/[smeserver]/cdrom.image/sme8/README.txt
ViewVC logotype

Diff of /cdrom.image/sme8/README.txt

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.11 by slords, Tue Oct 4 19:45:56 2011 UTC Revision 1.32 by stephdl, Sun Mar 22 08:37:02 2015 UTC
# Line 1  Line 1 
1  SME Server 8.0 Beta 7 Release Notes  Koozali SME Server 8.2 Release Notes
2  ===================================  
3    ====================================
4    
5    
6    
7    18 March 2015
8    
9    
10    
11    The Koozali SME Server (SME Server) development team is pleased to announce
12    
13    the release of SME Server 8.2 which is based on CentOS 5.11
14    
 8 October 2011  
15    
 The SME Server development team is pleased to announce the release of  
 SME Server 8.0beta7 which is based on CentOS 5.7 and will be the next  
 major release of SME Server. This is the final planned Beta for SME 8.  
16    
17  Bug reports and reports of potential bugs should be raised in the bug  Bug reports and reports of potential bugs should be raised in the bug
18    
19  tracker (and only there, please);  tracker (and only there, please);
20    
21    
22    
23      http://bugs.contribs.org/      http://bugs.contribs.org/
24    
 ***************************  
 Testers Please Note the following...  
25    
 1. SME Server users should not upgrade production servers to this  
    release but those who can are encouraged to load the beta to a  
    dedicated test machine and take part in the testing phase.  
26    
27  2. CentOS 5 has dropped support for i586 and therefore SME Server 8  Download
    will not work on i586 hardware. [See bugzilla:2845]. i586 hardware  
    means processors before and including Intel Pentium, Pentium MMX;  
    AMD K5, K6, K6-II, K6-III and Via C3. i686 architecture processors  
    are Intel Pentium Pro, Pentium II, Pentium III; AMD Athlon,  
    Athlon XP and later.  
28    
29  3. Some notes on SME 8 including help on upgrades can be found at  ========
30     http://wiki.contribs.org/SME_Server_8  
31    
32    
33    You can download SME Server 8.2 from
34    
35    http://mirror.contribs.org/smeserver/releases/8.2/iso/x86_64/
36    
37    or for other methods see http://wiki.contribs.org/SME_Server:Download
38    
39    
40    
41    Please note it may take up to 48 hours for mirrors to finish syncing,
42    
43    during this time you may experience problems.
44    
 4. Upgrading from previous releases should only be done on clean  
    machines without contribs or other modifications.  
45    
 5. Testers are now encouraged to test upgrade paths and to start testing  
    contribs. They are not certain to work so only try on test servers.  
    Please raise all issues found in the bug tracker.  
46    
 6. Please note it may take up to 48 hours for mirrors to finish syncing,  
    during this time you may experience problems.  
    You can download SME8.0 Beta 7 from  
    http://mirror.contribs.org/smeserver/releases/testing/8/iso/i386/  
    or for other methods see http://wiki.contribs.org/SME_Server_8  
47    
 ***************************  
48    
49  About SME Server  About SME Server
50    
51  ================  ================
52    
53    
54    
55  SME Server is the leading Linux distribution for small and medium  SME Server is the leading Linux distribution for small and medium
56  enterprises.  
57    enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
58    
59    a non-profit corporation that exists to provide marketing and legal support
60    
61    for SME Server.
62    
63    
64    
65  SME Server is freely available under the GNU General Public License and  SME Server is freely available under the GNU General Public License and
66    
67  is only possible through the efforts of the SME Server community.  is only possible through the efforts of the SME Server community.
68    
69  However, the availability and quality of SME Server is dependent on  However, the availability and quality of SME Server is dependent on
70    
71  meeting our expenses, such as hosting costs, server hardware, etc.  meeting our expenses, such as hosting costs, server hardware, etc.
72    
73  As such, we ask for a small donation to offset costs and fund further  
74    
75    As such, we ask for a donation to offset costs and fund further development.
76    
77    
78    
79    a) If you are a school, a church, a non-profit organisation or an individual
80    
81    using SME Server for private purposes, we would appreciate you to contribute
82    
83    within your means toward the costs associated with hosting, maintenance and
84    
85  development.  development.
86    
87    
88    
89    b) If you are a company or an integrator and you are deploying SME Server in
90    
91    the course of your work to generate revenue, we expect you to make a donation
92    
93    commensurate with the level of revenue you generate and the number of servers
94    
95    your have in the field. Please, help the project
96    
97    
98    
99  Please visit http://wiki.contribs.org/Donate to donate.  Please visit http://wiki.contribs.org/Donate to donate.
100    
101  Thanks and a plea for help  
102  ==========================  
103    Koozali Inc is happy to supply an invoice for any donations received,
104    
105    simply email treasurer@koozali.org
106    
107    
108    
109    
110    
111    Thanks
112    
113    ======
114    
115    
116    
117  The development team would like to thank all of those who have involved  The development team would like to thank all of those who have involved
 themselves with this beta release. At this stage in development the role  
 of testers is vital; the final release date and the stability and  
 quality of the new version depend on full and thorough testing by all  
 levels of users, right from beginners who may be confused by, and draw  
 the developers attention to, insufficiently transparent system design,  
 up to seasoned and skilled users who can probe the system deeply. Bug  
 triage and verification testing needs lots of community involvement;  
 please try to spare some time to this vital aspect of our community's  
 future.  
   
 This release, which is based on a major update of the Centos Core,  
 contains many new features. Please run Software Installer in Server  
 Manager regularly during testing to be sure your system reflects the  
 latest stage of development.  
118    
119  Major changes in beta 7  themselves with this release.
120  =======================  
121  * Require authentication for all emails, including local.  
122  * Optional - to use ext4 instead of ext3 for file systems  
123    (except for /boot). At the boot prompt use "ext4" or "sme ext4".  
124    *** ext4 is considered experimental, so use with caution ***  
125  * Optional - LDAP authentication can be enabled. Once enabled it cannot  Notes
126    be disabled, so experiment with care.  
127    To enable: db configuration setprop ldap Authentication enabled  =====
128    
129    
130    
131    1. CentOS 5 has dropped support for i586 and therefore SME Server 8.2
132    
133       will not work on i586 hardware. [See bugzilla:2845]. i586 hardware
134    
135       means processors before and including Intel Pentium, Pentium MMX;
136    
137       AMD K5, K6, K6-II, K6-III and Via C3. i686 architecture processors
138    
139       are Intel Pentium Pro, Pentium II, Pentium III; AMD Athlon,
140    
141       Athlon XP and later.
142    
143    
144    
145    2. Some notes on SME Server 8.2 including help on upgrades can be found at
146    
147       http://wiki.contribs.org/SME_Server_8
148    
149    
150    
151    3. Please note Upstream policy on Production Phase 3 for EL5. Only those
152    
153       security updates deemed crucial are now being released upstream for EL5
154    
155       (so also for SME8) The Koozali team recommends that you start moving
156    
157       workloads from SME Server 8 to SME Server 9.
158    
159       Planned EOL for CentOS 5 is Mar 31 2017
160    
161    
162    
163    4. Please note it may take up to 48 hours for mirrors to finish syncing,
164    
165       during this time you may experience problems.
166    
167       You can download SME Server 8.2 from
168    
169       http://mirror.contribs.org/smeserver/releases/8.2/iso/i386/
170    
171       or for other methods see http://wiki.contribs.org/SME_Server_8
172    
173    
174    
175    
176    
177  Changes in this release  Changes in this release
178    
179  =======================  =======================
180    
 This section of this README file lists all package changes carried out  
 by SME-associated developers since SME Server 8.0 Beta 6.  
181    
182  The package changelogs often included earlier changes and changes  
183  carried out by non-SME-associated developers; these were removed to  Packages altered by Centos, Redhat, and Fedora-associated developers are
184  shorten the list. Packages recently altered by Centos, Redhat, and  
185  Fedora-associated developers are not included.  not included.
186    
187    
188    
189    
190    
191  Backups  Backups
192    
193  -------  -------
 - Improve how Backup to Workstation handles full remote disks.  
 - Do not make backup fail when due to a modified file.  
 - Localise the choices for 'Select the type of share for backup  
   destination' in the Configure Workstation Backup panel.  
 - Improve the wording of the 'Backup or restore' server-manager panel.  
   Replace term "USB disk" with "removable disk" as this is not  
   restricted to only USB disks.  
 - Improve wording of workstation backup email regarding the set number.  
 - Do not modify the workstation backup location 'SmbShare' during  
   software update.  
 - Include disk usage in Workstation Backup email.  
 - A new database property, OpenFilesLimit, allows customisation of  
   open_files_limit option in my.cnf. This can allow backups to succeed  
   if a MySQL database has a very large number of tables.  
194    
195  File Server   - Add pkgconfig dar
196  -----------  
197  - Change separator character in general Samba configuration file.   - New Upstream Version dar
198  - Changes in Samba's "Recycle VFS exclude" syntax (for ibays).  
199     - Add requires nfs-utils
200    
201     - The nfs service is neither started or allowed to start
202    
203     - Workstation Backup, do not create folder in /
204    
205    
206    
207    
208    
209    LDAP
210    
 LDAP (Optional in SME 8, and considered experimental)  
211  ----  ----
212  - Create samba account during event for machine.  
213  - Keep uid/gid for computer accounts in synch for Unix/Samba/LDAP.   - Make pdbedit output independent from locale and timezone so it can be
214  - Fixed syntax error in create-machine-account.  
215  - Fix samba-group-mapping for users without group membership.     parsed
216  - Fix cpu critical patch missing '  
217  - LDAP admin password needs to be loaded in secrets.tdb  
 - Change authentication from passwd/shadow files to the pam database.  
 - Turba searches on LDAP address book fixed.  
 - Properly handle account with accents in first- or lastname with  
   regards to LDAP.  
 - Fix create user gid parameter.  
 - Path for gpasswd command fixed in "init-accounts" script.  
 - All ibay account commands as system accounts in LDAP.  
 - Create ibay accounts as system accounts in LDAP.  
 - Use cpu commands to manage Ibays accounts if ldap is master.  
 - Make cpu calls critical only with ldap{Auth} is enabled.  
 - Check slapd.conf syntax before trying to dump the database.  
 - Simplify ldap-update call by calling ldif-fix  
 - Change script order: ldap-update should be called after  
   domain-group-maps.  
 - LDAP ou field is taken from Dept not Department.  
 - LDAP changes: Add rfc2739.schema back in and include in config.  
 - Use ldapmodify to load ldif, add -a if no changetype.  
 - Remove bogus junk attribute from ldif templates.  
 - Change startup order for ldap.  
 - ldap should store locked passwords for expired passwords.  
 - Add ldap as an auth type to radius  
 - Radius should use LDAP backend (if LDAP auth is enabled).  
218    
219  Localisation  Localisation
220    
221  ------------  ------------
222  - Latest localisation updates applied.  
223     - apply locale 2015-03-14 patch from pootle
224    
225     - apply locale 2014-12-25 patch from pootle
226    
227     - apply locale 2014-03-08 patch from pootle
228    
229    
230    
231  Mail Server  Mail Server
232    
233  -----------  -----------
234  - Require SMTP authentication by default when sending to an external  
235    address.   - Updated to ClamAV release 0.98.6
236  - Fix TLS security defaults, TLS Ciphers for qpsmtpd can be configured.  
