/[smeserver]/cdrom.image/sme9/README.txt
ViewVC logotype

Diff of /cdrom.image/sme9/README.txt

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.4 by wellsi, Sat Oct 12 06:31:51 2013 UTC Revision 1.15 by vip-ire, Thu Jun 25 14:30:43 2015 UTC
# Line 1  Line 1 
1  SME Server 9.0 Beta 1 Release Notes  Koozali SME Server 9.1 Beta 2 Release Announcement
 ===================================  
2    
3  14 October 2013  Koozali SME Server 9.1 Beta 2 Release Notes
4    ===========================================
5    
6  The SME Server development team is pleased to announce the release of  25th June 2015
7  SME Server 9.0 Beta 1 which is based on CentOS 6.4  
8    The Koozali SME Server (SME Server) development team is pleased to announce
9    the release of SME Server 9.1 Beta 2 which is based on CentOS 6.6.
10    
11  Bug reports and reports of potential bugs should be raised in the bug  Bug reports and reports of potential bugs should be raised in the bug
12  tracker (and only there, please);  tracker (and only there, please);
13    
14      http://bugs.contribs.org/      http://bugs.contribs.org/
15    
16    Download
17    ========
18    
19    You can download SME Server 9.1 Beta 2 from
20    http://mirror.contribs.org/smeserver/releases/testing/9.1.beta2/
21    or for other methods see http://wiki.contribs.org/SME_Server:Download
22    
23    Please note it may take up to 48 hours for mirrors to finish syncing,
24    during this time you may experience problems.
25    
26    
27  About SME Server  About SME Server
28  ================  ================
29    
30  SME Server is the leading Linux distribution for small and medium  SME Server is the leading Linux distribution for small and medium
31  enterprises.  enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
32    a non-profit corporation that exists to provide marketing and legal support
33    for SME Server.
34    
35  SME Server is freely available under the GNU General Public License and  SME Server is freely available under the GNU General Public License and
36  is only possible through the efforts of the SME Server community.  is only possible through the efforts of the SME Server community.
# Line 23  However, the availability and quality of Line 38  However, the availability and quality of
38  meeting our expenses, such as hosting costs, server hardware, etc.  meeting our expenses, such as hosting costs, server hardware, etc.
39    
40  As such, we ask for a donation to offset costs and fund further development.  As such, we ask for a donation to offset costs and fund further development.
41    
42  a) If you are a school, a church, a non-profit organisation or an individual  a) If you are a school, a church, a non-profit organisation or an individual
43  using SME Server for private purposes, we would appreciate you to contribute  using SME Server for private purposes, we would appreciate you to contribute
44  within your means toward the costs associated with hosting, maintenance and  within your means toward the costs associated with hosting, maintenance and
45  development.  development.
46    
47  b) If you are a company or an integrator and you are deploying SME Server in  b) If you are a company or an integrator and you are deploying SME Server in
48  the course of your work to generate revenue, we expect you to make a donation  the course of your work to generate revenue, we expect you to make a donation
49  commensurate with the level of revenue you generate and the number of servers  commensurate with the level of revenue you generate and the number of servers
# Line 34  your have in the field. Please, help the Line 51  your have in the field. Please, help the
51    
52  Please visit http://wiki.contribs.org/Donate to donate.  Please visit http://wiki.contribs.org/Donate to donate.
53    
54  Thanks  Koozali Inc is happy to supply an invoice for any donations received,
55  ======  simply email treasurer@koozali.org
56    
 The development team would like to thank all of those who have involved  
 themselves with this release.  
57    
58  Notes  Notes
59  =====  =====
60    
61  This section will be updated for SME Server 9.0 Beta 2  In-place upgrades are not supported. It is necessary to backup and then restore.
62    /boot partition is always RAID 1.
63    The spare handling for RAID arrays is not implemented.
64    
65  Major changes in this release  USB installs are now supported, see:
66  =============================  http://wiki.contribs.org/Install_From_USB#SME_Server_9
   
 This section will be updated for SME Server 9.0 Beta 2  
67    
68    
69  Changes in this release  Changes in this release
70  =======================  =======================
71    
72  This section will be updated for SME Server 9.0 Beta 2  Only the changes since SME Server 9.0 are listed, mainly
73  Currently this only shows changes since SME Server 9.0 Alpha 3 and it is  autogenerated from the changelogs.
 autogenerated from the changelogs. A more human readable version will be  
 written for SME Server 9.0 Beta 2.  
   
74    
75  Packages altered by Centos, Redhat, and Fedora-associated developers are  Packages altered by Centos, Redhat, and Fedora-associated developers are
76  not included.  not included.
# Line 67  not included. Line 78  not included.
78    
79  Backups  Backups
80  -------  -------
81  - Dar updated to 2.4.10   - dar new upstream version
82  - Workstation Backup, add a choice to delete old backup before or after   - dar add pkgconfig
83    backup.   - Workstation Backup, do not fail backup for mtime/ctime mismatch
84  - Workstation Backup, remove temporary directory on success.   - Change the sub checkMount() to findmnt Ian Wells <esmith@wellsi.com>
85  - Refactor directory tree creation and removal.   - Add requires nfs-utils
86  - Workstation Backup, inconsistent formatting of host share name in messages.   - The nfs service is neither started or allowed to start
87  - Workstation Backup, more reliable catalog creation.   - Don't remove the apache group during restore
 - Workstation Backup, report cifs mount errors.  
 - Workstation Backup, do not access /proc/mounts  
 - Incremental backup fix.  
 - Workstation Backup, allow spaces in the backup destination.  
   Includes fix for disk usage broken with spaces.  
 - Desktop Backup, allow user setting of compression level.  
 - Use Wake on LAN before starting Backup with DAR.  
 - NFS syntax is deprecated for CIFS mount.  
 - Require cifs-utils and use UNC paths for cifs mount.  
 - Improve text in console backup for success and failure.  
 - Console USB Backup, allow user setting of compression level.  
   Compression level of the console backup is now -6 by default.  
88    
 File Server  
 -----------  
 - Also remove the empty template-begin file in pam.d/proftpd templates.  
 - Remove unused pam templates.  
 - Replace vfs_shadow_copy with vfs_shadow_copy2 for shadow snapshots.  
 - Add template for wide links.  
 - Add templates for max protocol.  
 - Add support for Windows 8 domain joining & user login.  
 - Add windows network performance enhancements registry file.  
 - Update default ServerName in 30smbServerName  
 - Add ability to configure waiting for network Win7 registry option.  
 - Change default Workgroup and Domain to sme-server.  
 - Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint  
   authentication  
89    
90  LDAP (Optional in SME 9.0, and considered experimental)  LDAP
91  ----  ----
92  None   - Remove size limit for search result
93     - Make pdbedit output independent from locale and timezone so it can be
94       parsed
95     - Symlink /etc/init.d/ldap to /usr/bin/sv
96     - Chown all DB files to ldap before staring slapd
97     - Set checkpoint in slapd.conf instead of DB_CONFIG
98     - Stop ldap on shutdown (rc0 and rc6)
99     - Don't overwrite the ldif dump if slapcat's output is empty
100       (code from Charlie Brady)
101     - Run db_recover on startup
102     - Don't wipe LDAP DB when the ldif dump is empty
103    
104  Localisation  Localisation
105  ------------  ------------
106  - Latest translations included.   - apply locale 2015-03-14 patch from pootle
107     - apply locale 2014-12-25 patch from pootle
108    
109  Mail Server  Mail Server
110  -----------  -----------
111  - Fetchmail multidrop mode follows TCPPort setting.   - ClamAV Updated to release 0.98.7
112  - Always enable imap, listen on loopback is disabled.   - Remove the patch e-smith-email-5.4.0-UEsDBBQDAAAIA-new-signature.patch
113  - Avoid use of unitialised variables in smtp migrate fragments.   - Add new zip file signatures to default mailpatterns database : UEsDBBQDAAAIA
114  - Simplify qmail concurrency templates.   - Add new zip file signatures to default mailpatterns database : ZIPVOSX & ZIPV3
115  - Modify domain style pseudonym pointing to user with dot in name.   - Disable fips mode on stunnel
116  - Accept messages with no body and no trailing \n after headers.   - Use stunnel instead of sslio to support TLS
117  - Fix Net::DNS update breaks qpsmtpd.   - Revert forcing TLSv1 patch as it breaks some inbound delivery
118  - allows the spamassassin plugin to read the size limit from its   - Revert whitelist_soft dnsbl as it hasn't been verified yet and we need to
119    arguments     push the fix for TLSv1
120  - Move clamscan scheduling to complete before 99-raid-check.   - Modify whitelist_soft transaction to interact with dnsbl filter
121  - Listen on loopback if disabled.     by John Crisp <jcrisp@safeandsoundit.co.uk>
122  - Fix permissions on imapd.pem as it's used by pop3s.   - Force usage of TLSv1
123  - Do not obsolete bglibs, it's required for cvm.   - Increase MemLimit to 700M for clamav-0.98
124  - Allow plaintext (unless explicitly disabled).   - Allow custom passdb args
125  - Do not obsolete cvm, it's still needed for qpsmtpd.   - allow IP relayclient stored by DB
126  - Fix size_limit initialization.     Code from Stefano ZAmboni <zamboni@mind-at-work.it>
127  - reads MaxMessageSize prop of spamassassin and adds it     & Charlie Brady <charlieb-contribs-bugzilla@budge.apana.org.au>
128    to the arguments of the plugin if defined.   - allow IP relayclient stored by DB
129  - Requires e-smith-cvm-unix-local.     Code from Stefano ZAmboni <zamboni@mind-at-work.it>
 - Load TextCat plugin if ok_languages is enabled.  
 - Fix how qpsmtpd tags spam email.  
130    
131  Server manager  Server manager
132  --------------  --------------
133  - Renew donation text in server-manager.   - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710
134  - Do not load mod_ssl.   - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
135  - Remove log noise from Create starter web site panel.   - core: fix integer overflow in unserialize() CVE-2014-3669
136  - add security fix for CVE-2013-4113.   - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
137     - spl: fix use-after-free in ArrayIterator due to object
138  Webmail and Groupware     change during sorting. CVE-2014-4698
139  ---------------------   - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
140  - Don't use SSL over loopback.   - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
141       CVE-2014-2497
142     - fileinfo: fix incomplete fix for CVE-2012-1571 in
143       cdf_read_property_info. CVE-2014-3587
144     - core: fix incomplete fix for CVE-2014-4049 DNS TXT
145       record parsing. CVE-2014-3597
146     - core: type confusion issue in phpinfo(). CVE-2014-4721
147     - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
148     - core: fix heap-based buffer overflow in DNS TXT record parsing.
149       CVE-2014-4049
150     - core: unserialize() SPL ArrayObject / SPLObjectStorage type
151       confusion flaw. CVE-2014-3515
152     - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
153     - fileinfo: unrestricted recursion in handling of indirect type
154       rules. CVE-2014-1943
155     - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
156     - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
157     - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
158     - fileinfo: cdf_unpack_summary_info() excessive looping
159       DoS. CVE-2014-0237
160     - fileinfo: CDF property info parsing nelements infinite
161       loop. CVE-2014-0238
162     - add php_get_module_initialized internal function (#1053301)
163     - soap: fixRFC2616 transgression (#1045019)
164     - fix static calling in non-static method (#953786)
165     - fix autoload called from closing session (#954027)
166     - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
167       extension not provided or git binary patches (#1064027)
168     - odbc: fix incompatible pointer type (#1053982)
169     - mysqli: fix possible segfault in mysqli_stmt::bind_result
170       php bug 66762 (#1069167)
171     - mysql: fix php_mysql_fetch_hash writes long value into int
172       php bug 52636 (#1054953)
173    
174  Web Server  Web Server
175  ----------  ----------
176  - Force magic_quotes Off.   - DIsable SSLv3
177     - Revert CRIME mitigation patch, as it's not needed
178     - Mitigate CVE-2012-4929
179     - Turn SSLEngine on in the SSL vhost (ProxyPassVirtualHosts)
180     - Remove obsolete gpc_order setting from php.ini.
181     - Add an upload_tmp_folder setting by db command
182     - Thanks to Michael McCarn and Jean-philippe Pialasse
183    
184  Other fixes and updates  Other fixes and updates
185  -----------------------  -----------------------
186  - Update the full names of users added in %pre.   - Add dummy NIC support as InternalInterface
187  - Fix uid and gid to be the same for the users added in %pre.   - Only fire the ip-change event when IP is assigned to WAN nic
188  - Changed Prereq to Requires(pre) as Prereq is deprecated.   (Code by Charlie Brady and John Crisp)
189  - Patch to correct issue with not being able to access a password protected   - Only reset service access when switching to or from private server mode
190    ibay.   (Code by Charlie Brady)
191  - Update ServerName (Samba netbios name) when SystemName is updated.   - When quiting the console app with unsaved changes set the default selected
192  - Remove old System Name from the Hosts DB.     answer to NO
193  - Fix group creation when LDAP auth is enabled.   - Added a comment to specify the real configuration file of dhcpd
194  - Disable IPv6 on a default install.   - Modified the patch of daniel e-smith-base-5.6.0-ensure_apache_alias_www.patch
195  - Continue escaping control chars in rsyslog, just replace LF with space.   - Ensure www group exists and that apache is an alias of www
196  - Use UTF-8 in the console.   - Check where running runlevel 4, not 7 in service wrapper
197  - Remove redundant parts of init-accounts.   - Correctly update NIC configuration on single NIC systems
198  - Add_template_to_ssl.pem, codes by JP Pialasse.   - Symlink udev-post service in rc7
199  - Require diald.   - Fix PPPoE after a post-upgrade
200  - Removal of rc.e-smith now functionality is in e-smith-service.   - Remove dependency on microcode_ctl
201  - Replacement of rc.e-smith by moving code into e-smith-service.   - Prevent emailing about the normal, weekly, checks of RAID arrays, by Mark Casey
202  - Fix the way '.' works in bash.   - Don't claim to own /sbin and /sbin/e-smith
203  - rename /etc/ldap.conf to /etc/pam_ldap.conf (and same for .secret).   - Add an upload_tmp_folder setting by db command
204  - Always define InternalInterface NICBonding.     Thanks to Michael McCarn and Jean-philippe Pialasse
205  - In the console refer to removable media instead of USB disk.   - the folder /tmp is created by the event init-ibays
206  - Fix a few more syslog => rsyslog items.   - the event ibay-modify create/chown/chmod the folder /tmp
207  - Remove modprobe stuff.   - Add an upload_tmp_folder setting by db command
208  - Don't be as agressive on rate limiting.     Thanks to Michael McCarn and Jean-philippe Pialasse
209  - Change syslog templates to rsyslog.   - Force SSL following ibays settings to the relevant domain
210  - Ensure existing_hwaddr is always initialized.   - Perl::critic syntax modifications
211  - Change System Name from mitel-networks-server to sme-server.   - Add more PHP options to ibays only by db commands
212  - Patch to remove symlink to Primary ibay from /home/e-smith/files/primary.   - Add SSLRequireSSL to ibays when SSL is set to enabled
213  - Patch to correct issue with not being able to access a password protected   - Allow the admin upsd in /etc/hosts.allow
214    ibay.   - Creation Admin Privilege for use of upscmd & upsrw
215  - Correctly display accented letters in the console.   - Remove obsolete directives {allowfrom}
216  - Add e-smith as a Requires(pre) and remove adding users in %pre.   - Access property created (default value is 'localhost')
217  - Fix uid and gid to be the same in create-system-user.   - Remove obsolete directives {ACL,ACCEPT,REJECT} and switch to LISTEN
218  - Ignore mysql.event table.     in /etc/ups/upsd.conf
219  - Use --single-transaction in mysql-dump-tables.   - Allow NUT in /etc/hosts.allow and in /etc/services
220  - Use mysql_upgrade instead of fix_privilege_tables.     Code change from Daniel B.<daniel@firewall-services.com>
221  - Increase memory limit for ntp.   - Revert the patch e-smith-tinydns-2.4.0_add_hostname_following_dhcpdleases_hostname.patch
222  - Make rsyslog listen to our socket.   - Duplicate hostnames with different IP are not used, a warn in log is printed
223  - Remove rc.quota_create.   - The server hostname can not be used by a dhcp client, a warning in log is printed
224  - the config file is radiusclient.conf, not radiusclient-ng.conf.   - Changed the name of /tmp/dhcpd.leases to /tmp/tmpdhcpd.leases
225  - Add templates for radiusclient-ng.conf file to remove binaddr     when the dhcpd lease is modified
226    directive.   - Do template-expand of /var/service/tinydns/root/data
227  - Add directive to options.pptpd so that radius plugin can find the   - Do sigus1 of dhcp-dns & dnscache
228    radiusclient configuration file..   - Forked DHCPparse for parsing the end of lease and remove old entry of dnscache
229  - Fix permissions of /etc/radiusclient-ng/servers.   - Require perl-Text-DHCPparse removed
230  - Add hack for running rc7.d script during runlevel 4.   - Timestamp added in tinydns, the entry in dnscache is cleared when the lease is over
231  - Apply SME Server config file changes to pwauth.   - Add new feature 'Parse dhcpd.leases and feed to tinydns'
232  - Renew donation text and add donation graphic.   - e-smith-tinydns-2.4.0_add_hostname_following_dhcpdleases_hostname.patch
233  - Fix /etc/system-release.     made from the solution of Stefano Zamboni
234  - Fix libgomp obsoletes to not obsolete el6 version.   - Make slapd service an alias for ldap
235  - Change order of mail options in check4updates.   - Switched to sysvinit from systemd (it's rhel-6)
236  - Change wording of Software Update button.   - Fixed license tag Related: rhbz#632853
237     - pptpd New version
238     - Dropped pppd-unbundle patch (upstreamed)
239     - Various fixes according to Fedora review Related: rhbz#632853
240     - Modified for Fedora Resolves: rhbz#632853
241     - Update to upstream version 2.3.4, which fixes CVE-2012-3478 and CVE-2012-2252
242     - Updated rsync-protocol.patch to fix CVE-2012-2251, and to apply on top of the
243       CVE-2012-3478 and CVE-2012-2252 fixes.
244     - Updated makefile.patch to preserve RPM CFLAGS.
245     - Added command-line-error.patch (from Debian), correcting error message
246       generated when insecure command line option is used (CVE-2012-3478 fix
247       regression).
248     - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
249     - Add patch for rsync3 compat (#485946)
250     - Update runit to 2.1.2
251     - Remove now uneeded obsolete directives
252     - Remove openssl from the Exclude list of centos repo
253     - Add a default Yum db property for check4contribsupdates
254     - Added a check-update for the smecontribs repository
255     - Move protected package list to the correct location
256    
257    
258  General features  General features
259  ================  ================
260    
261  - Based on CentOS 6.4 and all available updates  - Based on CentOS 6.6 and all available updates
   
 $Id: README.txt,v 1.3 2013/10/05 05:06:26 wellsi Exp $  
   
   
   
262    
263    
264    Terry Fage
265    On behalf of the SME Server development team

Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed