/[smeserver]/cdrom.image/sme9/README.txt
ViewVC logotype

Diff of /cdrom.image/sme9/README.txt

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.7 by wellsi, Sun Jan 26 05:01:40 2014 UTC Revision 1.14 by vip-ire, Fri Mar 27 08:09:11 2015 UTC
# Line 1  Line 1 
1  SME Server 9.0 Beta 3 Release Notes  Koozali SME Server 9.1 Beta 1 Release Notes
2  ===================================  ====================================
3    
4  27th January 2014  27th March 2015
5    
6  The SME Server development team is pleased to announce the release of  The Koozali SME Server (SME Server) development team is pleased to announce
7  SME Server 9.0 Beta 3 which is based on CentOS 6.5  the release of SME Server 9.1 Beta 1 which is based on CentOS 6.6.
8    
9  Bug reports and reports of potential bugs should be raised in the bug  Bug reports and reports of potential bugs should be raised in the bug
10  tracker (and only there, please);  tracker (and only there, please);
11    
12      http://bugs.contribs.org/      http://bugs.contribs.org/
13    
14    Download
15    ========
16    
17    You can download SME Server 9.1 Beta 1 from
18    http://mirror.contribs.org/smeserver/releases/testing/9.1.beta1/
19    or for other methods see http://wiki.contribs.org/SME_Server:Download
20    
21    Please note it may take up to 48 hours for mirrors to finish syncing,
22    during this time you may experience problems.
23    
24    
25  About SME Server  About SME Server
26  ================  ================
27    
28  SME Server is the leading Linux distribution for small and medium  SME Server is the leading Linux distribution for small and medium
29  enterprises. SME Server is brought to you by Koozali Foundation, Inc.,  enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
30  a non-profit corporation that exists to provide marketing and legal support  a non-profit corporation that exists to provide marketing and legal support
31  for SME Server.  for SME Server.
32    
33  SME Server is freely available under the GNU General Public License and  SME Server is freely available under the GNU General Public License and
# Line 25  However, the availability and quality of Line 36  However, the availability and quality of
36  meeting our expenses, such as hosting costs, server hardware, etc.  meeting our expenses, such as hosting costs, server hardware, etc.
37    
38  As such, we ask for a donation to offset costs and fund further development.  As such, we ask for a donation to offset costs and fund further development.
39    
40  a) If you are a school, a church, a non-profit organisation or an individual  a) If you are a school, a church, a non-profit organisation or an individual
41  using SME Server for private purposes, we would appreciate you to contribute  using SME Server for private purposes, we would appreciate you to contribute
42  within your means toward the costs associated with hosting, maintenance and  within your means toward the costs associated with hosting, maintenance and
43  development.  development.
44    
45  b) If you are a company or an integrator and you are deploying SME Server in  b) If you are a company or an integrator and you are deploying SME Server in
46  the course of your work to generate revenue, we expect you to make a donation  the course of your work to generate revenue, we expect you to make a donation
47  commensurate with the level of revenue you generate and the number of servers  commensurate with the level of revenue you generate and the number of servers
# Line 36  your have in the field. Please, help the Line 49  your have in the field. Please, help the
49    
50  Please visit http://wiki.contribs.org/Donate to donate.  Please visit http://wiki.contribs.org/Donate to donate.
51    
52  Koozali Inc is happy to supply an invoice for any donations received,  Koozali Inc is happy to supply an invoice for any donations received,
53  simply email treasurer@koozali.org  simply email treasurer@koozali.org
54    
55    
 Thanks  
 ======  
   
 The development team would like to thank all of those who have involved  
 themselves with this release.  
   
56  Notes  Notes
57  =====  =====
58    
59  This section will be updated in a following ISO  In-place upgrades from SME 8.x are not supported. It is necessary to backup
60    and then restore.
61    /boot partition is always RAID 1.
62    The spare handling for RAID arrays is not implemented.
63    
64    USB installs are now supported, see:
65    http://wiki.contribs.org/Install_From_USB#SME_Server_9
66    
 Major changes in this release  
 =============================  
   
 The installer has been substantially modified in Beta 2.  
 It now creates the degraded RAID1 array with a single disk install.  
 Some, but not all,  install options are now supported.  
   
 The base has been updated to CentOS 6.5  
   
 The network interface code has been reworked to remove all hardcoding  
 relating to eth0 and eth1.  
67    
68  Changes in this release  Changes in this release
69  =======================  =======================
70    
71  This section will be further updated in a later release  Only the changes since SME Server 9.0 are listed, mainly
72  Currently this only shows changes since SME Server 9.0 Alpha 3 and it is  autogenerated from the changelogs.
 autogenerated from the changelogs. A more human readable version will be  
 written.  
   
73    
74  Packages altered by Centos, Redhat, and Fedora-associated developers are  Packages altered by Centos, Redhat, and Fedora-associated developers are
75  not included.  not included.
# Line 79  not included. Line 77  not included.
77    
78  Backups  Backups
79  -------  -------
80     - dar add pkgconfig
81     - dar new upstream version
82     - Workstation Backup, do not fail backup for mtime/ctime mismatch
83     - Change the sub checkMount() to findmnt Ian Wells <esmith@wellsi.com>
84     - Add requires nfs-utils
85     - The nfs service is neither started or allowed to start
86     - Don't remove the apache group during restore
87    
 - Workstation Backup, do not exclude dar files by default  
   in line with console backup.  
 - Workstation Backup, fix selective restore by requesting array  
   of results from CGI.pm.  
 - Workstation Backup, new method to show files being restored is needed  
   when using dar 2.4.  
 - Simplify the workstation backup report.  
 - Workstation Backup, count backup sets from 1.  
 - Update the text in the Backup panel.  
 - Allow more time for cifs mounts before reporting errors.  
 - Dar updated to 2.4.10.  
 - Workstation Backup, add a choice to delete old backup before or after  
   backup.  
 - Workstation Backup, remove temporary directory on success.  
 - Refactor directory tree creation and removal.  
 - Workstation Backup, inconsistent formatting of host share name in messages.  
 - Workstation Backup, more reliable catalog creation.  
 - Workstation Backup, report cifs mount errors.  
 - Workstation Backup, do not access /proc/mounts  
 - Incremental backup fix.  
 - Workstation Backup, allow spaces in the backup destination.  
   Includes fix for disk usage broken with spaces.  
 - Desktop Backup, allow user setting of compression level.  
 - Use Wake on LAN before starting Backup with DAR.  
 - NFS syntax is deprecated for CIFS mount.  
 - Require cifs-utils and use UNC paths for cifs mount.  
 - Improve text in console backup for success and failure.  
 - Console USB Backup, allow user setting of compression level.  
   Compression level of the console backup is now -6 by default.  
 - Patch to exclude trying to backup aquota.* files so that backups to tape will  
   succeed.  
88    
89  File Server  LDAP
 -----------  
 - Also remove the empty template-begin file in pam.d/proftpd templates.  
 - Remove unused pam templates.  
 - Replace vfs_shadow_copy with vfs_shadow_copy2 for shadow snapshots.  
 - Add template for wide links.  
 - Add templates for max protocol.  
 - Add support for Windows 8 domain joining & user login.  
 - Add windows network performance enhancements registry file.  
 - Update default ServerName in 30smbServerName  
 - Add ability to configure waiting for network Win7 registry option.  
 - Change default Workgroup and Domain to sme-server.  
 - Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint  
   authentication.  
 - Replace vfs_shadow_copy with vfs_shadow_copy2 for shadow snapshots.    
   
 LDAP (Optional in SME 9.0, and considered experimental)  
90  ----  ----
91  - Adjust slapd ACL to change dn.subtree to dn.children.   - Make pdbedit output independent from locale and timezone so it can be
92       parsed
93     - Symlink /etc/init.d/ldap to /usr/bin/sv
94     - Chown all DB files to ldap before staring slapd
95     - Set checkpoint in slapd.conf instead of DB_CONFIG
96     - Stop ldap on shutdown (rc0 and rc6)
97     - Don't overwrite the ldif dump if slapcat's output is empty
98       (code from Charlie Brady)
99     - Run db_recover on startup
100     - Don't wipe LDAP DB when the ldif dump is empty
101    
102  Localisation  Localisation
103  ------------  ------------
104  - Latest translations included.   - apply locale 2015-03-14 patch from pootle
105     - apply locale 2014-12-25 patch from pootle
106    
107  Mail Server  Mail Server
108  -----------  -----------
109  - Only present one auth method at a time, in order, to NET::SMTP.   - ClamAV Updated to release 0.98.6
110  - Remove limit properties from the imaps DB entry.   - Add new zip file signatures to default mailpatterns database : ZIPVOSX & ZIPV3
111  - Apply process limits to dovecot.   - Disable fips mode on stunnel
112  - Include /usr/bin/refreshclam   - Use stunnel instead of sslio to support TLS
113  - Allow webmail-only-local-network.   - Revert forcing TLSv1 patch as it breaks some inbound delivery
114  - Fix handling of messages with no body and no trailing \n after   - Revert whitelist_soft dnsbl as it hasn't been verified yet and we need to
115    headers (eq was used in attempted assignment).     push the fix for TLSv1
116  - Fetchmail multidrop mode follows TCPPort setting.   - Modify whitelist_soft transaction to interact with dnsbl filter
117  - Always enable imap, listen on loopback is disabled.     by John Crisp <jcrisp@safeandsoundit.co.uk>
118  - Avoid use of unitialised variables in smtp migrate fragments.   - Force usage of TLSv1
119  - Simplify qmail concurrency templates.   - Increase MemLimit to 700M for clamav-0.98
120  - Modify domain style pseudonym pointing to user with dot in name.   - Allow custom passdb args
121  - Accept messages with no body and no trailing \n after headers.   - allow IP relayclient stored by DB
122  - Fix Net::DNS update breaks qpsmtpd.     Code from Stefano ZAmboni <zamboni@mind-at-work.it>
123  - allows the spamassassin plugin to read the size limit from its     & Charlie Brady <charlieb-contribs-bugzilla@budge.apana.org.au>
   arguments  
 - Move clamscan scheduling to complete before 99-raid-check.  
 - Listen on loopback if disabled.  
 - Fix permissions on imapd.pem as it's used by pop3s.  
 - Do not obsolete bglibs, it's required for cvm.  
 - Allow plaintext (unless explicitly disabled).  
 - Do not obsolete cvm, it's still needed for qpsmtpd.  
 - Fix size_limit initialization.  
 - reads MaxMessageSize prop of spamassassin and adds it  
   to the arguments of the plugin if defined.  
 - Requires e-smith-cvm-unix-local.  
 - Load TextCat plugin if ok_languages is enabled.  
 - Fix how qpsmtpd tags spam email.  
124    
125  Server manager  PHP
126  --------------  --------------
127  - Renew donation text in server-manager.   - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710
128  - Do not load mod_ssl.   - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
129  - Remove log noise from Create starter web site panel.   - core: fix integer overflow in unserialize() CVE-2014-3669
130  - Add security fix for CVE-2013-4113.   - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
131  - Renew donation text and graphic in server-manager.   - spl: fix use-after-free in ArrayIterator due to object
132  - Update footer copyright and renew full copyright text.     change during sorting. CVE-2014-4698
133  - Change wording of Software Update button.   - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
134     - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
135  Webmail and Groupware     CVE-2014-2497
136  ---------------------   - fileinfo: fix incomplete fix for CVE-2012-1571 in
137  - Allow webmail-only-local-network.     cdf_read_property_info. CVE-2014-3587
138  - Don't use SSL over loopback.   - core: fix incomplete fix for CVE-2014-4049 DNS TXT
139       record parsing. CVE-2014-3597
140     - core: type confusion issue in phpinfo(). CVE-2014-4721
141     - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
142     - core: fix heap-based buffer overflow in DNS TXT record parsing.
143       CVE-2014-4049
144     - core: unserialize() SPL ArrayObject / SPLObjectStorage type
145       confusion flaw. CVE-2014-3515
146     - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
147     - fileinfo: unrestricted recursion in handling of indirect type
148       rules. CVE-2014-1943
149     - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
150     - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
151     - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
152     - fileinfo: cdf_unpack_summary_info() excessive looping
153       DoS. CVE-2014-0237
154     - fileinfo: CDF property info parsing nelements infinite
155       loop. CVE-2014-0238
156     - add php_get_module_initialized internal function (#1053301)
157     - soap: fixRFC2616 transgression (#1045019)
158     - fix static calling in non-static method (#953786)
159     - fix autoload called from closing session (#954027)
160     - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
161       extension not provided or git binary patches (#1064027)
162     - odbc: fix incompatible pointer type (#1053982)
163     - mysqli: fix possible segfault in mysqli_stmt::bind_result
164       php bug 66762 (#1069167)
165     - mysql: fix php_mysql_fetch_hash writes long value into int
166       php bug 52636 (#1054953)
167    
168  Web Server  Web Server
169  ----------  ----------
170  - Force magic_quotes Off.   - Disable SSLv3
171     - Turn SSLEngine on in the SSL vhost (ProxyPassVirtualHosts)
172     - Remove obsolete gpc_order setting from php.ini.
173     - Add an upload_tmp_folder setting by db command
174       Thanks to Michael McCarn and Jean-philippe Pialasse
175    
176  Other fixes and updates  Other fixes and updates
177  -----------------------  -----------------------
178  - Do not hardcode NIC names to eth0 and eth1.   - When quiting the console app with unsaved changes set the default selected
179  - Return nic names in probeAdapters so we can drop HWAddress.     answer to NO
180  - Remove HWAddress prop from interfaces.   - Added a comment to specify the real configuration file of dhcpd
181  - Remove the "swap interface" feature.   - Modified the patch of daniel e-smith-base-5.6.0-ensure_apache_alias_www.patch
182  - Remove obsolete VLAN code.   - Ensure www group exists and that apache is an alias of www
183  - Load the bonding module if NIC bonding is enabled.   - Check where running runlevel 4, not 7 in service wrapper
184  - Define the udev-post service in the DB.   - Correctly update NIC configuration on single NIC systems
185  - Provide the ability to restrict ibay access to http.   - Symlink udev-post service in rc7
186  - Restart rsyslog in logrotate event.   - Fix PPPoE after a post-upgrade
187  - Set smb ServerName if unset.   - Remove dependency on microcode_ctl
188  - Don't reload init in bootstrap-console-save and console-save.   - Prevent emailing about the normal, weekly, checks of RAID arrays, by Mark Casey
189  - Fix add_new_disk_to_raid1.   - Don't claim to own /sbin and /sbin/e-smith
190  - Provide the ability to force https per ibay.   - Add an upload_tmp_folder setting by db command
191  - Add an audit for groups.     Thanks to Michael McCarn and Jean-philippe Pialasse
192  - Update the full names of users added in %pre.   - the folder /tmp is created by the event init-ibays
193  - Fix uid and gid to be the same for the users added in %pre.   - the event ibay-modify create/chown/chmod the folder /tmp
194  - Changed Prereq to Requires(pre) as Prereq is deprecated.   - Add an upload_tmp_folder setting by db command
195  - Patch to correct issue with not being able to access a password protected     Thanks to Michael McCarn and Jean-philippe Pialasse
196    ibay.   - Force SSL following ibays settings to the relevant domain
197  - Update ServerName (Samba netbios name) when SystemName is updated.   - Perl::critic syntax modifications
198  - Remove old System Name from the Hosts DB.   - Add more PHP options to ibays only by db commands
199  - Fix group creation when LDAP auth is enabled.   - Add SSLRequireSSL to ibays when SSL is set to enabled
200  - Disable IPv6 on a default install.   - Allow the admin upsd in /etc/hosts.allow
201  - Continue escaping control chars in rsyslog, just replace LF with space.   - Creation Admin Privilege for use of upscmd & upsrw
202  - Use UTF-8 in the console.   - Remove obsolete directives {allowfrom}
203  - Remove redundant parts of init-accounts.   - Access property created (default value is 'localhost')
204  - Add_template_to_ssl.pem, codes by JP Pialasse.   - Remove obsolete directives {ACL,ACCEPT,REJECT} and switch to LISTEN
205  - Require diald.     in /etc/ups/upsd.conf
206  - Removal of rc.e-smith now functionality is in e-smith-service.   - Allow NUT in /etc/hosts.allow and in /etc/services
207  - Replacement of rc.e-smith by moving code into e-smith-service.     Code change from Daniel B.<daniel@firewall-services.com>
208  - Fix the way '.' works in bash.   - Revert the patch e-smith-tinydns-2.4.0_add_hostname_following_dhcpdleases_hostname.patch
209  - rename /etc/ldap.conf to /etc/pam_ldap.conf (and same for .secret).   - Duplicate hostnames with different IP are not used, a warn in log is printed
210  - Always define InternalInterface NICBonding.   - The server hostname can not be used by a dhcp client, a warning in log is printed
211  - In the console refer to removable media instead of USB disk.   - Changed the name of /tmp/dhcpd.leases to /tmp/tmpdhcpd.leases
212  - Fix a few more syslog => rsyslog items.     when the dhcpd lease is modified
213  - Remove modprobe stuff.   - Do template-expand of /var/service/tinydns/root/data
214  - Don't be as agressive on rate limiting.   - Do sigus1 of dhcp-dns & dnscache
215  - Change syslog templates to rsyslog.   - Forked DHCPparse for parsing the end of lease and remove old entry of dnscache
216  - Ensure existing_hwaddr is always initialized.   - Require perl-Text-DHCPparse removed
217  - Change System Name from mitel-networks-server to sme-server.   - Timestamp added in tinydns, the entry in dnscache is cleared when the lease is over
218  - Patch to remove symlink to Primary ibay from /home/e-smith/files/primary.   - Add new feature 'Parse dhcpd.leases and feed to tinydns'
219  - Patch to correct issue with not being able to access a password protected   - e-smith-tinydns-2.4.0_add_hostname_following_dhcpdleases_hostname.patch
220    ibay.     made from the solution of Stefano Zamboni
221  - Correctly display accented letters in the console.   - Make slapd service an alias for ldap
222  - Add e-smith as a Requires(pre) and remove adding users in %pre.   - Switched to sysvinit from systemd (it's rhel-6)
223  - Fix uid and gid to be the same in create-system-user.   - Fixed license tag Related: rhbz#632853
224  - Ignore mysql.event table.   - pptpd New version
225  - Use --single-transaction in mysql-dump-tables.   - Dropped pppd-unbundle patch (upstreamed)
226  - Use mysql_upgrade instead of fix_privilege_tables.   - Various fixes according to Fedora review Related: rhbz#632853
227  - Increase memory limit for ntp.   - Modified for Fedora Resolves: rhbz#632853
228  - Make rsyslog listen to our socket.   - Update to upstream version 2.3.4, which fixes CVE-2012-3478 and CVE-2012-2252
229  - Remove rc.quota_create.   - Updated rsync-protocol.patch to fix CVE-2012-2251, and to apply on top of the
230  - the config file is radiusclient.conf, not radiusclient-ng.conf.     CVE-2012-3478 and CVE-2012-2252 fixes.
231  - Add templates for radiusclient-ng.conf file to remove binaddr   - Updated makefile.patch to preserve RPM CFLAGS.
232    directive.   - Added command-line-error.patch (from Debian), correcting error message
233  - Add directive to options.pptpd so that radius plugin can find the     generated when insecure command line option is used (CVE-2012-3478 fix
234    radiusclient configuration file..     regression).
235  - Fix permissions of /etc/radiusclient-ng/servers.   - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
236  - Add hack for running rc7.d script during runlevel 4.   - Add patch for rsync3 compat (#485946)
237  - Apply SME Server config file changes to pwauth.   - Update runit to 2.1.2
238  - Fix libgomp obsoletes to not obsolete el6 version.   - Remove now uneeded obsolete directives
239  - Change order of mail options in check4updates.   - Remove openssl from the Exclude list of centos repo
240  - Fix parsing issues with "manage RAID" menu option in the console.   - Add a default Yum db property for check4contribsupdates
241  - Remove SSH v1 legacy support.   - Added a check-update for the smecontribs repository
242  - Support nolvm boot option.   - Move protected package list to the correct location
243  - Create degraded RAID1 array with single disk install.  
 - nodmraid is the default for SME 9.0 installs.  
 - Give more time to the grub menu.  
 - Update installer hard drive warning.  
 - Customize confirmation dialogs during fresh install.  
 - Run installer in 'text' mode.  
244    
245  General features  General features
246  ================  ================
247    
248  - Based on CentOS 6.5 and all available updates  - Based on CentOS 6.6 and all available updates
249    
250    
251  $Id: README.txt,v 1.6 2013/12/24 16:38:49 wellsi Exp $  Terry Fage
252    On behalf of the SME Server development team


Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed