| 1 |
Koozali SME Server 10 Alpha 2 Release |
Koozali SME Server 10 Alpha 5 Release Notes |
| 2 |
===================================== |
===================================== |
| 3 |
|
|
| 4 |
31 May 2017 |
These are draft only and are in a constant state of update. |
| 5 |
|
|
| 6 |
The Koozali SME Server development team is pleased to announce the release of |
17 Jun 2020 |
| 7 |
SME Server 10 Alpha 3 which will be the next major release of SME Server. |
|
| 8 |
|
The Koozali SME Server development team is pleased to announce the |
| 9 |
This release is based on CentOS 7. CentOS 7.# has an EOL of 30 June 2024. |
release of SME Server 10 Alpha 5 which will be the next major release of |
| 10 |
|
SME Server. |
| 11 |
*************************** |
|
| 12 |
Koozali SME Server users should not upgrade production servers to this release |
This release is based on CentOS 7. CentOS 7.# has an EOL of 30 June 2024. |
| 13 |
but those who can are encouraged to load the alpha to a dedicated test machine |
|
| 14 |
and take part in the testing phase. |
*************************** |
| 15 |
*************************** |
Koozali SME Server users should not upgrade production servers to this |
| 16 |
|
release but those who can are encouraged to load the alpha to a |
| 17 |
Some notes on Koozali SME Server 10 can be found at |
dedicated test machine and take part in the testing phase. |
| 18 |
https://wiki.contribs.org/SME_Server_10.0_Development |
*************************** |
| 19 |
|
|
| 20 |
Bug reports and reports of potential bugs should be raised in the bug |
Some notes on Koozali SME Server 10 can be found at |
| 21 |
tracker (and only there, please); |
https://wiki.contribs.org/SME_Server_10.0_Development |
| 22 |
|
|
| 23 |
https://bugs.koozali.org/ |
SME10 Roadmap - Alpha 5 |
| 24 |
|
https://wiki.contribs.org/SME10_Roadmap#SME_10_Alpha_5 |
| 25 |
Download |
|
| 26 |
======== |
Bug reports and reports of potential bugs should be raised in the bug |
| 27 |
You can download SME Server 10 from |
tracker (and only there, please); |
| 28 |
https://mirror.koozali.org/smeserver/releases/testing/10/ |
|
| 29 |
or for other methods see https://wiki.koozali.org/SME_Server:Download |
https://bugs.koozali.org/ |
| 30 |
|
|
| 31 |
Please note it may take up to 48 hours for mirrors to finish syncing, |
Download |
| 32 |
during this time you may experience problems. |
======== |
| 33 |
|
You can download SME Server 10 from |
| 34 |
About SME Server |
https://mirror.koozali.org/smeserver/releases/testing/10/ |
| 35 |
================ |
or for other methods see https://wiki.koozali.org/SME_Server:Download |
| 36 |
SME Server is the leading Linux distribution for small and medium |
|
| 37 |
enterprises. SME Server is brought to you by Koozali Foundation, Inc., |
Please note it may take up to 48 hours for mirrors to finish syncing, |
| 38 |
a non-profit corporation that exists to provide marketing and legal support |
during this time you may experience problems. |
| 39 |
for SME Server. |
|
| 40 |
|
About SME Server |
| 41 |
SME Server is freely available under the GNU General Public License and |
================ |
| 42 |
is only possible through the efforts of the SME Server community. |
SME Server is the leading Linux distribution for small and medium |
| 43 |
|
enterprises. SME Server is brought to you by Koozali Foundation, Inc., |
| 44 |
However, the availability and quality of SME Server is dependent on |
a non-profit corporation that exists to provide marketing and legal support |
| 45 |
meeting our expenses, such as hosting costs, server hardware, etc. |
for SME Server. |
| 46 |
|
|
| 47 |
As such, we ask for a donation to offset costs and fund further development. |
SME Server is freely available under the GNU General Public License and |
| 48 |
|
is only possible through the efforts of the SME Server community. |
| 49 |
a) If you are a school, a church, a non-profit organisation or an individual |
|
| 50 |
using SME Server for private purposes, we would appreciate you to contribute |
However, the availability and quality of SME Server is dependent on |
| 51 |
within your means toward the costs associated with hosting, maintenance and |
meeting our expenses, such as hosting costs, server hardware, etc. |
| 52 |
development. |
|
| 53 |
|
As such, we ask for a donation to offset costs and fund further development. |
| 54 |
b) If you are a company or an integrator and you are deploying SME Server in |
|
| 55 |
the course of your work to generate revenue, we expect you to make a donation |
a) If you are a school, a church, a non-profit organisation or an |
| 56 |
commensurate with the level of revenue you generate and the number of servers |
individual using SME Server for private purposes, we would appreciate |
| 57 |
your have in the field. Please, help the project |
you to contribute within your means toward the costs associated with |
| 58 |
|
hosting, maintenance and development. |
| 59 |
Please visit https://wiki.koozali.org/Donate to donate. |
|
| 60 |
|
b) If you are a company or an integrator and you are deploying SME |
| 61 |
Koozali Inc is happy to supply an invoice for any donations received, |
Server in the course of your work to generate revenue, we expect you to |
| 62 |
simply email treasurer@koozali.org |
make a donation commensurate with the level of revenue you generate and |
| 63 |
|
the number of servers your have in the field. Please, help the project |
| 64 |
Notes |
|
| 65 |
===== |
Please visit https://wiki.koozali.org/Donate to donate. |
| 66 |
In-place upgrades are not supported. It is necessary to backup and then restore. |
|
| 67 |
(Remember, testing purpose only) |
Koozali Inc is happy to supply an invoice for any donations received, |
| 68 |
|
simply email treasurer at koozali.org |
| 69 |
The spare handling for RAID arrays is not implemented. |
|
| 70 |
|
Notes |
| 71 |
USB installs are now supported, see: https://wiki.koozali.org/Install_From_USB |
===== |
| 72 |
|
In-place upgrades are not supported. It is necessary to backup and then |
| 73 |
Current installer is still branded CentOS. A kickstart script allows you to go through the graphical installation process. If your disk is not empty, you will need to use the Anaconda interface to format it and partition it. If it is empty all is automatic. You will have to set your root password twice: once during Anaconda installation (you could use a lame password), a second time in the Koozali SME server configuration process. |
restore. (Remember, testing purpose only) |
| 74 |
|
|
| 75 |
Major changes in this release |
The spare handling for RAID arrays is not implemented as yet. |
| 76 |
============================= |
|
| 77 |
This release is based on CentOS 7 |
New Server-Manager Framework, Mojolicious, is now well on the way to full implementation |
| 78 |
|
|
| 79 |
Changes in this release |
USB installs are once again fully supported |
| 80 |
======================= |
Note: it is important to use proposed apps to create the boot media |
| 81 |
see above |
See: https://wiki.koozali.org/Install_From_USB |
| 82 |
|
|
| 83 |
General features |
Netinstall is once again fully supported |
| 84 |
================ |
|
| 85 |
- Based on CentOS 7.2.1511 and all available updates |
Install to a system supporting a UEFI BIOS is also now fully supported |
| 86 |
|
|
| 87 |
Detailed changes in this release |
The work that has gone into getting SME 10 to this stage has been enormous, an attempt to list and detail the work that has been done in recent months would not do justice to the effort contributed by the following, |
| 88 |
======================= |
|
| 89 |
Only the changes since SME Server 10 Alpha2 are listed, mainly |
thank you one and all: |
| 90 |
autogenerated from the changelogs. |
|
| 91 |
|
Jean Phillipe Pialasse |
| 92 |
Packages altered by Centos, Redhat, and Fedora-associated developers are |
Michel Begue |
| 93 |
not included. |
Brian Read |
| 94 |
|
Catton Durbrow |
| 95 |
General features - Based on CentOS 7.2.1511 and all available updates |
Chris Sansom-Ninnes |
| 96 |
|
John Crisp |
| 97 |
Backups |
|
| 98 |
|
there have also been many others who have done what they can, thank you: |
| 99 |
e-smith-backup |
|
| 100 |
- added lock during backup to avoid multiple instance running [SME: 9127] |
|
| 101 |
- code from Stefano Zamboni <zamboni@mind-at-work.it> |
Major changes in this release |
| 102 |
- added support back to ext2 and ext3 [SME: 9299] |
============================= |
| 103 |
- fix removable device detection [SME: 9299] |
This release is based on CentOS 7.# |
| 104 |
- console restoration can be launched again from console [SME: 9550] |
|
| 105 |
- fixed bug on the dar catalog when backups are not added in it [SME: 9563] |
Changes in this release |
| 106 |
- Added e-smith-backup-2.6.0.bz9563.UpdateDarCatalogFollowingBackups.patch |
======================= |
| 107 |
- Remove the dar exclusion message in the email if there is no exclusion. |
see above and below, too much to list |
| 108 |
- Modified e-smith-backup-2.6.0.Do_Dar_Exclusion.patch [SME: 9633] |
|
| 109 |
- Added two commented files backup.{include,exclude} in /etc/backup-data.d |
General features |
| 110 |
- Modified e-smith-backup-2.6.0.Add_Or_Remove_Path_In_Backup.patch [SME: 9607] |
================ |
| 111 |
- Add or remove path in your backup by a file *.include and *.exclude |
- Based on CentOS 7.6.1810 and all available updates |
| 112 |
- Added e-smith-backup-2.6.0.Add_Or_Remove_Path_In_Backup.patch [SME: 9607] |
|
| 113 |
- Test if the remote host (cifs/nfs) is up, else save and display a warning. |
Detailed changes in this release |
| 114 |
- Added e-smith-backup-2.6.0.bz9090.Testing_the_remote_host_parameters.patch [SME: 9090] |
======================= |
| 115 |
- The 'tar backup to desktop' of the backup panel takes consideration of exclusion |
Only the changes since SME Server 10 Alpha3 are listed, mainly |
| 116 |
- Added e-smith-backup-2.6.0.Do_Tar_Exclusion_In_Panel.patch [SME: 9635] |
autogenerated from the changelogs. |
| 117 |
- The 'dar workstation backup' of the backup panel takes consideration of exclusion |
|
| 118 |
- Added e-smith-backup-2.6.0.Do_Dar_Exclusion.patch [SME: 9633] |
Packages altered by Centos, Redhat, and Fedora-associated developers are |
| 119 |
- The 'tar backup' of the console takes consideration of exclusion and display a page with the exclusion content |
not included. |
| 120 |
- e-smith-backup-2.6.0.Do_Tar_Exclusion_In_the_console.patch [SME: 9635] |
|
| 121 |
|
The changelogs are written per package, and each package is assigned a group. |
| 122 |
File Server |
|
| 123 |
|
Backups |
| 124 |
e-smith-proftpd |
|
| 125 |
- fix typos [SME: 6804] |
e-smith-backup |
| 126 |
- set default as required |
- Added /etc/backup-data.d to backup paths |
| 127 |
- NB: client must be set as active connection, not passive |
- Added error handling to restore using pipe pattern from perform_backup |
| 128 |
- updated patch for certificate chain |
- Made reboot optional after console restore |
| 129 |
- Thanks to Daniel Berteaud |
- Fixed bootstrap restore not activating config changes |
| 130 |
- Adding TLS support to proftp configuration [SME: 6804] |
- Manually added ext2 and ext3 to Block Device file system check where ext4 present |
| 131 |
- default is enabled but not required, only TLSv1.1 and v1.2 |
- updated Block Device discovery to fix recovery from console |
| 132 |
e-smith-samba |
- Credit to Catton Durbrow |
| 133 |
- fix outlook error code 0x8004011c [SME: 10169] |
|
| 134 |
- when setting up and email account on a win10 computer joined to a domain (with roaming profiles) |
File Server |
| 135 |
- add systemd skip redirect [SME: 9688] |
|
| 136 |
- Fix deprecated syntax '~' in rsyslog [SME: 9398] |
|
| 137 |
- added e-smith-samba-2.6.0.bz9398.DeprecatedRsyslogSyntaxSamba.patch |
LDAP |
| 138 |
proftpd |
|
| 139 |
- AllowChrootSymlinks off could cause login failures depending on filesystem |
e-smith-ldap |
| 140 |
permissions: use the IDs of the logging-in user to perform the directory |
- New protocol default as TLSv1.2 |
| 141 |
walk, looking for symlinks, to be more consistent with similar checks done |
New property TLSProtocolMin |
| 142 |
during login (#1443507, upstream bug 4306) |
Ciphers are now ordered with stronger first |
| 143 |
- Crypt::CrackLib always available now |
|
| 144 |
- Update to 1.3.5e |
Localisation |
| 145 |
- SFTP clients using umac-64@openssh.com digest failed to connect |
|
| 146 |
(upstream bug 4287) |
|
| 147 |
- SFTP rekeying failure with ProFTPD 1.3.5d, caused by null pointer |
Mail Server |
| 148 |
dereference (upstream bug 4288) |
|
| 149 |
- AllowChrootSymlinks off did not check entire DefaultRoot path for symlinks |
clamav |
| 150 |
(CVE-2017-7418, upstream bug 4295) |
- Update clamav-db as per epel last spec file |
| 151 |
- Change shellbangs in shipped perl scripts to use system perl |
to add clamav-update as provides |
| 152 |
- Drop EL-5 support |
- |
| 153 |
- Drop BuildRoot: and Group: tags |
smeserver-clamav |
| 154 |
- Drop explicit buildroot cleaning in %install section |
- increase lower memory limit to 1GB |
| 155 |
- Drop explicit %clean section |
- fix for AllowSupplementaryGroups warning |
| 156 |
- /etc/pam.d/password-auth always available now |
thanks to bunkobugsy |
| 157 |
- pcre 7.0 or later always available now |
smeserver-dovecot |
| 158 |
- Properly allocate (and clear) the UMAC contexts, to fix segfault in mod_sftp |
- fix typo in enabling TLSv1.2 as default |
| 159 |
(#1420365, upstream bug 4287) |
- fix typo in 35ssl template |
| 160 |
- Update to 1.3.5d |
- fix typo in createlinks |
| 161 |
- Support OpenSSL 1.1.x API (upstream bug 4275) |
- revert property names with period in it |
| 162 |
Bug fixes: |
- add property AcceptFullEmail with enabled as default |
| 163 |
- SSH rekey during authentication can cause issues with clients |
smeserver-qpsmtpd |
| 164 |
(upstream bug 4254) |
- minimum Protocol TLSv1.0 |
| 165 |
- Recursive SCP uploads of multiple directories not handled properly |
better ciphers order. |
| 166 |
(upstream bug 4257) |
|
| 167 |
- LIST returns different results for file, depending on path syntax |
Server manager |
| 168 |
(upstream bug 4259) |
|
| 169 |
- "AuthAliasOnly on" in server config breaks anonymous logins |
e-smith-formmagick |
| 170 |
(upstream bug 4255) |
- add locale for CSRF |
| 171 |
- CapabilitiesEngine directive not honored for <IfUser>/<IfGroup> sections |
- add CSRF patch - thank you to Daniel Berteaud |
| 172 |
(upstream bug 4272) |
e-smith-manager |
| 173 |
- Memory leak when mod_facl is used (upstream bug 4278) |
perl-CGI-FormMagick |
| 174 |
- All FTP logins treated as anonymous logins again (upstream bug 4283, |
- add timeout |
| 175 |
regression in 1.3.5c of upstream bug 3307) |
- update CSRF patch |
| 176 |
- Handle client/server version skew in mod_sql_mysql |
- add requires perl(Session::Token) |
| 177 |
(https://forums.proftpd.org/smf/index.php?topic=11887.0) |
- fix add CSRF patch - thank you to Daniel Berteaud |
| 178 |
- Fix a possible cause of segfaults in mod_sftp (#1337880, upstream bug 4203) |
|
| 179 |
- See if we can fix crash in mod_lang |
Webmail and Groupware |
| 180 |
- BR: perl-generators for correct dependencies in utils sub-package |
|
| 181 |
- Prefer %global over %define |
smeserver-horde |
| 182 |
|
- workaround logging noise caused by libsasl |
| 183 |
LDAP |
- log as admin and not admin@domain for cli tasks |
| 184 |
|
- fix ingo imap preferences |
| 185 |
e-smith-ldap |
- allow httpd-auth for calendar, tasks access using rpc.php ... |
| 186 |
- Disable SSLv3, but keep the possibility to enable it again [SME: 10108] |
- add smeserver-horde-update event |
| 187 |
- Better default cipher suite, and honor global suite [SME: 10108] |
- avoid loss of user parameter on Primary Domain change |
| 188 |
- systemd skip redirect [SME: 9688] |
this will also avoid the loss of parameter if we log with a different virtualhost |
| 189 |
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
horde preference is now stored with the SME username without @domain |
| 190 |
|
- fix bad regex to strip domain |
| 191 |
Localisation |
also we can now force Primary domain to use as default email |
| 192 |
|
we can strip heading string from virtualhost domain to create email |
| 193 |
smeserver-locale |
default identity email will update as long as no other identity is created for the user |
| 194 |
- apply 2017-04-26 translation patch [SME: 10252] |
- fix typo in php-fpm patch |
| 195 |
- updated donate patch to correct location https://wiki.koozali.org/Donate [SME: 9595] |
- remove php3 references |
| 196 |
- applied smeserver-locale-2.6.0-locale-2017-03-03 |
- remove strict and warning alert from error log |
| 197 |
- Added translations smeserver-locale-2.6.0-locale-2016-07-17.patch |
- dedicated php-fpm pool for horde |
| 198 |
- fix wrongly converted http to https in |
- apply patches from John H. Bennett III |
| 199 |
- URL starting with http:// or ftp:// |
- cvs admin -ko on patch1 |
| 200 |
- fix path to documentations (wiki) [SME: 9595] |
|
| 201 |
- convert all koozali url to https |
Web Server |
| 202 |
- change http://www.smeserver.org\donate to https://wiki.koozali.org/donate [SME: 9595] |
|
| 203 |
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
e-smith-apache |
| 204 |
- change contribs.org to koozali.org [SME: 9595] |
- disable TLSv1 TLSv1.1 by default |
| 205 |
|
|
| 206 |
Mail Server |
Other fixes and updates |
| 207 |
|
|
| 208 |
e-smith-email |
e-smith-base |
| 209 |
- fix webmail status not displaying correctly in manager [SME: 9594] |
- wildcard self-signed certificate |
| 210 |
- More change from smtpd to qpsmtpd in masq templates [SME: 9561] |
e-smith-ibays |
| 211 |
- Replace smtpd with qpsmtpd in smtp-auth-proxy [SME: 9554] |
- revert patch, wrong rpm |
| 212 |
e-smith-pop3 |
- add support for php-fpm |
| 213 |
- Honor ConcurrencyLimit and ConcurrencyLimitPerIP prop for pop3 and pop3s |
e-smith-lib |
| 214 |
[SME: 10271] |
- add support for systemctl reload-or-restart, try-restart, enable -now |
| 215 |
e-smith-qmail |
e-smith-ntp |
| 216 |
- Add possibility to exclude users or members of other groups from group |
- revert last change |
| 217 |
email address [SME: 9523] |
on sme10 systemd has ntpd disabled by default |
| 218 |
qmail |
e-smith-openssh |
| 219 |
- added documentation [SME: 9705] |
- add Whitelist to AutoBlock using property sshd ValidFrom |
| 220 |
- added binaries ipmetest et ipmeprint to help configuration |
- update client ciphers to use |
| 221 |
- add moreip to avoid loop [SME: 9705] |
- add ciphers, macs and KexAlgorithms for server |
| 222 |
- patch from Scott Gifford |
rssh |
| 223 |
- remove qmail-0.0.0.0.patch as it is included |
smeserver-release |
| 224 |
- Consider literal <> as null sender [SME: 9884] |
- Bump new rpm for sme10 alpha5 |
| 225 |
qpsmtpd |
smeserver-support |
| 226 |
- Removed Message-Id validation, as it rejects MS account validation email [SME: 10139] |
- obsoletes e-smith-starterwebsite |
| 227 |
- fix whitelist plugin to support helo with naughty rejecting at mail stage [SME: 10112] |
smeserver-yum |
| 228 |
- Validate domains found in uribl with Data::Validate::Domain [SME: 9467] |
- avoid missing template error after removal of a rpm |
| 229 |
- Use eval to fetch dkim policies, prevent fatal errors in case of DNS |
- restart php-fpm services when needed |
| 230 |
timeout [SME: 9480] |
- applying patch |
| 231 |
- Remove karma rcpt handling (buggy and doesn't make a lot of sense) |
- fix NameError: global name 'yum_update_dbs' is not defined |
| 232 |
[SME: 9462] |
- use yum-cron with autoupdate feature |
| 233 |
qpsmtpd-plugins |
|
| 234 |
- remove whitelit_soft [SME: 10126] |
|
| 235 |
smeserver-dovecot |
On behalf of the Koozali SME Server development team |
| 236 |
- Better default cipher suite, and honor global suite [SME: 10110] |
- Compilation of release data is thanks to scripts developed by Ian Wells and |
| 237 |
smeserver-qpsmtpd |
substantially improved by Jean Phillipe Pialasse |
|
- Turn DMARC reporting off by default [SME: 10303] |
|
|
- update patch smeserver-qpsmtpd-2.6.0-smtpd_to_qpsmtpd.patch [SME: 9478] |
|
|
- Greeting property was still attached to smtpd in a template |
|
|
- updated regex for RBL and SBL in smeserver-qpsmtpd-2.6.0-change_rbl_sbl_list_separator.patch |
|
|
- to take into account list using a subdomain [SME: 10123] |
|
|
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
|
|
- Turn SPF and DMARC rejects off by default [SME: 9664] |
|
|
- Fix disabling DMARC reporting [SME: 9206] |
|
|
- Add missing tnef2mime and MaximumDateOffset to qpsmtpd [SME: 9560] |
|
|
smeserver-spamassassin |
|
|
- Rewrite spamd run script to add support for --allow-tell [SME: 10137] |
|
|
|
|
|
Server manager |
|
|
|
|
|
e-smith-manager |
|
|
- add a panel to ease reporting bugs [SME: 8783] |
|
|
- Original work from Mats Schuh m.schuh@neckargeo.net |
|
|
- fix warning uninitialized value in lc [SME: 10209] |
|
|
- fix typo in e-smith-manager-2.8.0-bz10167-emptyback.patch |
|
|
- avoid internal server error if empty back parameter [SME: 10167] |
|
|
- return user friendly message |
|
|
- fix too short timeout in server-manager [SME: 9921] |
|
|
- now 30 min as default instead of 5 |
|
|
- possibility to change this and adapt the default 0.66 of timeout remaining to reset it |
|
|
- by default only a session cookie, can activate persistent cookie |
|
|
- sha256 as encryption. |
|
|
- fix bad redirection parameter that might reveal session information to remote site [SME: 9924] |
|
|
- added missing template-begin for tkt.css [SME: 9676] |
|
|
- Update server-manager to Koozali branding [SME: 9676] |
|
|
- We thanks John Crisp for his wonderful work. |
|
|
- change link for donation to koozali.org [SME: 9599] |
|
|
- Fix syntax for removing Indexes options [SME: 9587] |
|
|
- Remove index option for manager's resources [SME: 9587] |
|
|
- fix 307 redirection to http when https is used [SME: 8825] [SME: 9583] |
|
|
- update syntaxe for TKT Auth |
|
|
- bump 8 for typo |
|
|
- Fix a syntax error in server-manager's logout script [SME: 9527] |
|
|
e-smith-starterwebsite |
|
|
- fix can't chownfile index file [SME: 9900] |
|
|
perl-CGI-FormMagick |
|
|
- fix uninitialized value $what_to_make in lc [SME: 10210] |
|
|
php |
|
|
- bz2: fix improper error handling in bzread() CVE-2016-5399 |
|
|
- gd: fix integer overflow in _gd2GetHeader() resulting in |
|
|
heap overflow CVE-2016-5766 |
|
|
- gd: fix integer overflow in gdImagePaletteToTrueColor() |
|
|
resulting in heap overflow CVE-2016-5767 |
|
|
- mbstring: fix double free in _php_mb_regex_ereg_replace_exec |
|
|
CVE-2016-5768 |
|
|
- don't set environmental variable based on user supplied Proxy |
|
|
request header CVE-2016-5385 |
|
|
- fix segmentation fault in header_register_callback #1344578 |
|
|
- curl: add options to enable TLS #1291667 |
|
|
- mysqli: fix segfault in mysqli_stmt::bind_result() when |
|
|
link is closed #1096800 |
|
|
- fpm: fix incorrectly defined SCRIPT_NAME variable when |
|
|
using Apache #1138563 |
|
|
- core: fix segfault when a zend_extension is loaded twice #1289457 |
|
|
- openssl: change default_md algo from MD5 to SHA1 #1073388 |
|
|
- wddx: fix segfault in php_wddx_serialize_var #1131979 |
|
|
- session: fix segfault in session with rfc1867 #1297179 |
|
|
|
|
|
Webmail and Groupware |
|
|
|
|
|
|
|
|
Web Server |
|
|
|
|
|
e-smith-php |
|
|
- clean daily session and tmp folders [SME: 9626] |
|
|
- updated path for ibays' session and tmp folders to /var/cache |
|
|
- add tmp folder to ibays [SME: 7011] |
|
|
- add session folder to ibays [SME: 9620] |
|
|
- change global session folder from /tmp to /var/lib/php/session/ [SME: 139] |
|
|
|
|
|
Other fixes and updates |
|
|
|
|
|
e-smith-base |
|
|
- Expand route-bond0 when nic bonding is enabled [SME: 10272] |
|
|
- improve regex to catch local [SME: 9724] |
|
|
- change smtpd to qpsmtpd for default service access [SME: 9478] |
|
|
- add translation links for manager to most language variations we support [SME: 11121] |
|
|
- prevent restoration from being called on regular and post-upgrade reboot [SME: 9550] |
|
|
- console restoration can be launched again from console |
|
|
- Use ip route syntax to define routes to local network [SME: 10083] |
|
|
- Allow /32 masks on the external interface, in which case we don't |
|
|
check if the gateway is on the correct network) [SME: 9610] |
|
|
- fix config db locale property [SME: 9724] |
|
|
- adapt e-smith service command to systemd [SME: 9672] |
|
|
- add systemd skip redirect to e-smith-service [SME: 9688] |
|
|
- fix broken link /etc/init.d/supervise/local link [SME: 9687] |
|
|
- fix mysqld to mariadb [SME: 9438] |
|
|
- fix missing path to chkconfig [SME: 9641] |
|
|
- Fix deprecated syntax '*' in rsyslog [SME: 9398] |
|
|
- Added e-smith-base-5.8.0.bz9398.DeprecatedRsyslogSyntax.patch |
|
|
- Set the hostname by hostnamectl [SME: 9631] |
|
|
- Stefano Zamboni <zamboni@mind-at-work.it> |
|
|
- fix Lang and keyboard layout configured are not used [SME: 9539] |
|
|
- Fix display of email forward fields since smtpd entry has been merged |
|
|
qpsmtpd [SME: 9552] |
|
|
e-smith-devtools |
|
|
- added grub2 directories to ignore list [SME: 10325] |
|
|
- Quote filenames in genfilelist so filenames containing spaces are correctly |
|
|
handled [SME: 9750] |
|
|
e-smith-grub |
|
|
- rebuild for file ownership conflict [SME: 10325] |
|
|
- fix edition and consol grub terminal not visible because of koozali logo [SME: 9728] |
|
|
- enable quota for groups and users with XFS [SME: 10211] |
|
|
- Koozali grub splash screen |
|
|
- Write the full path for the grub Action [SME: 9668] |
|
|
- Added e-smith-grub-2.6.1.bz9668.AddFullPath2GrubAction.patch |
|
|
- New source [SME: 9321] |
|
|
- Adaptation to grub2 [SME: 9321] |
|
|
e-smith-hosts |
|
|
- remove reference to smtpd [SME: 9478] |
|
|
- fix servicename syslog to rsylog [SME: 9691] |
|
|
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
|
|
by assuming the date is correct and changing the weekday. |
|
|
- fix mysqld to mariadb [SME: 9438] |
|
|
e-smith-ibays |
|
|
- fix typo thanks to Stephane de Labrusse [SME: 7011] |
|
|
- ibay to ibays |
|
|
- as per comment 2 of bug 0600 instead of 0700 for perms [SME: 9621] |
|
|
- as discussed, moving cache and tmp out of ibay folder [SME: 9105] [SME: 9621] |
|
|
- creating basedir /var/cache/e-smith/files/ibays for tmp and cache |
|
|
- create tmp folder in ibays when needed [SME: 9105] |
|
|
- create session folder in ibays when needed [SME: 9621] |
|
|
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
|
|
e-smith-lib |
|
|
- remove reference to smtpd in configuration.conf [SME: 9478] |
|
|
- fix console startup display [SME: 9352] |
|
|
- fix service name syslog to rsyslog [SME: 9691] |
|
|
- fix mysqld to mariadb [SME: 9438] |
|
|
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
|
|
- fix esmith::util::serviceControl to manage systemd service [SME: 9660] |
|
|
- Added e-smith-lib-2.6.0.bz9660.serviceControlSystemd.patch |
|
|
e-smith-mysql |
|
|
- systemd skip redirect [SME: 9688] |
|
|
- Corrected a typo in e-smith-mysql-2.6.0.bz9671.RemoveDummyMysqlDatabase.patch |
|
|
- [SME: 9671] |
|
|
- fix broken link /etc/init.d/supervise/mariadb [SME: 9686] |
|
|
- Remove Dummy database from backup and restoration [SME: 9671] |
|
|
- Added e-smith-mysql-2.6.0.bz9671.RemoveDummyMysqlDatabase.patch |
|
|
- fix forgotten mysqld variables in various scripts [SME: 9438] |
|
|
- e-smith-mysql-2.6.0-mariadb_forgotten_var.patch |
|
|
e-smith-ntp |
|
|
- fix wrong link to restart rsyslog [SME: 9690] |
|
|
e-smith-proxy |
|
|
- fix disabling smtp proxy via SM doesn't work [SME: 9639] |
|
|
- redirect squid syslog messages to /var/log/squid/squid.log [SME: 79] |
|
|
- Allow custom file descriptor limit, and set default to 4096 [SME: 9912] |
|
|
e-smith-quota |
|
|
- enable quota for groups and users with XFS [SME: 10211] |
|
|
e-smith-runit |
|
|
- add systemd skip redirect [SME: 9688] |
|
|
e-smith-test |
|
|
- remove reference to smtpd [SME: 9478] |
|
|
- fix servicename syslog to rsyslog [SME: 9691] |
|
|
- fix mysqld to mariadb [SME: 9438] |
|
|
initscripts |
|
|
- use DBUS calls directly instead of calling nmcli (bug #1422820) |
|
|
- rhel-import-state: fix broken order of parameters |
|
|
- import-state: copy just some attributes |
|
|
- functions: systemctl show now returns an error when unit does not exist |
|
|
- import-state: restore also sensitivity part of SELinux context |
|
|
- network: run after network-pre.target |
|
|
- ifup-eth: fix setting preferred_lft and valid_lft |
|
|
- ipv6: wait for all global IPv6 addresses to leave the "tentative" state |
|
|
- source_config: tell NetworkManger to load ifcfg file even for NM_CONTROLLED=no |
|
|
- ifup-aliases: inherit ARPCHECK from parent device |
|
|
- rhel-dmesg: don't start in containers |
|
|
- ifup-eth: fix typo in error message (#1038776) |
|
|
- sysctl.conf: steal comments about /usr,/etc,... from fedora's sysctl.conf |
|
|
- rwtab: /var/lib/nfs needs to copy the files |
|
|
- functions: improve killing loops |
|
|
- ipcalc: detect invalid mask |
|
|
- ifup: set valid_lft and preferred_lft to forever for static ip |
|
|
- service: use systemd mangle for given service |
|
|
- ifup-post: check resolve.conf also with DNS2 |
|
|
- ifdown-post: remove resolv.conf only in specific cases |
|
|
- spec: ghost /var/log/dmesg |
|
|
- network-functions: is_available_wait should wait even in the case that is_available returns 2 |
|
|
- autorelabel: turn quota off before relabeling |
|
|
- autorelabel: call dracut-initramfs-restore before forced reboot |
|
|
mod_auth_tkt |
|
|
- fix redirection when proxy ssl [SME: 8825] [SME: 9583] |
|
|
smeserver-release |
|
|
- Bump new rpm for sme10 alpha2 |
|
|
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
|
|
smeserver-support |
|
|
- exclude samba from centos repo as we have our own with DC support [SME: 10155] |
|
|
- improving link to donation [SME: 9598] |
|
|
- fix hover color [SME: 9676] |
|
|
- Koozali branding of manager [SME: 9676] |
|
|
- new images in archive; removed old images from cvs |
|
|
- updated some css smeserver-support-2.8.0-koozali_manager.patch |
|
|
- reverting partly the changes in last patch [SME: 9598] |
|
|
- wrong catch of proxy related url with the http to https changes |
|
|
- thank to Charlie Brady for reporting |
|
|
- Eliminated rpmbuild "bogus date" warnings due to inconsistent weekday, |
|
|
- update links to koozali.org [SME: 9598] |
|
|
- Template of os-release [SME: 9580] |
|
|
smeserver-yum |
|
|
- add rpmfusion free el7 RPM GPG KEY [SME: 10263] |
|
|
- avoid reboot for smeserver-locale upgrade [SME: 8705] |
|
|
- code by stefano zamboni <zamboni@mind-at-work.it> |
|
|
- correct service names with plugin to avoid reboot [SME: 8705] |
|
|
- code by stefano zamboni <zamboni@mind-at-work.it> |
|
|
- fix KeyError with plugin to avoid reboot [SME: 8705] |
|
|
- code by stefano zamboni <zamboni@mind-at-work.it> |
|
|
- remove centos contrib repo [SME: 10156] |
|
|
- added centos SCLo SIG gpg rpm signing key [SME: 10119] |
|
|
- will allow to install SCL packages directly from smecontribs |
|
|
- Added smeserver-yum-2.6.0.bz8705.avoidReboot.patch [SME: 8705] |
|
|
- code by stefano zamboni <zamboni@mind-at-work.it> |
|
|
- Avoid to reboot after the installation of a smeserver-* package |
|
|
- add Remi Collet RPM GPG KEY [SME: 9903] |
|
|
- Rpm updates can be downloaded during the night [SME: 1502] |
|
|
- Added smeserver-yum-2.6.0.bz1502.DownloadOnly.patch |
|
|
- Deltarpm is now a setting in the yum panel (disabled by default) |
|
|
- Added smeserver-yum-2.6.0.bz8834.DeltaRpm.patch [SME: 8834] |
|
|
|
|
|
On behalf of the Koozali SME Server development team |
|
Parent Directory
| 
Revision Log
| 
Revision Graph
| 
Patch
