/[smeserver]/cdrom.image/sme8/README.txt
ViewVC logotype

Diff of /cdrom.image/sme8/README.txt

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.16 by wellsi, Wed Jul 3 02:58:39 2013 UTC Revision 1.33 by vip-ire, Fri Mar 27 08:26:14 2015 UTC
# Line 1  Line 1 
1  SME Server 8.1 Release Notes  Koozali SME Server 8.2 Release Notes
2  ============================  ====================================
3    
4  04 July 2013  18 March 2015
5    
6  The SME Server development team is pleased to announce the release of  The Koozali SME Server (SME Server) development team is pleased to announce
7  SME Server 8.1 which is based on CentOS 5.9  the release of SME Server 8.2 beta2 which is based on CentOS 5.11
8    
9  Bug reports and reports of potential bugs should be raised in the bug  Bug reports and reports of potential bugs should be raised in the bug
10  tracker (and only there, please);  tracker (and only there, please);
11    
12      http://bugs.contribs.org/      http://bugs.contribs.org/
13    
14    Download
15    ========
16    
17    You can download SME Server 8.2 beta2 from
18    http://mirror.contribs.org/smeserver/releases/testing/8.2.beta2/
19    or for other methods see http://wiki.contribs.org/SME_Server:Download
20    
21    Please note it may take up to 48 hours for mirrors to finish syncing,
22    during this time you may experience problems.
23    
24    
25  About SME Server  About SME Server
26  ================  ================
27    
28  SME Server is the leading Linux distribution for small and medium  SME Server is the leading Linux distribution for small and medium
29  enterprises.  enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
30    a non-profit corporation that exists to provide marketing and legal support
31    for SME Server.
32    
33    
34  SME Server is freely available under the GNU General Public License and  SME Server is freely available under the GNU General Public License and
35  is only possible through the efforts of the SME Server community.  is only possible through the efforts of the SME Server community.
36  However, the availability and quality of SME Server is dependent on  However, the availability and quality of SME Server is dependent on
37  meeting our expenses, such as hosting costs, server hardware, etc.  meeting our expenses, such as hosting costs, server hardware, etc.
38    
39  As such, we ask for a small donation to offset costs and fund further  As such, we ask for a donation to offset costs and fund further development.
40    
41    a) If you are a school, a church, a non-profit organisation or an individual
42    using SME Server for private purposes, we would appreciate you to contribute
43    within your means toward the costs associated with hosting, maintenance and
44  development.  development.
45    
46    b) If you are a company or an integrator and you are deploying SME Server in
47    the course of your work to generate revenue, we expect you to make a donation
48    commensurate with the level of revenue you generate and the number of servers
49    your have in the field. Please, help the project
50    
51  Please visit http://wiki.contribs.org/Donate to donate.  Please visit http://wiki.contribs.org/Donate to donate.
52    
53    Koozali Inc is happy to supply an invoice for any donations received,
54    simply email treasurer@koozali.org
55    
56    
57  Thanks  Thanks
58  ======  ======
59    
60  The development team would like to thank all of those who have involved  The development team would like to thank all of those who have involved
61  themselves with this release.  themselves with this release.
62    
63    
64  Notes  Notes
65  =====  =====
66    
67  1. CentOS 5 has dropped support for i586 and therefore SME Server 8  1. CentOS 5 has dropped support for i586 and therefore SME Server 8.2
68     will not work on i586 hardware. [See bugzilla:2845]. i586 hardware     will not work on i586 hardware. [See bugzilla:2845]. i586 hardware
69     means processors before and including Intel Pentium, Pentium MMX;     means processors before and including Intel Pentium, Pentium MMX;
70     AMD K5, K6, K6-II, K6-III and Via C3. i686 architecture processors     AMD K5, K6, K6-II, K6-III and Via C3. i686 architecture processors
71     are Intel Pentium Pro, Pentium II, Pentium III; AMD Athlon,     are Intel Pentium Pro, Pentium II, Pentium III; AMD Athlon,
72     Athlon XP and later.     Athlon XP and later.
73    
74  2. Some notes on SME 8 including help on upgrades can be found at  
75    2. Some notes on SME Server 8.2 including help on upgrades can be found at
76     http://wiki.contribs.org/SME_Server_8     http://wiki.contribs.org/SME_Server_8
77    
78  3. Please note it may take up to 48 hours for mirrors to finish syncing,  
79    3. Please note Upstream policy on Production Phase 3 for EL5. Only those
80       security updates deemed crucial are now being released upstream for EL5
81       (so also for SME8) The Koozali team recommends that you start moving
82       workloads from SME Server 8 to SME Server 9.
83       Planned EOL for CentOS 5 is Mar 31 2017
84    
85    
86    4. Please note it may take up to 48 hours for mirrors to finish syncing,
87     during this time you may experience problems.     during this time you may experience problems.
88     You can download SME8.1 from     You can download SME Server 8.2 from
89     http://mirror.contribs.org/smeserver/releases/8/iso/i386/     http://mirror.contribs.org/smeserver/releases/8.2/iso/i386/
90     or for other methods see http://wiki.contribs.org/SME_Server_8     or for other methods see http://wiki.contribs.org/SME_Server_8
91    
 Major changes since 8.0  
 =======================  
 * TBD  
   
