/[smeserver]/cdrom.image/sme8/README.txt
ViewVC logotype

Diff of /cdrom.image/sme8/README.txt

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.8 by wellsi, Wed Aug 18 09:20:11 2010 UTC Revision 1.32 by stephdl, Sun Mar 22 08:37:02 2015 UTC
# Line 1  Line 1 
1  SME Server 8.0 Beta 6 Release Notes  Koozali SME Server 8.2 Release Notes
2  ===================================  
3    ====================================
4    
5    
6    
7    18 March 2015
8    
9    
10    
11    The Koozali SME Server (SME Server) development team is pleased to announce
12    
13    the release of SME Server 8.2 which is based on CentOS 5.11
14    
 August 20 2010  
15    
 The SME Server development team is pleased to announce the release of  
 SME Server 8.0beta6 which is based on CentOS 5.5 and will be the next  
 major release of SME Server. This is the final planned Beta for SME 8.  
16    
17  Bug reports and reports of potential bugs should be raised in the bug  Bug reports and reports of potential bugs should be raised in the bug
18    
19  tracker (and only there, please);  tracker (and only there, please);
20    
21    
22    
23      http://bugs.contribs.org/      http://bugs.contribs.org/
24    
 ***************************  
 Testers Please Note the following...  
25    
 1. SME Server users currently on SME Server 8.0 Beta 5 have to perform  
    one manual step before upgrading due to the change of samba.  
    See http://wiki.contribs.org/SME_Server_8#Upgrading_samba  
   
 2. SME Server users should not upgrade production servers to this  
    release but those who can are encouraged to load the beta to a  
    dedicated test machine and take part in the testing phase.  
26    
27  3. CentOS 5 has dropped support for i586 and therefore SME Server 8  Download
    will not work on i586 hardware. [See bugzilla:2845]. i586 hardware  
    means processors before and including Intel Pentium, Pentium MMX;  
    AMD K5, K6, K6-II, K6-III and Via C3. i686 architecture processors  
    are Intel Pentium Pro, Pentium II, Pentium III; AMD Athlon,  
    Athlon XP and later.  
28    
29  4. Upgrading from previous releases should only be done on clean  ========
30     machines without contribs or other modifications.  
31    
32    
33    You can download SME Server 8.2 from
34    
35    http://mirror.contribs.org/smeserver/releases/8.2/iso/x86_64/
36    
37    or for other methods see http://wiki.contribs.org/SME_Server:Download
38    
39    
40    
41    Please note it may take up to 48 hours for mirrors to finish syncing,
42    
43    during this time you may experience problems.
44    
 5. Testers are now encouraged to test upgrade paths and to start testing  
    contribs. They are not certain to work so only try on test servers.  
    Please raise all issues found in the bug tracker.  
45    
 6. Some notes on SME 8 including help on upgrades can be found at  
    http://wiki.contribs.org/SME_Server_8  
46    
 7. Please note it may take up to 48 hours for mirrors to finish syncing,  
    during this time you may experience problems.  
    You can download SME8.0 Beta 6 from  
    http://mirror.contribs.org/smeserver/releases/testing/8/iso/i386/  
    or for other methods see http://wiki.contribs.org/SME_Server_8  
47    
 ***************************  
48    
49  About SME Server  About SME Server
50    
51  ================  ================
52    
53    
54    
55  SME Server is the leading Linux distribution for small and medium  SME Server is the leading Linux distribution for small and medium
56  enterprises.  
57    enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
58    
59    a non-profit corporation that exists to provide marketing and legal support
60    
61    for SME Server.
62    
63    
64    
65  SME Server is freely available under the GNU General Public License and  SME Server is freely available under the GNU General Public License and
66    
67  is only possible through the efforts of the SME Server community.  is only possible through the efforts of the SME Server community.
68    
69  However, the availability and quality of SME Server is dependent on  However, the availability and quality of SME Server is dependent on
70    
71  meeting our expenses, such as hosting costs, server hardware, etc.  meeting our expenses, such as hosting costs, server hardware, etc.
72    
73  As such, we ask for a small donation to offset costs and fund further  
74    
75    As such, we ask for a donation to offset costs and fund further development.
76    
77    
78    
79    a) If you are a school, a church, a non-profit organisation or an individual
80    
81    using SME Server for private purposes, we would appreciate you to contribute
82    
83    within your means toward the costs associated with hosting, maintenance and
84    
85  development.  development.
86    
87    
88    
89    b) If you are a company or an integrator and you are deploying SME Server in
90    
91    the course of your work to generate revenue, we expect you to make a donation
92    
93    commensurate with the level of revenue you generate and the number of servers
94    
95    your have in the field. Please, help the project
96    
97    
98    
99  Please visit http://wiki.contribs.org/Donate to donate.  Please visit http://wiki.contribs.org/Donate to donate.
100    
101  Thanks and a plea for help  
102  ==========================  
103    Koozali Inc is happy to supply an invoice for any donations received,
104    
105    simply email treasurer@koozali.org
106    
107    
108    
109    
110    
111    Thanks
112    
113    ======
114    
115    
116    
117  The development team would like to thank all of those who have involved  The development team would like to thank all of those who have involved
 themselves with this beta release. At this stage in development the role  
 of testers is vital; the final release date and the stability and  
 quality of the new version depend on full and thorough testing by all  
 levels of users, right from beginners who may be confused by, and draw  
 the developers attention to, insufficiently transparent system design,  
 up to seasoned and skilled users who can probe the system deeply. Bug  
 triage and verification testing needs lots of community involvement;  
 please try to spare some time to this vital aspect of our community's  
 future.  
   
 This release, which is based on a major update of the CentOS Core,  
 contains many new features. Please run Software Installer in Server  
 Manager regularly during testing to be sure your system reflects the  
 latest stage of development.  
118    
119  Major changes in beta 6  themselves with this release.
120  =======================  
121  The policy is to stick with upstream updates unless there are compelling  
122  reasons not to. The number of customers unable to run the software they  
123  want because of the Samba and PHP versions constituted a compelling  
124  reason.  
125    Notes
126  Samba 3x:  
127  The Samba packages have reverted to those provided by CentOS to simplify  =====
128  the support needed. This version of samba provides support for Windows 7  
129  domain logins. http://wiki.contribs.org/SME_Server_8#Upgrading_samba  
130    
131    1. CentOS 5 has dropped support for i586 and therefore SME Server 8.2
132    
133       will not work on i586 hardware. [See bugzilla:2845]. i586 hardware
134    
135       means processors before and including Intel Pentium, Pentium MMX;
136    
137       AMD K5, K6, K6-II, K6-III and Via C3. i686 architecture processors
138    
139       are Intel Pentium Pro, Pentium II, Pentium III; AMD Athlon,
140    
141       Athlon XP and later.
142    
143    
144    
145    2. Some notes on SME Server 8.2 including help on upgrades can be found at
146    
147       http://wiki.contribs.org/SME_Server_8
148    
149    
150    
151    3. Please note Upstream policy on Production Phase 3 for EL5. Only those
152    
153       security updates deemed crucial are now being released upstream for EL5
154    
155       (so also for SME8) The Koozali team recommends that you start moving
156    
157       workloads from SME Server 8 to SME Server 9.
158    
159       Planned EOL for CentOS 5 is Mar 31 2017
160    
161    
162    
163    4. Please note it may take up to 48 hours for mirrors to finish syncing,
164    
165       during this time you may experience problems.
166    
167       You can download SME Server 8.2 from
168    
169       http://mirror.contribs.org/smeserver/releases/8.2/iso/i386/
170    
171       or for other methods see http://wiki.contribs.org/SME_Server_8
172    
173    
174    
175    
176    
177  Changes in this release  Changes in this release
178    
179  =======================  =======================
180    
 This section of this README file lists all package changes carried out  
 by SME-associated developers since SME Server 8.0 Beta 5.  
181    
182  The package changelogs often included earlier changes and changes  
183  carried out by non-SME-associated developers; these were removed to  Packages altered by Centos, Redhat, and Fedora-associated developers are
184  shorten the list. Packages recently altered by CentOS, Redhat, and  
185  Fedora-associated developers are not included.  not included.
186    
187    
188    
189    
190    
191  Backups  Backups
192    
193  -------  -------
 - Restoring from a Workstation Backup showed a false failure.  
 - Workstation Backup emails include a To: header.  
 - Workstation Backup includes the system name and also indicates failure  
   if applicable in the subject line of the email.  
 - Update backup instructions in server-manager.  
 - The Workstation Backup panel now removes leading and trailing spaces  
   from the hostname.  
 - Fix removal of leading slash in storage location.  
 - The Workstation backup to USB panel no longer presents mounted disks.  
 - Only define Workstation Backup temporary directory once.  
 - Remove relocate_samba_file and all references to /etc/smbpasswd.  
194    
195  File Server   - Add pkgconfig dar
196  -----------  
197  - Use samba3x package for windows 7 compatibility.   - New Upstream Version dar
198  - Remove require strong key part of regedit file.  
199  - Backup all the samba tdb files.   - Add requires nfs-utils
200  - Add dependency /usr/bin/tdbbackup.  
201     - The nfs service is neither started or allowed to start
202    
203     - Workstation Backup, do not create folder in /
204    
205    
206    
207    
208    
209    LDAP
210    
211    ----
212    
213     - Make pdbedit output independent from locale and timezone so it can be
214    
215       parsed
216    
217    
218    
219  Localisation  Localisation
220    
221  ------------  ------------
222  - Add Chinese (Taiwan) language (zh_TW).  
223  - Add Hebrew language (he).   - apply locale 2015-03-14 patch from pootle
224  - Fix translation of local nic string in console.  
225  - Other fixes include updated translations for the existing languages.   - apply locale 2014-12-25 patch from pootle
226    
227     - apply locale 2014-03-08 patch from pootle
228    
229    
230    
231  Mail Server  Mail Server
232    
233  -----------  -----------
234  - Disable by default the SMTP transparent proxy, however upgrades from  
235    sme7 will retain old default behavior where SMTP connections will be   - Updated to ClamAV release 0.98.6
236    transparently proxied.  
237  - Implement a database key (TlsBeforeAuth) to allow SMTP   - Updated to release ClamAV 0.98.5
238    Authentication without TLS. The default remains to require TLS before  
239    Auth (introduced in SME 8Beta5).   - Add BuildRequires for openssl-devel and libxml2-devel
240  - Update qpsmtpd to 0.84  
241  - Config setting to enable SMTP to ISP Authentication Debug now uses   - Remove Packager and Vendor from ClamAV spec file.
242    enabled/disabled for clarity.  
243  - Fix HeloHost patch.   - Updates to release ClamAV 0.98.4.
244  - Remove cron.daily jobs that are no longer needed.  
245  - Update email addresses on domain change.   - Updated to release ClamAV 0.98.3.
246  - Work around how qpsmtpd tags spam email.  
247     - Remove the patch e-smith-email-5.2.0-UEsDBBQDAAAIA-new-signature.patch
248    
249     - Add new zip file signatures to default mailpatterns database :
250       UEsDBBQDAAAIA
251    
252     - Add new zip file signatures to default mailpatterns database : ZIPVOSX &
253       ZIPV3
254    
255     - Fix stunnel path
256    
257     - Use stunnel instead of sslio to support TLS
258    
259     - Modify whitelist_soft transaction to interact with dnsbl filter
260    
261       by John Crisp <jcrisp@safeandsoundit.co.uk>
262    
263     - Remove DENYSOFT on SPF softfail qpsmtpd
264    
265     - Increase MemLimit to 700M for clamav-0.98
266    
267     - Remove dnsbl.ahbl.org RBL List
268    
269    
270    
271  Server manager  Server manager
272    
273  --------------  --------------
 - Improve the HTML formatting of the modify quota panel.  
 - Remove empty <p> tag from footer template.  
274    
275  Webmail and Groupware   - Resync with upstream php53, which include
276  ---------------------  
277  - Updated to Horde 3.3.8      fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710
278  - Updated to imp 4.3.7  
279  - Updated to Ingo 1.2.4      xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
280  - Updated to Turba 2.3.4  
281  - Add the ability to have a local LDAP Group Address book.      core: fix integer overflow in unserialize() CVE-2014-3669
282  - Templated attributes.php to add ability to have multiple email  
283    values for a contact. Separate entries with a comma and a space.      exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
284  - Update to freebusy info in sources.php  
285  - Update to remove turbaContact info that SME is not using.   - Resync with upstream php53, which include
286    
287        spl: fix use-after-free in ArrayIterator due to object
288    
289        change during sorting. CVE-2014-4698
290    
291        spl: fix use-after-free in SPL Iterators. CVE-2014-4670
292    
293        gd: fix NULL pointer dereference in gdImageCreateFromXpm.
294    
295        CVE-2014-2497
296    
297        fileinfo: fix incomplete fix for CVE-2012-1571 in
298    
299        cdf_read_property_info. CVE-2014-3587
300    
301        core: fix incomplete fix for CVE-2014-4049 DNS TXT
302    
303        record parsing. CVE-2014-3597
304    
305     - Resync with upstream php53, which include
306    
307        core: type confusion issue in phpinfo(). CVE-2014-4721
308    
309        date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
310    
311        core: fix heap-based buffer overflow in DNS TXT record parsing.
312    
313        CVE-2014-4049
314    
315        core: unserialize() SPL ArrayObject / SPLObjectStorage type
316    
317        confusion flaw. CVE-2014-3515
318    
319        fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
320    
321        fileinfo: unrestricted recursion in handling of indirect type
322    
323        rules. CVE-2014-1943
324    
325        fileinfo: out of bounds read in CDF parser. CVE-2012-1571
326    
327        fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
328    
329        fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
330    
331        fileinfo: cdf_unpack_summary_info() excessive looping
332    
333        DoS. CVE-2014-0237
334    
335        fileinfo: CDF property info parsing nelements infinite
336    
337        loop. CVE-2014-0238
338    
339    
340    
341    
342    
343  Web Server  Web Server
344    
345  ----------  ----------
346  - Default expose_php in php.ini to Off.  
347     - Disable SSLv3
348    
349     - Revert CRIME mitigation patch, as it's not needed
350    
351     - Mitigate CRIME, CVE-2012-4929
352    
353    
354    
355  Other fixes and updates  Other fixes and updates
356    
357  -----------------------  -----------------------
358  - Handle no network interface scenario in console.  
359  - Fix ldap-create errors when adding empty groups.   - When quiting the console app with unsaved changes set the default selected
360  - The LDAP information for admin was not being updated.  
361  - Don't try to save ibay password to LDAP.     answer to NO
362  - Do not allow pool.ntp.org as NTP server.  
363  - Prepare for obsoletion of magic_quotes* when we supply PHP 5.3.0+   - Add a verification in the console of number of pptp clients against ip
364  - Fix missing space causing errors parsing the iptables rules.     allowed in dhcpd
365  - Migrate MirrorList properties to sme8 repos.  
366  - Remove BaseURL properties if migrating to sme8 repos.   - Add a verification in remoteaccess panel of number of pptp clients against
367  - Remove yum databases and repodata if migrating to sme8 repos.     ip allowed in dhcpd
368  - Enable cpuspeed by default.  
369  - Fix scriplet error in e-smith-service script when service is disabled.   - Reset primary ibay default type
370  - Allow use of CNAME in remote hosts.  
371  - Add Obsoletes for php5-cgi-{imap,ldap,mysql,pear,xmlrpc}.   - Add a migrate fragment to sanitize the host comment for illegal characters
372       in the server-manager.
373    
374       Sanitize existing hostname records, Add a validator for the comment in the
375    hostname field
376    
377       Code done by Charlie Brady <charlieb-contribs-bugzilla@budge.apana.org.au>
378    
379       and Huib <sme@artixdesign.com>
380    
381     - Force SSL following ibays settings to the relevant domain
382    
383     - Move mysql logging to multilog
384    
385     - Allow ntp status queries from localhost.
386    
387     - Avoid uninitialized variable warning from last update.
388    
389     - Add ssh-autoblock for external interface - patch by Chris Maltby
390    
391     - Update to upstream version 2.3.4, which fixes CVE-2012-3478 and
392       CVE-2012-2252
393    
394     - Updated rsync-protocol.patch to fix CVE-2012-2251, and to apply on top of
395       the
396    
397       CVE-2012-3478 and CVE-2012-2252 fixes.
398    
399     - Updated makefile.patch to preserve RPM CFLAGS.
400    
401     - Added command-line-error.patch (from Debian), correcting error message
402    
403       generated when insecure command line option is used (CVE-2012-3478 fix
404    
405       regression).
406    
407     - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
408    
409     - Add patch for rsync3 compat (#485946)
410    
411     - Update smeserver-release for beta1 of SME Server 8.2
412    
413     - Set the check update frequency of smecontribs through the server-manager
414    
415     - Add a default Yum db property for check4contribsupdates
416    
417     - Added a check-update for the smecontribs repository
418    
419    
420    
421    
422    
423  General features  General features
424    
425  ================  ================
426    
 - Based on CentOS 5.5 and all available updates  
427    
 $Id: README.txt,v 1.7 2010/07/15 07:58:07 wellsi Exp $  
428    
429    - Based on CentOS 5.11 and all available updates
430    
431    
432    
433    Terry Fage
434    
435    On behalf of the SME Server development team


Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed