix broken link /etc/init.d/supervise/mariadb [SME: 9686]
+ - execute systemd-reload before service adjust in events [SME: 11228]
- - Remove Dummy database from backup and restoration [SME: 9671]
+ - remove S95reset-unsavedflag [SME: 11229]
- - Added e-smith-mysql-2.6.0.bz9671.RemoveDummyMysqlDatabase.patch
+ - remove createlink safesymlink in /etc/rc.d/init.d [SME: 11097]
- - fix forgotten mysqld variables in various scripts [SME: 9438]
+ - remove rc7.d link [SME: 11097]
- - e-smith-mysql-2.6.0-mariadb_forgotten_var.patch
+ - fix actions in e-smith-tinydns-update [SME: 11127]
- e-smith-ntp
+ - Move dnscache, dnscache.forwarder services to systemd [SME: 11097]
- - fix wrong link to restart rsyslog [SME: 9690]
+ - Create e-smith-dnscache-update event [SME: 11127]
- e-smith-proxy
+ - Modify run script to allow for loopback commmunications with other DNS
- - fix disabling smtp proxy via SM doesn't work [SME: 9639]
+ - servers on the local machine and DNS forwarding [SME: 9715]
- - redirect squid syslog messages to /var/log/squid/squid.log [SME: 79]
- - Allow custom file descriptor limit, and set default to 4096 [SME: 9912]
+ e-smith-domains
- e-smith-quota
+ - avoid encoding of utf strings in domain table [SME: 11391]
- - enable quota for groups and users with XFS [SME: 10211]
+ - this will mess with some languages
- e-smith-runit
+ - Create e-smith-domains-update event [SME: 11128]
- - add systemd skip redirect [SME: 9688]
- e-smith-test
+ e-smith-grub
- - remove reference to smtpd [SME: 9478]
+ - fix unable to boot on a non xfs root filesystem [SME: 11365]
- - fix servicename syslog to rsyslog [SME: 9691]
+ - cleanup remove /boot/grub dir [SME: 11354]
- - fix mysqld to mariadb [SME: 9438]
+ - Add support for EFI systems [SME: 10998]
- initscripts
+ - add update event [SME: 11137]
- - use DBUS calls directly instead of calling nmcli (bug #1422820)
- - rhel-import-state: fix broken order of parameters
+ e-smith-ibays
- - import-state: copy just some attributes
+ - fix patch for SSLRequireSSL [SME: 8150]
- - functions: systemctl show now returns an error when unit does not exist
+ - force https if auth or dav are enabled [SME: 11407]
- - import-state: restore also sensitivity part of SELinux context
+ - merge SSL and SSLRequireSSL properties [SME: 8150]
- - network: run after network-pre.target
+ - now SSLRequireSSL will force SSL to the html ibay directory and redirect to https
- - ifup-eth: fix setting preferred_lft and valid_lft
+ - update php properties and folders [SME: 11412]
- - ipv6: wait for all global IPv6 addresses to leave the "tentative" state
+ - remove last bit of atalk [SME: 668]
- - source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no
+ - add update event [SME: 11139]
- - ifup-aliases: inherit ARPCHECK from parent device
+ - remove hardcoded ports [SME: 10968]
- - rhel-dmesg: don't start in containers
+ - remove php3 reference [SME: 10869]
- - ifup-eth: fix typo in error message (#1038776)
+ - fix apache failing if ibay has dynamic content enabled and phpmodule is disabled [SME: 10871]
- - sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf
+ - revert patch, wrong rpm [SME: 10871]
- - rwtab: /var/lib/nfs needs to copy the files
+ - add support for php-fpm [SME: 10871]
- - functions: improve killing loops
- - ipcalc: detect invalid mask
+ e-smith-ldap
- - ifup: set valid_lft and preferred_lft to forever for static ip
+ - fix ldap failing to start on initial boot
- - service: use systemd mangle for given service
- - ifup-post: check resolve.conf also with DNS2
+ e-smith-lib-compspec
- - ifdown-post: remove resolv.conf only in specific cases
+ - allow easy access to templates.metadata to expand desired files [SME: 11312]
- - spec: ghost /var/log/dmesg
+ - add update event [SME: 11142]
- - network-functions: is_available_wait should wait even in the case that is_available returns 2
- - autorelabel: turn quota off before relabeling
+ e-smith-mysql
- - autorelabel: call dracut-initramfs-restore before forced reboot
+ - fix wrong path for set password [SME: 11468]
- mod_auth_tkt
+ - fix restore of sme9 backup fails to start mysql.init [SME: 11453]
- - fix redirection when proxy ssl [SME: 8825] [SME: 9583]
+ - add property to enable mysqld slow queries log [SME: 455]
- smeserver-release
+ - simply use SlowQueries as the amount of second and it is enabled
- - Bump new rpm for sme10 alpha2
+ - remove property to stop logging
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - more mysqld/mariadb parameter available with properties /templates [SME: 4606]
- smeserver-support
+ - ease 4 databit characters with innodb [SME: 11404]
- - exclude samba from centos repo as we have our own with DC support [SME: 10155]
+ - redirect mariadb log from systemd to file [SME: 11425]
- - improving link to donation [SME: 9598]
+ - fix backup fails in pre-backup in mysqldump [SME: 7827]
- - fix hover color [SME: 9676]
+ - expand 10mysql_upgrade and restart mysql.init on e-smith-mysql-update [SME: 11120]
- - Koozali branding of manager [SME: 9676]
+ - this to make sure mariadb upgrade fully and prevent residual 10mysql_upgrade stay in the way
- - new images in archive; removed old images from cvs
+ - fix issue with 10mysql_upgrade crashing mariadb [SME: 11120]
- - updated some css smeserver-support-2.8.0-koozali_manager.patch
+ - also removed noise from spec file
- - reverting partly the changes in last patch [SME: 9598]
+ - e-smith-update event [SME: 11145]
- - wrong catch of proxy related url with the http to https changes
+ - mariadb systemd integration [SME: 11021]
- - thank to Charlie Brady for reporting
+ - move set.password and template
- - Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday,
+ - create /usr/lib/systemd/system/mariadb.service.d/sme.conf
- - update links to koozali.org [SME: 9598]
+ - create /sbin/e-smith/systemd/mariadb-initialize + chmod
- - Template of os-release [SME: 9580]
+ - cleanup and remove old /var/service/mariadb
- smeserver-yum
+ - mysql.init systemd integration [SME: 11120]
- - add rpmfusion free el7 RPM GPG KEY [SME: 10263]
+ - create mysql_init.service
- - avoid reboot for smeserver-locale upgrade [SME: 8705]
- - code by stefano zamboni <zamboni@mind-at-work.it>
+ e-smith-openssh
- - correct service names with plugin to avoid reboot [SME: 8705]
+ - clean rsyslog syntax for sshd [SME: 11422]
- - code by stefano zamboni <zamboni@mind-at-work.it>
+ - increase default host key size [SME: 11359]
- - fix KeyError with plugin to avoid reboot [SME: 8705]
+ - redirect logging to /var/log/sshd/sshd.log and logrotate [SME: 11256]
- - code by stefano zamboni <zamboni@mind-at-work.it>
+ - add support for denyhost [SME: 10939]
- - remove centos contrib repo [SME: 10156]
+ - move sshd to systemd [SME: 11109]
- - added centos SCLo SIG gpg rpm signing key [SME: 10119]
+ - create -update event [SME: 11147]
- - will allow to install SCL packages directly from smecontribs
+ - add ed25519 and ecdsa hostkeys [SME: 10940]
- - Added smeserver-yum-2.6.0.bz8705.avoidReboot.patch [SME: 8705]
+ - add Whitelist to AutoBlock using property sshd ValidFrom [SME: 9893]
- - code by stefano zamboni <zamboni@mind-at-work.it>
+ - update client ciphers to use [SME: 10621]
- - Avoid to reboot after the installation of a smeserver-* package
+ - add ciphers, macs and KexAlgorithms for server [SME: 10937]
- - add Remi Collet RPM GPG KEY [SME: 9903]
- - Rpm updates can be downloaded during the night [SME: 1502]
+ e-smith-packetfilter
- - Added smeserver-yum-2.6.0.bz1502.DownloadOnly.patch
+ - move ulogd to systemd [SME: 11426]
- - Deltarpm is now a setting in the yum panel (disabled by default)
+ - require ulogd 2 [SME: 11426]
- - Added smeserver-yum-2.6.0.bz8834.DeltaRpm.patch [SME: 8834]
+ - remove pptpd last references [SME: 11420]
+ - remove /usr/lib/systemd/system-preset/80-koozali-packetfilter.preset [SME: 10958]
- On behalf of the Koozali SME Server development team
+ - drop pptpd support [SME: 11251]
+ - launch masq using systemd unit [SME: 11089]
+ - create event to avoid reboot on update [SME: 11122]
+ e-smith-proxy
+ - cleanup in /etc/rc.d and /var/service/squid [SME: 9692]
+ e-smith-runit
+ - reverting removal of deamontools [SME: 9692]
+ - could be needed for legacy support with rc7.d services
+ - cleanup of /etc/rc.d [SME: 9692]
+ - create e-smith-runit-update event [SME: 11156]
+ - also tidy target wantedby: should run from basic.target
+ - fix issue with Before rules in unit file [SME: 11013]
+ - run before network-pre.target [SME: 11088]
+ - enable for sme-server.target [SME: 11013]
+ - e-smith-test
+ - e-smith-tinydns
+ - cleanup in /etc/rc.d [SME: 9692]
+ - remove /usr/lib/systemd/system-preset/80-koozali-tinydns.preset [SME: 10958]
+ - Add 'Requires=runit.service' [SME: 11245]
+ - remove S95reset-unsavedflag [SME: 11229]
+ - execute systemd-reload before service adjust in events [SME: 11228]
+ - remove createlink safesymlink in /etc/rc.d/init.d [SME: 11098]
+ - remove rc7.d link [SME: 11098]
+ - fix date in changelog
+ - fix actions in e-smith-tinydns-update [SME: 11159]
+ - Move tinydns service to systemd [SME: 11098]
+ - Create e-smith-tinydns-update event [SME: 11159]
+ smeserver-release
+ - Bump new rpm for sme10 release candidate 1
+ - updating release number everywhere [SME: 11366]
+ - Bump release to 1 as buildsys believe 1.alpha5 is newer than 0.beta1 [SME: 11317]
+ - Bump new rpm for sme10 beta1 [SME: 11317]
+ - add update event [SME: 11165]
+ - Bump new rpm for sme10 alpha5
+ smeserver-yum
+ - migrate back to normal CentOS mirrors after el6 EOL  [SME: 11477]
+ - version 2 with
+   deleting yum{eolversion} if for previous release or not yet eol
+   better handling of conditions
+ - avoid reboot on removal of smeserver-* rpms [SME: 11458]
+ - navigation-conf when a panel is installed
+ - fix wrong path for rsyslog.conf [SME: 11364]
+ - remove noise in yum process "overriding all signals, forcing restart" [SME: 11372]
+ - packages installed logged both in yum.log and message [SME: 11364]
+ - set priority to 10 for remi-safe [SME: 11360]
+ - fix poor handling of service adjusting and action order [SME: 11300]
+ - now a temp event is created
+ - also better logging, better handling of update vs removal
+ - make yum dbs service fork [SME: 11243]
+ - now smeserver.py plugin call the service
+ - yum-modify can use the service restart
+ - yum.service is its own service, not called by local.service
+ - move yum upate db service to systemd [SME: 11180]
+ - fix -update events not runt on package upgrade [SME: 11184]
+ - lower noise on forced restart
+ - fix switch to vault BaseURL for CentOS [SME: 11227]
+ - add remi-safe as base repo [SME: 11179]
+ - smeserver-yum-update event created [SME: 11168]
+ - fix separate action before template, and after service [SME: 11175]
+ - run all actions with post-upgrade as default event
+ - fix some templates not expanded [SME: 11121]
+ - fix smeserver.py not executing action because of wrong path [SME: 11047]
+ - fix error when key absent of a dict of smeserver plugin at clean stage [SME: 10931]
+ - avoid missing template error after removal of a rpm [SME: 10846]
+ - restart php-fpm services when needed [SME: 10873]
+ - applying patch [SME: 10690]
+ - fix NameError: global name 'yum_update_dbs' is not defined [SME: 6940]
+ - use yum-cron with autoupdate feature [SME: 10690]
+ These are either not SME modified Packages, or are kernel mods.
+ clamav
+ libprelude
+ sendmail
+ The changelogs are written per package On behalf of the Koozali SME Server development team
+ - Compilation of release data is thanks to scripts developed by Ian Wells and substantially improved by Jean Phillipe Pialasse
+ Terry Fage

 Legend:



Removed lines/characters
 


Changed lines/characters


 
Added lines/characters
 Legend:



Removed lines/characters
 


Changed lines/characters


 
Added lines/characters
-Removed lines/characters
+Added lines/characters

admin@koozali.org	ViewVC Help
Powered by ViewVC 1.2.1