92    
93  Changes in this release  Changes in this release
94  =======================  =======================
# Line 65  not included. Line 98  not included.
98    
99  Backups  Backups
100  -------  -------
101  - Add second sleep to fix MS Vista issues, patch by Terry Fage   - Add pkgconfig dar
102  - Allow full backup to occur on Sunday   - New Upstream Version dar
103  - Console USB Backup, allow user setting of compression level   - Add requires nfs-utils
104     - The nfs service is neither started or allowed to start
105     - Workstation Backup, do not create folder in /
106    
 File Server  
 -----------  
 - Revert previous change.  
 - Add ability to configure waiting for network Win7 registry option  
 - Remove samba_audit specific loglotate configuration  
 - Enable smb auditing per ibay  
 - Update dependency to /usr/bin/tdbbackup12  
107    
108  LDAP (Optional in SME 8, and considered experimental)  LDAP
109  ----  ----
110     - Make pdbedit output independent from locale and timezone so it can be
111       parsed
112    
113    
114  Localisation  Localisation
115  ------------  ------------
116  *** NONE ***   - apply locale 2015-03-14 patch from pootle
117     - apply locale 2014-12-25 patch from pootle
118     - apply locale 2014-03-08 patch from pootle
119    
120    
121  Mail Server  Mail Server
122  -----------  -----------
123  - Always enable imap, listen on the loopback if disabled   - Updated to ClamAV release 0.98.6
124  - Avoid use of unitialised variables in smtp migrate fragments   - Add BuildRequires for openssl-devel and libxml2-devel
125  - Allow smtp_auth_proxy to use port 587 with STARTTLS, by Charlie Brady   - Remove Packager and Vendor from ClamAV spec file.
126  - Allow blacklist of SMTP AUTH methods, replaces previous patch   - Add new zip file signatures to default mailpatterns database : ZIPVOSX &
127  - Remove imap-relocate-maildirs action as obsolete and slow     ZIPV3
128  - Don't use SSL over loopback   - Fix stunnel path
129  - Easier to read version of softlimit patch   - Use stunnel instead of sslio to support TLS
130  - More robust version of softlimit patch   - Modify whitelist_soft transaction to interact with dnsbl filter
131  - Softlimit is now a database variable for pop3 and pop3s     by John Crisp <jcrisp@safeandsoundit.co.uk>
132  - Reverse change in Template Qmail MaxMessageSize   - Remove DENYSOFT on SPF softfail qpsmtpd
133  - modify domain style pseudonyms to point to the correct user, by Filippo Carletti   - Increase MemLimit to 700M for clamav-0.98
134  - Template Qmail MaxMessageSize   - Remove dnsbl.ahbl.org RBL List
 - smeserver-qpsmtpd reads MaxMessageSize prop of spamassassin and adds it  
 to the arguments of the plugin if defined, patch by Daniel  
 - Revert the 2.2.0-14 change and fix properly in e-smith-base  
 - tls ciphers defaults to disallow SSLv2  
 - Reverse changes in 2.2.0-6 and fix how qpsmtpd tags spam email, codes by Charlie Brady  
135    
 Server manager  
 --------------  
 - Do not load mod_ssl  
 - Correct processing of server-manager URL  
 - Fix more uninitialized warnings from HTML.pm, from Charlie Brady  
 - Remove log noise from Create starter web site panel  
136    
137  Webmail and Groupware  PHP
138  ---------------------  --------------
139     - Resync with upstream php53, which include
140        fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710
141        xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
142        core: fix integer overflow in unserialize() CVE-2014-3669
143        exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
144     - Resync with upstream php53, which include
145        spl: fix use-after-free in ArrayIterator due to object
146        change during sorting. CVE-2014-4698
147        spl: fix use-after-free in SPL Iterators. CVE-2014-4670
148        gd: fix NULL pointer dereference in gdImageCreateFromXpm.
149        CVE-2014-2497
150        fileinfo: fix incomplete fix for CVE-2012-1571 in
151        cdf_read_property_info. CVE-2014-3587
152        core: fix incomplete fix for CVE-2014-4049 DNS TXT
153        record parsing. CVE-2014-3597
154     - Resync with upstream php53, which include
155        core: type confusion issue in phpinfo(). CVE-2014-4721
156        date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
157        core: fix heap-based buffer overflow in DNS TXT record parsing.
158        CVE-2014-4049
159        core: unserialize() SPL ArrayObject / SPLObjectStorage type
160        confusion flaw. CVE-2014-3515
161        fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