237  - Change enabled to transparent for mail proxy.   - Updated to release ClamAV 0.98.5
238  - Enable authentication for smtp traffic and migrate if necessary.  
239  - Fix pseudonym modification for "local network only" accounts.   - Add BuildRequires for openssl-devel and libxml2-devel
240  - Add smtp auth into web interface, not just when enabled.  
241  - Fix require_resolvable_fromhost doesn't work   - Remove Packager and Vendor from ClamAV spec file.
242  - Fix qpsmtpd plugin fatal errors when incoming mail message has no  
243    headers.   - Updates to release ClamAV 0.98.4.
244  - Serialize configure_peers to prevent errors.  
245  - Fix SMTP proxy wording in server-manager.   - Updated to release ClamAV 0.98.3.
246  - Fix SMTP auth wording in server-manager.  
247  - New feature: Allow for individual configuration for the number of   - Remove the patch e-smith-email-5.2.0-UEsDBBQDAAAIA-new-signature.patch
248    mail logfiles.  
249     - Add new zip file signatures to default mailpatterns database :
250       UEsDBBQDAAAIA
251    
252     - Add new zip file signatures to default mailpatterns database : ZIPVOSX &
253       ZIPV3
254    
255     - Fix stunnel path
256    
257     - Use stunnel instead of sslio to support TLS
258    
259     - Modify whitelist_soft transaction to interact with dnsbl filter
260    
261       by John Crisp <jcrisp@safeandsoundit.co.uk>
262    
263     - Remove DENYSOFT on SPF softfail qpsmtpd
264    
265     - Increase MemLimit to 700M for clamav-0.98
266    
267     - Remove dnsbl.ahbl.org RBL List
268    
269    
270    
271  Server manager  Server manager
272    
273  --------------  --------------
 - Enhance IP address syntax checking in remote access panel.  
274    
275  Webmail and Groupware   - Resync with upstream php53, which include
276  ---------------------  
277  - Update to Horde 3.3.11, imp 4.3.9, Ingo 1.2.5 & Turba 2.3.5      fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710
278  - Add option to verify from address in webmail if setting up additional  
279    identities.      xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
280    
281        core: fix integer overflow in unserialize() CVE-2014-3669
282    
283        exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
284    
285     - Resync with upstream php53, which include
286    
287        spl: fix use-after-free in ArrayIterator due to object
288    
289        change during sorting. CVE-2014-4698
290    
291        spl: fix use-after-free in SPL Iterators. CVE-2014-4670
292    
293        gd: fix NULL pointer dereference in gdImageCreateFromXpm.
294    
295        CVE-2014-2497
296    
297        fileinfo: fix incomplete fix for CVE-2012-1571 in
298    
299        cdf_read_property_info. CVE-2014-3587
300    
301        core: fix incomplete fix for CVE-2014-4049 DNS TXT
302    
303        record parsing. CVE-2014-3597
304    
305     - Resync with upstream php53, which include
306    
307        core: type confusion issue in phpinfo(). CVE-2014-4721
308    
309        date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
310    
311        core: fix heap-based buffer overflow in DNS TXT record parsing.
312    
313        CVE-2014-4049
314    
315        core: unserialize() SPL ArrayObject / SPLObjectStorage type
316    
317        confusion flaw. CVE-2014-3515
318    
319        fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
320    
321        fileinfo: unrestricted recursion in handling of indirect type
322    
323        rules. CVE-2014-1943
324    
325        fileinfo: out of bounds read in CDF parser. CVE-2012-1571
326    
327        fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
328    
329        fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
330    
331        fileinfo: cdf_unpack_summary_info() excessive looping
332    
333        DoS. CVE-2014-0237
334    
335        fileinfo: CDF property info parsing nelements infinite
336    
337        loop. CVE-2014-0238
338    
339    
340    
341    
342    
343  Web Server  Web Server
344    
345  ----------  ----------
346  - Disable SSLv2 by default.  
347  - make user 'apache' an alias for user 'www'.   - Disable SSLv3
348    
349     - Revert CRIME mitigation patch, as it's not needed
350    
351     - Mitigate CRIME, CVE-2012-4929
352    
353    
354    
355  Other fixes and updates  Other fixes and updates
356    
357  -----------------------  -----------------------
358  - Option to select ext4 instead of ext3 for filesystems at boot prompt  
359  - Enable quotas on ext4 filesystems as well.   - When quiting the console app with unsaved changes set the default selected
360  - Only allow backup to (removable) storage media that are not read only.  
361  - Improve error handling when trying to install without NIC.     answer to NO
362  - Only remove dangling symlinks in weak-updates directories.  
363  - Fix template-expansion for dhclient.conf.   - Add a verification in the console of number of pptp clients against ip
364  - Improve validation (error) message for remote access setup.     allowed in dhcpd
365  - Change text in hostname and addresses panel for remote host (add  
366    FQDN).   - Add a verification in remoteaccess panel of number of pptp clients against
367  - Fix hostname editing for comments with double speechmarks     ip allowed in dhcpd
368  - Trap croak inside Net::IPv4Addr::ipv4_in_network to allow a FQDN to be  
369    inserted in hostnames and addresses panel in lieu of an IP address.   - Reset primary ibay default type
370  - Add validator back for ip or cname entry.  
371  - Correctly strip numbers from sql scripts   - Add a migrate fragment to sanitize the host comment for illegal characters
372  - Enable speedier time synchronisation for suspended VMs, this can be     in the server-manager.
373    configured by a new db key for ntpd, SupportLargeDrift.  
374  - Obsolete KeepAlive and replace by ClientAliveInterval and     Sanitize existing hostname records, Add a validator for the comment in the
375    ClientAliveCountMax to prevent SSH sessions from being timed out by  hostname field
376    network inactivity.  
377  - New feature: Default Cipher to blowfish for ssh configuration.     Code done by Charlie Brady <charlieb-contribs-bugzilla@budge.apana.org.au>
378  - Add directive "PersistentPasswd off" to proftpd configuration.  
379  - Quota panel should allow non-integers but only accept uppercase units.     and Huib <sme@artixdesign.com>
380  - Obsolete magic_quotes_gpc settings.  
381  - Set default timezone for php version 5.3.3.   - Force SSL following ibays settings to the relevant domain
382    
383     - Move mysql logging to multilog
384    
385     - Allow ntp status queries from localhost.
386    
387     - Avoid uninitialized variable warning from last update.
388    
389     - Add ssh-autoblock for external interface - patch by Chris Maltby
390    
391     - Update to upstream version 2.3.4, which fixes CVE-2012-3478 and
392       CVE-2012-2252
393    
394     - Updated rsync-protocol.patch to fix CVE-2012-2251, and to apply on top of
395       the
396    
397       CVE-2012-3478 and CVE-2012-2252 fixes.
398    
399     - Updated makefile.patch to preserve RPM CFLAGS.
400    
401     - Added command-line-error.patch (from Debian), correcting error message
402    
403       generated when insecure command line option is used (CVE-2012-3478 fix
404    
405       regression).
406    
407     - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
408    
409     - Add patch for rsync3 compat (#485946)
410    
411     - Update smeserver-release for beta1 of SME Server 8.2
412    
413     - Set the check update frequency of smecontribs through the server-manager
414    
415     - Add a default Yum db property for check4contribsupdates
416    
417     - Added a check-update for the smecontribs repository
418    
419    
420    
421    
422    
423  General features  General features
424    
425  ================  ================
426    
 - Based on CentOS 5.7 and all available updates  
427    
 $Id: README.txt,v 1.10 2011/09/29 06:11:45 wellsi Exp $  
428    
429    - Based on CentOS 5.11 and all available updates
430    
431    
432    
433    Terry Fage
434    
435    On behalf of the SME Server development team


Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed