| 1 |
SME Server 8.0 Beta 5 Release Notes |
Koozali SME Server 8.2 Release Notes |
| 2 |
=================================== |
|
| 3 |
|
==================================== |
| 4 |
|
|
| 5 |
|
|
| 6 |
|
|
| 7 |
|
18 March 2015 |
| 8 |
|
|
| 9 |
|
|
| 10 |
|
|
| 11 |
|
The Koozali SME Server (SME Server) development team is pleased to announce |
| 12 |
|
|
| 13 |
|
the release of SME Server 8.2 which is based on CentOS 5.11 |
| 14 |
|
|
|
March 7 2010 |
|
| 15 |
|
|
|
The SME Server development team is pleased to announce the release of |
|
|
SME Server 8.0beta5 which is based on CentOS 5.4 and will be the next |
|
|
major release of SME Server. |
|
|
|
|
|
*************************** |
|
|
SME Server users should not upgrade production servers to this release |
|
|
but those who can are encouraged to load the beta to a dedicated test |
|
|
machine and take part in the testing phase. |
|
|
*************************** |
|
| 16 |
|
|
| 17 |
Bug reports and reports of potential bugs should be raised in the bug |
Bug reports and reports of potential bugs should be raised in the bug |
| 18 |
|
|
| 19 |
tracker (and only there, please); |
tracker (and only there, please); |
| 20 |
|
|
| 21 |
|
|
| 22 |
|
|
| 23 |
http://bugs.contribs.org/ |
http://bugs.contribs.org/ |
| 24 |
|
|
|
*************************** |
|
|
Testers Please Note the following... |
|
| 25 |
|
|
|
1. CentOS 5 has dropped support for i586 and therefore SME Server 8 |
|
|
will not work on i586 hardware. [See bugzilla:2845]. i586 hardware |
|
|
means processors before and including Intel Pentium, Pentium MMX; |
|
|
AMD K5, K6, K6-II, K6-III and Via C3. i686 architecture processors |
|
|
are Intel Pentium Pro, Pentium II, Pentium III; AMD Athlon, |
|
|
Athlon XP and later. |
|
| 26 |
|
|
| 27 |
2. Upgrading from previous releases should only be done on clean |
Download |
| 28 |
machines without contribs or other modifications. Issues with |
|
| 29 |
upgrading from clean SME machines can be reported in the bug |
======== |
| 30 |
tracker, but detailed reviews of upgrading paths will not start |
|
| 31 |
until Release Candidate versions are made available. |
|
| 32 |
|
|
| 33 |
|
You can download SME Server 8.2 from |
| 34 |
|
|
| 35 |
|
http://mirror.contribs.org/smeserver/releases/8.2/iso/x86_64/ |
| 36 |
|
|
| 37 |
|
or for other methods see http://wiki.contribs.org/SME_Server:Download |
| 38 |
|
|
| 39 |
|
|
| 40 |
|
|
| 41 |
|
Please note it may take up to 48 hours for mirrors to finish syncing, |
| 42 |
|
|
| 43 |
|
during this time you may experience problems. |
| 44 |
|
|
| 45 |
|
|
|
Some notes on upgrading from Release 7.4 and release 7.0, 7.1, and |
|
|
7.2 versions can be found at http://wiki.contribs.org/SME_Server_8 |
|
| 46 |
|
|
|
You can download SME8.0 Beta 5 from |
|
|
http://mirror.contribs.org/smeserver/releases/testing/8/iso/i386/ |
|
| 47 |
|
|
|
*************************** |
|
| 48 |
|
|
| 49 |
About SME Server |
About SME Server |
| 50 |
|
|
| 51 |
================ |
================ |
| 52 |
|
|
| 53 |
|
|
| 54 |
|
|
| 55 |
SME Server is the leading Linux distribution for small and medium |
SME Server is the leading Linux distribution for small and medium |
|
enterprises. |
|
| 56 |
|
|
| 57 |
SME Server is freely available under the GNU General Public License |
enterprises. SME Server is brought to you by Koozali Foundation, Inc., |
| 58 |
and is only possible through the efforts of the SME Server community. |
|
| 59 |
|
a non-profit corporation that exists to provide marketing and legal support |
| 60 |
|
|
| 61 |
|
for SME Server. |
| 62 |
|
|
| 63 |
|
|
| 64 |
|
|
| 65 |
|
SME Server is freely available under the GNU General Public License and |
| 66 |
|
|
| 67 |
|
is only possible through the efforts of the SME Server community. |
| 68 |
|
|
| 69 |
However, the availability and quality of SME Server is dependent on |
However, the availability and quality of SME Server is dependent on |
| 70 |
|
|
| 71 |
meeting our expenses, such as hosting costs, server hardware, etc. |
meeting our expenses, such as hosting costs, server hardware, etc. |
| 72 |
|
|
| 73 |
As such, we ask for a small donation to offset costs and fund further |
|
| 74 |
|
|
| 75 |
|
As such, we ask for a donation to offset costs and fund further development. |
| 76 |
|
|
| 77 |
|
|
| 78 |
|
|
| 79 |
|
a) If you are a school, a church, a non-profit organisation or an individual |
| 80 |
|
|
| 81 |
|
using SME Server for private purposes, we would appreciate you to contribute |
| 82 |
|
|
| 83 |
|
within your means toward the costs associated with hosting, maintenance and |
| 84 |
|
|
| 85 |
development. |
development. |
| 86 |
|
|
| 87 |
|
|
| 88 |
|
|
| 89 |
|
b) If you are a company or an integrator and you are deploying SME Server in |
| 90 |
|
|
| 91 |
|
the course of your work to generate revenue, we expect you to make a donation |
| 92 |
|
|
| 93 |
|
commensurate with the level of revenue you generate and the number of servers |
| 94 |
|
|
| 95 |
|
your have in the field. Please, help the project |
| 96 |
|
|
| 97 |
|
|
| 98 |
|
|
| 99 |
Please visit http://wiki.contribs.org/Donate to donate. |
Please visit http://wiki.contribs.org/Donate to donate. |
| 100 |
|
|
| 101 |
|
|
| 102 |
Thanks and a plea for help |
|
| 103 |
========================== |
Koozali Inc is happy to supply an invoice for any donations received, |
| 104 |
|
|
| 105 |
|
simply email treasurer@koozali.org |
| 106 |
|
|
| 107 |
|
|
| 108 |
|
|
| 109 |
|
|
| 110 |
|
|
| 111 |
|
Thanks |
| 112 |
|
|
| 113 |
|
====== |
| 114 |
|
|
| 115 |
|
|
| 116 |
|
|
| 117 |
The development team would like to thank all of those who have involved |
The development team would like to thank all of those who have involved |
|
themselves with this beta release. At this stage in development the role |
|
|
of testers is vital; the final release date and the stability and quality |
|
|
of the new version depend on full and thorough testing by all levels of |
|
|
users, right from beginners who may be confused by, and draw the developers |
|
|
attention to, insufficiently transparent system design, up to seasoned |
|
|
and skilled users who can probe the system deeply. Bug triage and |
|
|
verification testing needs lots of community involvement; please try to |
|
|
spare some time to this vital aspect of our community's future. |
|
|
|
|
|
This release, which is based on a major update of the Centos Core, contains |
|
|
many new features. Please run Software Installer in Server Manager |
|
|
regularly during testing to be sure your system reflects the latest stage |
|
|
of development. |
|
| 118 |
|
|
| 119 |
Major changes in beta 5 |
themselves with this release. |
| 120 |
======================= |
|
| 121 |
The policy is to stick with upstream updates unless there are compelling reasons |
|
| 122 |
not to. The number of customers unable to run the software they want because of |
|
| 123 |
the Samba and PHP versions constituted a compelling reason. |
|
| 124 |
|
|
| 125 |
Samba 3.4.3: has been updated from sources provided by ClearOS. |
Notes |
| 126 |
This version of samba provides support for Windows 7 domain logins. |
|
| 127 |
|
===== |
| 128 |
PHP 5.2.10: is provided by the Red Hat Application Stack v2. |
|
| 129 |
5.2 is needed by recent web applications such as OScommerce. |
|
| 130 |
|
|
| 131 |
LDAP authentication: third party applications can authenticate against |
1. CentOS 5 has dropped support for i586 and therefore SME Server 8.2 |
| 132 |
SME Users passwords. LDAP is still read only, built automatically |
|
| 133 |
from SME databases. |
will not work on i586 hardware. [See bugzilla:2845]. i586 hardware |
| 134 |
|
|
| 135 |
|
means processors before and including Intel Pentium, Pentium MMX; |
| 136 |
|
|
| 137 |
|
AMD K5, K6, K6-II, K6-III and Via C3. i686 architecture processors |
| 138 |
|
|
| 139 |
|
are Intel Pentium Pro, Pentium II, Pentium III; AMD Athlon, |
| 140 |
|
|
| 141 |
|
Athlon XP and later. |
| 142 |
|
|
| 143 |
|
|
| 144 |
|
|
| 145 |
|
2. Some notes on SME Server 8.2 including help on upgrades can be found at |
| 146 |
|
|
| 147 |
|
http://wiki.contribs.org/SME_Server_8 |
| 148 |
|
|
| 149 |
|
|
| 150 |
|
|
| 151 |
|
3. Please note Upstream policy on Production Phase 3 for EL5. Only those |
| 152 |
|
|
| 153 |
|
security updates deemed crucial are now being released upstream for EL5 |
| 154 |
|
|
| 155 |
|
(so also for SME8) The Koozali team recommends that you start moving |
| 156 |
|
|
| 157 |
|
workloads from SME Server 8 to SME Server 9. |
| 158 |
|
|
| 159 |
|
Planned EOL for CentOS 5 is Mar 31 2017 |
| 160 |
|
|
| 161 |
|
|
| 162 |
|
|
| 163 |
|
4. Please note it may take up to 48 hours for mirrors to finish syncing, |
| 164 |
|
|
| 165 |
|
during this time you may experience problems. |
| 166 |
|
|
| 167 |
|
You can download SME Server 8.2 from |
| 168 |
|
|
| 169 |
|
http://mirror.contribs.org/smeserver/releases/8.2/iso/i386/ |
| 170 |
|
|
| 171 |
|
or for other methods see http://wiki.contribs.org/SME_Server_8 |
| 172 |
|
|
| 173 |
|
|
| 174 |
|
|
| 175 |
|
|
| 176 |
|
|
| 177 |
Changes in this release |
Changes in this release |
| 178 |
|
|
| 179 |
======================= |
======================= |
| 180 |
|
|
| 181 |
This section of this README file lists all package changes carried out by |
|
| 182 |
SME-associated developers in 2009 and 2010 where the most recent changes |
|
| 183 |
to the package are dated after February 2010. The package changelogs often |
Packages altered by Centos, Redhat, and Fedora-associated developers are |
| 184 |
included earlier changes and changes carried out by non-SME-associated |
|
| 185 |
developers; these were removed to shorten the list. Packages recently |
not included. |
| 186 |
altered by Centos, Redhat, and Fedora-associated developers are not |
|
| 187 |
included. |
|
| 188 |
|
|
| 189 |
e-smith-backup |
|
| 190 |
- Improved upgrade compatibility, remove .orig [SME: 4809] |
|
| 191 |
- fix mount point for verify [SME: 5765] |
Backups |
| 192 |
- create mount point for verify [SME: 5765] |
|
| 193 |
- remove comment re smbpasswd being last [SME: 5600] |
------- |
| 194 |
- Fix mounting usb disks [SME: 4809] |
|
| 195 |
- Don't backup more than once per day [SME: 5445] |
- Add pkgconfig dar |
| 196 |
- Fix full backup on Sunday diplayed as Everyday [SME: 5623] |
|
| 197 |
- Add more excludes for compressed filetypes [SME: 4765] |
- New Upstream Version dar |
| 198 |
- Porting Jean-Paul Leclere changes in the SME Server 7 tree to SME Server 8: |
|
| 199 |
- using credentials file for cifs mount [SME: 5442] |
- Add requires nfs-utils |
| 200 |
- workstation backup: add cifs credentials expand to bootstrap-console-save [SME: 5442] |
|
| 201 |
- workstation backup: allow many backups in the same day [SME: 5411] |
- The nfs service is neither started or allowed to start |
| 202 |
- workstation restore: all needed backups must be available before restore [SME: 5397] |
|
| 203 |
- workstation verify: add option to check integrity of backups needed in a full restore [SME: 5405] |
- Workstation Backup, do not create folder in / |
| 204 |
- minor fix in translation [SME: 5407] |
|
| 205 |
|
|
| 206 |
e-smith-base |
|
| 207 |
- Restate smartd dependency. [SME: 5814] |
|
| 208 |
- Fix gettext errors in WAN/LAN subnet error message [SME: 5501] |
|
| 209 |
- Really fix template expansion error [SME: 4528] |
LDAP |
| 210 |
- Fix template expansion error [SME: 4528] |
|
| 211 |
- Improve security by using SHA1 algorithm for certificate signing [SME: 5737] |
---- |
| 212 |
- Fix eth? swapping [SME: 4528] |
|
| 213 |
- Fix console backup from removable media [SME: 4809] |
- Make pdbedit output independent from locale and timezone so it can be |
| 214 |
- Bump certificate encryption from 1024 bits to 2048 bits [SME: 5735] |
|
| 215 |
- Fix console restore from removable media (Federico Simoncelli) [SME: 4809] |
parsed |
| 216 |
- Add a dummy call so xgettext can pull translated $ifName in console configuration pages. [SME: 5571] |
|
| 217 |
- Translate $ifName in console configuration pages [SME: 5571] |
|
| 218 |
- Prevent IP conflicts between local and external interface in server gateway mode [SME: 5501] |
|
| 219 |
- Clean up: remove unused nonetworkdrivers [SME: 5521] |
Localisation |
| 220 |
|
|
| 221 |
e-smith-devtools |
------------ |
| 222 |
- Fix previous patch [SME: 5538] |
|
| 223 |
- Add compiled python files to the packaged files list [SME: 5538] |
- apply locale 2015-03-14 patch from pootle |
| 224 |
|
|
| 225 |
e-smith-email |
- apply locale 2014-12-25 patch from pootle |
| 226 |
- Use HeloHost (if present) in smtp-auth-proxy.pl [SME: 5680] |
|
| 227 |
- Allow for changing SPAM subject tag through server-manager |
- apply locale 2014-03-08 patch from pootle |
| 228 |
|
|
| 229 |
e-smith-formmagick |
|
| 230 |
- Update path for 64-bit compatibility [SME: 5756] |
|
| 231 |
|
Mail Server |
| 232 |
e-smith-grub |
|
| 233 |
- Remove hiddenmenu entry from grub.conf [SME: 5546] |
----------- |
| 234 |
|
|
| 235 |
e-smith-horde |
- Updated to ClamAV release 0.98.6 |
| 236 |
- Patch to change horde's templated mime_drivers.php file so some additional |
|
| 237 |
settings can be customized [SME: 5224] |
- Updated to release ClamAV 0.98.5 |
| 238 |
- config setprop horde inlineMSWord true|false <-- default is false |
|
| 239 |
- config setprop horde inlineMSExcel true|false <-- default is false |
- Add BuildRequires for openssl-devel and libxml2-devel |
| 240 |
- config setprop horde inlineMSPowerpoint true|false <-- default is false |
|
| 241 |
- config setprop horde inlineWordperfect true|false <-- default is false |
- Remove Packager and Vendor from ClamAV spec file. |
| 242 |
- config setprop horde inlineAudio true|false <-- default is true |
|
| 243 |
- Patch to make sure username is always saved in lowercase to horde db's [SME:5775] |
- Updates to release ClamAV 0.98.4. |
| 244 |
- Upgrade horde templates to reflect changes in Horde 3.3.6 [SME: 5774] |
|
| 245 |
- Really apply patch from previous attempt [SME: 5509] |
- Updated to release ClamAV 0.98.3. |
| 246 |
- Upgrade horde templates to reflect changes in Horde 3.3.5 [SME: 5509] |
|
| 247 |
- Upgrade to horde templates to reflect changes in Horde 3.3.4 [SME: 5372] |
- Remove the patch e-smith-email-5.2.0-UEsDBBQDAAAIA-new-signature.patch |
| 248 |
|
|
| 249 |
e-smith-imp |
- Add new zip file signatures to default mailpatterns database : |
| 250 |
- Patch to template imp's mime_drivers.php file so some settings can be customized [SME: 5224] |
UEsDBBQDAAAIA |
| 251 |
- config setprop horde Limitinlinesize <--default is 1048576 |
|
| 252 |
- config setprop horde inlineHTML true|false <--default is true |
- Add new zip file signatures to default mailpatterns database : ZIPVOSX & |
| 253 |
- config setprop horde inlineImages true|false <--default is true |
ZIPV3 |
| 254 |
- Updated templates to reflect changes in imp 4.3.6 [SME: 5776] |
|
| 255 |
- Updated templates to reflect changes in imp 4.3.5 [SME: 5510] |
- Fix stunnel path |
| 256 |
- Updated templates to reflect changes in imp 4.3.4 [SME: 5371] |
|
| 257 |
|
- Use stunnel instead of sslio to support TLS |
| 258 |
e-smith-ingo |
|
| 259 |
- Update e-smith-ingo templates to reflect changes in Ingo 1.2.3 [SME: 5777] |
- Modify whitelist_soft transaction to interact with dnsbl filter |
| 260 |
- Update e-smith-ingo templates to reflect changes in Ingo 1.2.2 [SME: 5511] |
|
| 261 |
|
by John Crisp <jcrisp@safeandsoundit.co.uk> |
| 262 |
e-smith-ldap |
|
| 263 |
- Fix bug reference in spec file |
- Remove DENYSOFT on SPF softfail qpsmtpd |
| 264 |
- Fix admin user password change (Daniel B.) [SME: 5810] |
|
| 265 |
- Init database if the ldif dump is empty (ie from sme8b) [SME: 5747] |
- Increase MemLimit to 700M for clamav-0.98 |
| 266 |
- revert re-init database [SME:5747] |
|
| 267 |
- re-init readonly database on post-upgrade [SME:5747] |
- Remove dnsbl.ahbl.org RBL List |
| 268 |
- Force SSL/TLS for remote authentication [SME: 5748] |
|
| 269 |
- reuse users_groups_ous.patch2 [SME: 5743] |
|
| 270 |
- Separate groups and users with mailboxRelatedObject [SME:5749] |
|
| 271 |
- Set readonly access [SME:5752] |
Server manager |
| 272 |
- Fix ldap-update action script to user-lock event [SME: 5720] |
|
| 273 |
- Fix Groups entries [SME: 5743] |
-------------- |
| 274 |
- Add Groups entries [SME: 5743] |
|
| 275 |
- Add admin user as a standard user [SME: 5742] |
- Resync with upstream php53, which include |
| 276 |
- Add ldap-update action script to user-lock event [SME: 5720] |
|
| 277 |
- Add ldap authentication and tls support [SME: 5720] |
fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710 |
| 278 |
- Update schema for newer openldap and remove calFBurl [SME: 5159] |
|
| 279 |
- Convert ldif dump [SME: 5446] |
xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668 |
| 280 |
|
|
| 281 |
e-smith-lib |
core: fix integer overflow in unserialize() CVE-2014-3669 |
| 282 |
- adds the hwaddr parameter to probeAdapters() [SME: 4528] |
|
| 283 |
- Update path for 64-bit compatibility [SME: 5756] |
exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670 |
| 284 |
- Really apply previous patch in the spec file. [SME: 5659] |
|
| 285 |
- Add patch (Federico Simoncelli) to prevent re-use of uids. [SME: 5659] |
- Resync with upstream php53, which include |
| 286 |
|
|
| 287 |
e-smith-manager |
spl: fix use-after-free in ArrayIterator due to object |
| 288 |
- Only display error messages intended for admin in server-manager [SME: 5700] |
|
| 289 |
- Fix css validation errors. [SME: 5656] |
change during sorting. CVE-2014-4698 |
| 290 |
- display reconfigure warning once if UnsavedChanges=yes [SME: 5475] |
|
| 291 |
- display reconfigure warning if UnsavedChanges=yes [SME: 5475] |
spl: fix use-after-free in SPL Iterators. CVE-2014-4670 |
| 292 |
|
|
| 293 |
e-smith-portforwarding |
gd: fix NULL pointer dereference in gdImageCreateFromXpm. |
| 294 |
- Enable port forwards to localhost if mode is serveronly [SME: 1003] |
|
| 295 |
- Adjust xml entry in locale [SME: 2379] |
CVE-2014-2497 |
| 296 |
- Add option to limit port forwards from source ip [SME: 2379] |
|
| 297 |
|
fileinfo: fix incomplete fix for CVE-2012-1571 in |
| 298 |
e-smith-qmail |
|
| 299 |
- SMTPSmartHost template incorrectly uses brackets to avoid MX lookups. [SME: 5456] |
cdf_read_property_info. CVE-2014-3587 |
| 300 |
|
|
| 301 |
e-smith-samba |
core: fix incomplete fix for CVE-2014-4049 DNS TXT |
| 302 |
- Create/remove V2 profile directories [SME: 3666] |
|
| 303 |
- Enable bindinterfaces by default [SME: 3325] |
record parsing. CVE-2014-3597 |
| 304 |
- Set recyle bin permissions [SME: 1734] |
|
| 305 |
- Add registry file to server-resources to allow windows 7 to |
- Resync with upstream php53, which include |
| 306 |
join Samba 3.x domains [SME: 5425] |
|
| 307 |
|
core: type confusion issue in phpinfo(). CVE-2014-4721 |
| 308 |
e-smith-turba |
|
| 309 |
- Update to fix turbatype error when using turba LDAP address search [SME: 5772] |
date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712 |
| 310 |
- Update LDAP for changed scope [SME: 2939] |
|
| 311 |
- Updated template files to reflect changes in Turba 2.3.3 [SME: 5778] |
core: fix heap-based buffer overflow in DNS TXT record parsing. |
| 312 |
- Remove previous patch. Will add new partial patch for bug 2939 |
|
| 313 |
- Update LDAP for changed schema [SME: 2939] |
CVE-2014-4049 |
| 314 |
- Updated template files to reflect changes in Turba 2.3.2 [SME: 5512] |
|
| 315 |
|
core: unserialize() SPL ArrayObject / SPLObjectStorage type |
| 316 |
horde |
|
| 317 |
- Updated to Horde 3.3.6 [SME: 5774] |
confusion flaw. CVE-2014-3515 |
| 318 |
- Updated to Horde 3.3.5 [SME: 5509] |
|
| 319 |
- Updated to Horde 3.3.4 [SME: 5372] |
fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270 |
| 320 |
|
|
| 321 |
imp-h3 |
fileinfo: unrestricted recursion in handling of indirect type |
| 322 |
- Updated to imp 4.3.6 [SME: 5776] |
|
| 323 |
- Updated to Imp 4.3.5 [SME: 5510] |
rules. CVE-2014-1943 |
| 324 |
- Updated to Imp 4.3.4 [SME: 5371] |
|
| 325 |
|
fileinfo: out of bounds read in CDF parser. CVE-2012-1571 |
| 326 |
ingo-h3 |
|
| 327 |
- Update to Ingo 1.2.3 [SME: 5777] |
fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479 |
| 328 |
- Update to Ingo 1.2.2 [SME: 5511] |
|
| 329 |
|
fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480 |
| 330 |
initscripts |
|
| 331 |
- Fix typo in /sbin/service patch (Federico Simoncelli) [SME: 5674] |
fileinfo: cdf_unpack_summary_info() excessive looping |
| 332 |
- Exit with zero exit status for services not listed in configuration |
|
| 333 |
database to avoid failures in post scriptlets [SME: 1653] |
DoS. CVE-2014-0237 |
| 334 |
- Merge in SME Server /sbin/e-smith/service wrapper so that only |
|
| 335 |
initscripts which exist in run-level 7 can be run. This ensures |
fileinfo: CDF property info parsing nelements infinite |
| 336 |
that the supervised service is run, if one exists, and protects |
|
| 337 |
against running "service httpd restart" [SME: 61, 1495] |
loop. CVE-2014-0238 |
| 338 |
|
|
| 339 |
perl-CGI-FormMagick |
|
| 340 |
- Fix year in previous changelog entry [SME: 3144] |
|
| 341 |
- Fix unitialized value errors in HTML.pm [SME: 3144] |
|
| 342 |
|
|
| 343 |
php |
Web Server |
| 344 |
- update to 5.2.10 |
|
| 345 |
|
---------- |
| 346 |
qpsmtpd |
|
| 347 |
- Remove spool and log dir from package (in smeserver-qpsmtpd) |
- Disable SSLv3 |
| 348 |
- Don't create smtpd user (unused in sme) [SME: 5815] |
|
| 349 |
- Apply qpsmtpd git changesets to implement custom SPAM |
- Revert CRIME mitigation patch, as it's not needed |
| 350 |
subject prefix [SME: 5031] |
|
| 351 |
- Update pre requires so scripts don't fail on install [SME: 5558] |
- Mitigate CRIME, CVE-2012-4929 |
| 352 |
- Rebase bad_rcptto patch to remove orig file [SME: 5548] |
|
| 353 |
- Change logging in tls init to prevent warnings [SME: 5551] |
|
| 354 |
- Only run/initialize plugins once [SME: 5533] |
|
| 355 |
- Change spool dir permissions and owner to qpsmtpd:clamav |
Other fixes and updates |
| 356 |
- Change log dir permissions and owner to smelog:smelog |
|
| 357 |
- add sme specific patches |
----------------------- |
| 358 |
- Update to 0.83 |
|
| 359 |
- Update to latest release |
- When quiting the console app with unsaved changes set the default selected |
| 360 |
- don't add qpsmtpd to start-up by default |
|
| 361 |
- add apache config file to qpsmtpd-apache package |
answer to NO |
| 362 |
- remove all patches |
|
| 363 |
- use rpm macros for dirs |
- Add a verification in the console of number of pptp clients against ip |
| 364 |
- use a filelist for main package instead of a long list of files |
allowed in dhcpd |
| 365 |
|
|
| 366 |
smeserver-audittools |
- Add a verification in remoteaccess panel of number of pptp clients against |
| 367 |
- Fix regular expression to actually replace the colon with a dot [SME: 5572] |
ip allowed in dhcpd |
| 368 |
- Remove the leading path for yum in newrpms [SME: 5562] |
|
| 369 |
|
- Reset primary ibay default type |
| 370 |
smeserver-clamav |
|
| 371 |
- Setup logrotate for /var/log/clamd/clamscan.log [SME: 5570] |
- Add a migrate fragment to sanitize the host comment for illegal characters |
| 372 |
- Remove create option from logrotate configuration [SME: 5570] |
in the server-manager. |
| 373 |
- Fix version number in previous changelog entry |
|
| 374 |
- Setup logrotate for /var/log/clamd/smeserver-clamscan.log [SME: 5570] |
Sanitize existing hostname records, Add a validator for the comment in the |
| 375 |
- Minor changelog fixes in version number |
hostname field |
| 376 |
- Change default value for HeuristicScanPrecedence to yes [SME: 5204] |
|
| 377 |
|
Code done by Charlie Brady <charlieb-contribs-bugzilla@budge.apana.org.au> |
| 378 |
smeserver-locale |
|
| 379 |
- Revert previous patch to resync with generated patches based on SME Server 7 [SME: 5803] |
and Huib <sme@artixdesign.com> |
| 380 |
- Correct previous changelog entry |
|
| 381 |
- Apply locale 2010-02-27 patch |
- Force SSL following ibays settings to the relevant domain |
| 382 |
- apply locale 2010-02-25 patch |
|
| 383 |
- apply locale 2009-10-27 patch |
- Move mysql logging to multilog |
| 384 |
- Add Thai language [SME: 5466] |
|
| 385 |
- apply locale 2009-08-24 patch |
- Allow ntp status queries from localhost. |
| 386 |
- Add Polish language [SME: 5437] |
|
| 387 |
|
- Avoid uninitialized variable warning from last update. |
| 388 |
smeserver-qpsmtpd |
|
| 389 |
- Enable qpsmtpd RequireResolvableFromHost plugin by default, remove |
- Add ssh-autoblock for external interface - patch by Chris Maltby |
| 390 |
database entry and the database default value [SME: 5617] |
|
| 391 |
- Tie template fragment into event system to have it expanded [SME: 5031] |
- Update to upstream version 2.3.4, which fixes CVE-2012-3478 and |
| 392 |
- Add qpsmtpd template fragment for custom SPAM subject prefix [SME: 5031] |
CVE-2012-2252 |
| 393 |
|
|
| 394 |
smeserver-spamassassin |
- Updated rsync-protocol.patch to fix CVE-2012-2251, and to apply on top of |
| 395 |
- Requires SpamAssassin 3.3.0 [SME: 5741] |
the |
| 396 |
- Remove FuzzyOcr [SME: 5771] |
|
| 397 |
- Use ATrpm package (partially remove previous patch) |
CVE-2012-3478 and CVE-2012-2252 fixes. |
| 398 |
- Requires SpamAssassin 3.3.0 [SME: 5741] |
|
| 399 |
- Remove FuzzyOcr [SME: 5771] |
- Updated makefile.patch to preserve RPM CFLAGS. |
| 400 |
- Run sa-update every two hours and check restart every hour |
|
| 401 |
- Redirect cron job output to logfile to avoid mail noise |
- Added command-line-error.patch (from Debian), correcting error message |
| 402 |
- Fix invalid service name in sa-update [SME: 3304] |
|
| 403 |
|
generated when insecure command line option is used (CVE-2012-3478 fix |
| 404 |
smeserver-support |
|
| 405 |
- Fix css validation errors. [SME: 5656] |
regression). |
| 406 |
- Add support for Polish (pl). [SME: 5434] |
|
| 407 |
- Add support for Thai (th). [SME: 5466] |
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild |
| 408 |
- obsoletes fonts-xorg-base to prevent dragging in unneeded |
|
| 409 |
packages [SME: 5535] |
- Add patch for rsync3 compat (#485946) |
| 410 |
- add VFlib2 to obsoletes list so upgrades work [SME: 5532] |
|
| 411 |
- Add Obsoletes for kernel modules. [SME: 5386] |
- Update smeserver-release for beta1 of SME Server 8.2 |
| 412 |
|
|
| 413 |
smeserver-yum |
- Set the check update frequency of smecontribs through the server-manager |
| 414 |
- only unlink file if we created it [SME: 5476] |
|
| 415 |
- Import only keys not already imported [SME: 5507] |
- Add a default Yum db property for check4contribsupdates |
| 416 |
- set unsaved changes in yum event [SME: 5475] |
|
| 417 |
- move yum warming to sme yum plugin [SME: 5474] |
- Added a check-update for the smecontribs repository |
| 418 |
- ensure file exists before unlinking [SME: 5476] |
|
| 419 |
- remove semicolons from yum plugin |
|
| 420 |
- Add frequency of updates toggle [SME: 3764] |
|
|
- remove stray file |
|
|
|
|
|
smolt |
|
|
- Apply patches so smolt will run under el5 |
|
|
- Apply sme specific patches |
|
|
|
|
|
turba-h3 |
|
|
- Updated to Turba 2.3.3 [SME: 5778] |
|
|
- Updated to Turba 2.3.2 [SME: 5512] |
|
| 421 |
|
|
| 422 |
|
|
| 423 |
General features |
General features |
| 424 |
|
|
| 425 |
================ |
================ |
| 426 |
|
|
|
- Based on CentOS 5.4 and all available updates |
|
| 427 |
|
|
| 428 |
$Id: README.txt,v 1.3 2009/06/16 07:29:58 wellsi Exp $ |
|
| 429 |
|
- Based on CentOS 5.11 and all available updates |
| 430 |
|
|
| 431 |
|
|
| 432 |
|
|
| 433 |
|
Terry Fage |
| 434 |
|
|
| 435 |
|
On behalf of the SME Server development team |
Parent Directory
| 
Revision Log
| 
Revision Graph
| 
Patch