162        fileinfo: unrestricted recursion in handling of indirect type
163        rules. CVE-2014-1943
164        fileinfo: out of bounds read in CDF parser. CVE-2012-1571
165        fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
166        fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
167        fileinfo: cdf_unpack_summary_info() excessive looping
168        DoS. CVE-2014-0237
169        fileinfo: CDF property info parsing nelements infinite
170        loop. CVE-2014-0238
171    
172    
173  Web Server  Web Server
174  ----------  ----------
175  - Disable index listing of Apache icons folder   - Disable SSLv3
176    
177    
178  Other fixes and updates  Other fixes and updates
179  -----------------------  -----------------------
180  - Use UTF-8 in the console, by Daniel Berteaud   - When quiting the console app with unsaved changes set the default selected
181  - Update ServerName (Samba netbios name) when SystemName is updated     answer to NO
182  - Remove old System Name from the Hosts DB, by Charlie Brady   - Add a verification in the console of number of pptp clients against ip
183  - Prevent emailing about the normal, weekly, checks of RAID arrays,     allowed in dhcpd
184  by Mark Casey   - Add a verification in remoteaccess panel of number of pptp clients against
185  - Fix init-account script when LDAP auth is enabled     ip allowed in dhcpd
186  - Fix group creation/modification when LDAP auth is enabled   - Reset primary ibay default type
187  - Add_template_to_ssl.pem   - Add a migrate fragment to sanitize the host comment for illegal characters
188  - Ensure existing_hwaddr is always initialized     in the server-manager.
189  - In the console refer to removable media instead of USB disk     Sanitize existing hostname records, Add a validator for the comment in the
190  - Optimize user-modify-unix script and link it in bootstrap-ldap-save     hostname field
191  - Post-upgrades not fired after restore from console     Code done by Charlie Brady <charlieb-contribs-bugzilla@budge.apana.org.au>
192  - Correction for when DB value is lower than MIN_MEMORY_LIMIT     and Huib <sme@artixdesign.com>
193  - Simplified patch after review comments   - Force SSL following ibays settings to the relevant domain
194  - Updated previous patch to avoid migrate fragment   - Move mysql logging to multilog
195  - Increase memory limit for pppoe to 100Mb   - Allow ntp status queries from localhost.
196  - Template /etc/updatedb.conf   - Avoid uninitialized variable warning from last update.
197  - Make CipherSuite secure by default   - Add ssh-autoblock for external interface - patch by Chris Maltby
198  - D-root is changing its IPv4 address   - Update to upstream version 2.3.4, which fixes CVE-2012-3478 and
199  - Wait for slapd to be ready before running bootstrap-ldap-save     CVE-2012-2252
200  - Add missing dependency on openldap-servers   - Updated rsync-protocol.patch to fix CVE-2012-2251, and to apply on top of
201  - Fix removing old BDB log files     the
202  - Remove unused BDB log files     CVE-2012-3478 and CVE-2012-2252 fixes.
203  - Improve error checking in isValidIP   - Updated makefile.patch to preserve RPM CFLAGS.
204  - Prevent multiple instances of the masq script running,   - Added command-line-error.patch (from Debian), correcting error message
205  patch by Charlie Brady     generated when insecure command line option is used (CVE-2012-3478 fix
206  - Force magic_quotes Off     regression).
207  - Ensure Deny from all is on its own line in 15LimitLOGIN   - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
208  - Workaround a deficiency in the proftpd package where it doesn't   - Add patch for rsync3 compat (#485946)
209  handle long lines correctly in its configuration file.   - Update smeserver-release for beta1 of SME Server 8.2
210  Fix submitted by Charlie Brady   - Set the check update frequency of smecontribs through the server-manager
211  - Remove previous change   - Add a default Yum db property for check4contribsupdates
212  - Add VRoot engine to avoid pam log error   - Added a check-update for the smecontribs repository
213  - Add php53-* provides to provide compatibility  
 - Obsolete php-domxml and php-dom  
 - Update Obsoletes and Conflicts  
214    
215  General features  General features
216  ================  ================
217    
218  - Based on CentOS 5.9 and all available updates  - Based on CentOS 5.11 and all available updates
   
 $Id: README.txt,v 1.15 2012/05/22 07:46:08 wellsi Exp $  
   
219    
220    
221    Terry Fage
222    On behalf of the SME Server development team

Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed