/[smeserver]/cdrom.image/sme9/README.txt
ViewVC logotype

Diff of /cdrom.image/sme9/README.txt

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.4 by wellsi, Sat Oct 12 06:31:51 2013 UTC Revision 1.18 by vip-ire, Wed Dec 2 16:59:08 2015 UTC
# Line 1  Line 1 
1  SME Server 9.0 Beta 1 Release Notes  Koozali SME Server 9.1 Final Release Notes
2  ===================================  ===========================================
3    04 Dec 2015
4    
5  14 October 2013  The Koozali SME Server (SME Server) development team is pleased to announce
6    the release of SME Server 9.1 which is based on CentOS 6.7.
7    
8  The SME Server development team is pleased to announce the release of  SME9.1 incorporates only very minor changes from SME9.1rc1
9  SME Server 9.0 Beta 1 which is based on CentOS 6.4  
10    CentOS 6.# has an EOL of 20 Nov 2020.
11    
12  Bug reports and reports of potential bugs should be raised in the bug  Bug reports and reports of potential bugs should be raised in the bug
13  tracker (and only there, please);  tracker (and only there, please);
14    
15      http://bugs.contribs.org/      http://bugs.contribs.org/
16    
17    Download
18    ========
19    You can download SME Server 9.1 from
20    http://mirror.contribs.org/smeserver/releases/9.1/
21    or for other methods see http://wiki.contribs.org/SME_Server:Download
22    
23    Please note it may take up to 48 hours for mirrors to finish syncing,
24    during this time you may experience problems.
25    
26  About SME Server  About SME Server
27  ================  ================
   
28  SME Server is the leading Linux distribution for small and medium  SME Server is the leading Linux distribution for small and medium
29  enterprises.  enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
30    a non-profit corporation that exists to provide marketing and legal support
31    for SME Server.
32    
33  SME Server is freely available under the GNU General Public License and  SME Server is freely available under the GNU General Public License and
34  is only possible through the efforts of the SME Server community.  is only possible through the efforts of the SME Server community.
35    
36  However, the availability and quality of SME Server is dependent on  However, the availability and quality of SME Server is dependent on
37  meeting our expenses, such as hosting costs, server hardware, etc.  meeting our expenses, such as hosting costs, server hardware, etc.
38    
39  As such, we ask for a donation to offset costs and fund further development.  As such, we ask for a donation to offset costs and fund further development.
40    
41  a) If you are a school, a church, a non-profit organisation or an individual  a) If you are a school, a church, a non-profit organisation or an individual
42  using SME Server for private purposes, we would appreciate you to contribute  using SME Server for private purposes, we would appreciate you to contribute
43  within your means toward the costs associated with hosting, maintenance and  within your means toward the costs associated with hosting, maintenance and
44  development.  development.
45    
46  b) If you are a company or an integrator and you are deploying SME Server in  b) If you are a company or an integrator and you are deploying SME Server in
47  the course of your work to generate revenue, we expect you to make a donation  the course of your work to generate revenue, we expect you to make a donation
48  commensurate with the level of revenue you generate and the number of servers  commensurate with the level of revenue you generate and the number of servers
# Line 34  your have in the field. Please, help the Line 50  your have in the field. Please, help the
50    
51  Please visit http://wiki.contribs.org/Donate to donate.  Please visit http://wiki.contribs.org/Donate to donate.
52    
53  Thanks  Koozali Inc is happy to supply an invoice for any donations received,
54  ======  simply email treasurer@koozali.org
   
 The development team would like to thank all of those who have involved  
 themselves with this release.  
55    
56  Notes  Notes
57  =====  =====
58    In-place upgrades are not supported. It is necessary to backup and then restore.
59    /boot partition is always RAID 1.
60    
61    The spare handling for RAID arrays is not implemented.
62    
63  This section will be updated for SME Server 9.0 Beta 2  USB installs are now supported, see:
64    http://wiki.contribs.org/Install_From_USB#SME_Server_9
65    
66    Minimal changes have been made from SME9.1rc1
67    
68  Major changes in this release  Major changes in this release
69  =============================  =============================
70    Added functionality to use a Dummy NIC for the internal interface.
71  This section will be updated for SME Server 9.0 Beta 2  Set the check update frequency of smecontribs through the server-manager.
72    Disable SSLv3.
73    Added Windows 10 support for SME Domain.
74    
75  Changes in this release  Changes in this release
76  =======================  =======================
77    Only the changes since SME Server 9.0 are listed, mainly
78  This section will be updated for SME Server 9.0 Beta 2  autogenerated from the changelogs.
 Currently this only shows changes since SME Server 9.0 Alpha 3 and it is  
 autogenerated from the changelogs. A more human readable version will be  
 written for SME Server 9.0 Beta 2.  
   
79    
80  Packages altered by Centos, Redhat, and Fedora-associated developers are  Packages altered by Centos, Redhat, and Fedora-associated developers are
81  not included.  not included.
82    
   
83  Backups  Backups
84  -------  -------
85  - Dar updated to 2.4.10   - dar new upstream version
86  - Workstation Backup, add a choice to delete old backup before or after   - dar add pkgconfig
87    backup.   - The mountpoint is tested before attempting the console backup
88  - Workstation Backup, remove temporary directory on success.   - Workstation Backup, do not fail backup for mtime/ctime mismatch
89  - Refactor directory tree creation and removal.   - Change the sub checkMount() to findmnt Ian Wells <esmith@wellsi.com>
90  - Workstation Backup, inconsistent formatting of host share name in messages.   - Add requires nfs-utils
91  - Workstation Backup, more reliable catalog creation.   - The nfs service is neither started or allowed to start
92  - Workstation Backup, report cifs mount errors.   - Don't remove the apache group during restore
 - Workstation Backup, do not access /proc/mounts  
 - Incremental backup fix.  
 - Workstation Backup, allow spaces in the backup destination.  
   Includes fix for disk usage broken with spaces.  
 - Desktop Backup, allow user setting of compression level.  
 - Use Wake on LAN before starting Backup with DAR.  
 - NFS syntax is deprecated for CIFS mount.  
 - Require cifs-utils and use UNC paths for cifs mount.  
 - Improve text in console backup for success and failure.  
 - Console USB Backup, allow user setting of compression level.  
   Compression level of the console backup is now -6 by default.  
93    
94  File Server  File Server
95  -----------  -----------
96  - Also remove the empty template-begin file in pam.d/proftpd templates.   - The samba performance registry is now added in the win10samba.reg
97  - Remove unused pam templates.   - Fix samba audit parameters
98  - Replace vfs_shadow_copy with vfs_shadow_copy2 for shadow snapshots.     Patch from Jorge Gonzalez
99  - Add template for wide links.     Replace syslog template to rsyslog so samba audits are logged in the correct
100  - Add templates for max protocol.     file  
101  - Add support for Windows 8 domain joining & user login.  - The samba performance registry is now added in the win10samba.reg
102  - Add windows network performance enhancements registry file.     Corrected typo in patch of bad character '“', relative to roaming profile
103  - Update default ServerName in 30smbServerName     e-smith-samba-2.4.0.bz9038.W10_registry.patch
104  - Add ability to configure waiting for network Win7 registry option.     Roaming profiles follow Windows version (.V2,.V3,.V4,.V5)  
105  - Change default Workgroup and Domain to sme-server.     added W10 support to SME Domain
106  - Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint     e-smith-samba-2.4.0.bz9038.W10_registry.patch
107    authentication   - Added e-smith-samba-2.4.0.bz9048.RoamingProfileForW8.patch
108       Modified the registry file for roaming profile with W8
109       Roaming profiles follow Windows version (.V2,.V3,.V4,.V5)
110     - Add dependency on perl(Crypt::Cracklib), needed for ftpasswd --use-cracklib
111       Add -utils subpackage for support tools (#1258440), using a sub-package to
112       ensure that the main package does not require perl
113       Update ftpasswd to version from proftpd 1.3.5a for additional functionality
114       (SHA passwords, locking and unlocking of accounts)
115    
116  LDAP (Optional in SME 9.0, and considered experimental)  
117    LDAP
118  ----  ----
119  None   - Remove size limit for search result
120     - Make pdbedit output independent from locale and timezone so it can be
121       parsed
122     - Symlink /etc/init.d/ldap to /usr/bin/sv
123     - Chown all DB files to ldap before staring slapd
124     - Set checkpoint in slapd.conf instead of DB_CONFIG
125     - Stop ldap on shutdown (rc0 and rc6)
126     - Don't overwrite the ldif dump if slapcat's output is empty
127       (code from Charlie Brady)
128     - Run db_recover on startup
129     - Don't wipe LDAP DB when the ldif dump is empty
130    
131  Localisation  Localisation
132  ------------  ------------
133  - Latest translations included.   - apply locale smeserver-locale-2.4.0-locale-2015-07-12.patch
134     - apply locale smeserver-locale-2.4.0-locale-2015-07-01.patch
135     - apply locale 2015-03-14 patch from pootle
136     - apply locale 2014-12-25 patch from pootle
137    
138  Mail Server  Mail Server
139  -----------  -----------
140  - Fetchmail multidrop mode follows TCPPort setting.   - ClamAV Updated to release 0.98.7
141  - Always enable imap, listen on loopback is disabled.   - Remove the patch e-smith-email-5.4.0-UEsDBBQDAAAIA-new-signature.patch
142  - Avoid use of unitialised variables in smtp migrate fragments.   - Add new zip file signatures to default mailpatterns database : UEsDBBQDAAAIA
143  - Simplify qmail concurrency templates.   - Add new zip file signatures to default mailpatterns database : ZIPVOSX & ZIPV3
144  - Modify domain style pseudonym pointing to user with dot in name.   - Disable fips mode on stunnel
145  - Accept messages with no body and no trailing \n after headers.   - Use stunnel instead of sslio to support TLS
146  - Fix Net::DNS update breaks qpsmtpd.   - Revert forcing TLSv1 patch as it breaks some inbound delivery
147  - allows the spamassassin plugin to read the size limit from its   - Revert whitelist_soft dnsbl as it hasn't been verified yet and we need to
148    arguments     push the fix for TLSv1
149  - Move clamscan scheduling to complete before 99-raid-check.   - Modify whitelist_soft transaction to interact with dnsbl filter
150  - Listen on loopback if disabled.     by John Crisp <jcrisp@safeandsoundit.co.uk>
151  - Fix permissions on imapd.pem as it's used by pop3s.   - Force usage of TLSv1
152  - Do not obsolete bglibs, it's required for cvm.   - Increase MemLimit to 700M for clamav-0.98
153  - Allow plaintext (unless explicitly disabled).   - Allow custom passdb args
154  - Do not obsolete cvm, it's still needed for qpsmtpd.   - allow IP relayclient stored by DB
155  - Fix size_limit initialization.     Code from Stefano ZAmboni <zamboni@mind-at-work.it>
156  - reads MaxMessageSize prop of spamassassin and adds it     & Charlie Brady <charlieb-contribs-bugzilla@budge.apana.org.au>
157    to the arguments of the plugin if defined.   - allow IP relayclient stored by DB
158  - Requires e-smith-cvm-unix-local.     Code from Stefano ZAmboni <zamboni@mind-at-work.it>
 - Load TextCat plugin if ok_languages is enabled.  
 - Fix how qpsmtpd tags spam email.  
159    
160  Server manager  Server manager
161  --------------  --------------
162  - Renew donation text in server-manager.   - fix gzfile accept paths with NUL character #1213407
163  - Do not load mod_ssl.   - fix patch for CVE-2015-4024
164  - Remove log noise from Create starter web site panel.   - fix more functions accept paths with NUL character #1213407
165  - add security fix for CVE-2013-4113.   - soap: missing fix for #1222538 and #1204868
166     - core: fix multipart/form-data request can use excessive
167  Webmail and Groupware     amount of CPU usage CVE-2015-4024
168  ---------------------   - fix various functions accept paths with NUL character
169  - Don't use SSL over loopback.     CVE-2015-4026, #1213407
170     - ftp: fix integer overflow leading to heap overflow when
171       reading FTP file listing CVE-2015-4022
172     - phar: fix buffer over-read in metadata parsing CVE-2015-2783
173     - phar: invalid pointer free() in phar_tar_process_metadata()
174       CVE-2015-3307
175     - phar: fix buffer overflow in phar_set_inode() CVE-2015-3329
176     - phar: fix memory corruption in phar_parse_tarfile caused by
177       empty entry file name CVE-2015-4021
178     - soap: more fix type confusion through unserialize #1222538
179     - soap: more fix type confusion through unserialize #1204868
180     - core: fix double in zend_ts_hash_graceful_destroy CVE-2014-9425
181     - core: fix use-after-free in unserialize CVE-2015-2787
182     - exif: fix free on unitialized pointer CVE-2015-0232
183     - gd: fix buffer read overflow in gd_gif.c CVE-2014-9709
184     - date: fix use after free vulnerability in unserialize CVE-2015-0273
185     - enchant: fix heap buffer overflow in enchant_broker_request_dict
186       CVE-2014-9705
187     - phar: use after free in phar_object.c CVE-2015-2301
188     - soap: fix type confusion through unserialize
189     - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710
190     - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
191     - core: fix integer overflow in unserialize() CVE-2014-3669
192     - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
193     - spl: fix use-after-free in ArrayIterator due to object
194       change during sorting. CVE-2014-4698
195     - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
196     - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
197       CVE-2014-2497
198     - fileinfo: fix incomplete fix for CVE-2012-1571 in
199       cdf_read_property_info. CVE-2014-3587
200     - core: fix incomplete fix for CVE-2014-4049 DNS TXT
201       record parsing. CVE-2014-3597
202     - core: type confusion issue in phpinfo(). CVE-2014-4721
203     - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
204     - core: fix heap-based buffer overflow in DNS TXT record parsing.
205       CVE-2014-4049
206     - core: unserialize() SPL ArrayObject / SPLObjectStorage type
207       confusion flaw. CVE-2014-3515
208     - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
209     - fileinfo: unrestricted recursion in handling of indirect type
210       rules. CVE-2014-1943
211     - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
212     - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
213     - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
214     - fileinfo: cdf_unpack_summary_info() excessive looping
215       DoS. CVE-2014-0237
216     - fileinfo: CDF property info parsing nelements infinite
217       loop. CVE-2014-0238
218     - add php_get_module_initialized internal function (#1053301)
219     - soap: fixRFC2616 transgression (#1045019)
220     - fix static calling in non-static method (#953786)
221     - fix autoload called from closing session (#954027)
222     - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
223       extension not provided or git binary patches (#1064027)
224     - odbc: fix incompatible pointer type (#1053982)
225     - mysqli: fix possible segfault in mysqli_stmt::bind_result
226       php bug 66762 (#1069167)
227     - mysql: fix php_mysql_fetch_hash writes long value into int
228       php bug 52636 (#1054953)
229    
230  Web Server  Web Server
231  ----------  ----------
232  - Force magic_quotes Off.   - DIsable SSLv3
233     - Revert CRIME mitigation patch, as it's not needed
234     - Mitigate CVE-2012-4929
235     - Turn SSLEngine on in the SSL vhost (ProxyPassVirtualHosts)
236     - Remove obsolete gpc_order setting from php.ini.
237     - Add an upload_tmp_folder setting by db command
238     - Thanks to Michael McCarn and Jean-philippe Pialasse
239    
240  Other fixes and updates  Other fixes and updates
241  -----------------------  -----------------------
242  - Update the full names of users added in %pre.   - Update /etc/mime.types templates
243  - Fix uid and gid to be the same for the users added in %pre.   - Use sha256 algorithm for signature of SSL cert.
244  - Changed Prereq to Requires(pre) as Prereq is deprecated.   - Added new createlinks function event_templates event_actions event_services
245  - Patch to correct issue with not being able to access a password protected   - Don't claim to own /sbin and /sbin/e-smith
246    ibay.   - display variable name in the server-manager $domainName, $domainDesc $domain
247  - Update ServerName (Samba netbios name) when SystemName is updated.   - Revert the upload_tmp_folder patch as it needs some more work
248  - Remove old System Name from the Hosts DB.   - Add dummy NIC support as InternalInterface
249  - Fix group creation when LDAP auth is enabled.   - Only fire the ip-change event when IP is assigned to WAN nic
250  - Disable IPv6 on a default install.     (Code by Charlie Brady and John Crisp)
251  - Continue escaping control chars in rsyslog, just replace LF with space.   - Only reset service access when switching to or from private server mode
252  - Use UTF-8 in the console.     (Code by Charlie Brady)
253  - Remove redundant parts of init-accounts.   - When quiting the console app with unsaved changes set the default selected
254  - Add_template_to_ssl.pem, codes by JP Pialasse.     answer to NO
255  - Require diald.   - Added a comment to specify the real configuration file of dhcpd
256  - Removal of rc.e-smith now functionality is in e-smith-service.   - Modified the patch of daniel e-smith-base-5.6.0-ensure_apache_alias_www.patch
257  - Replacement of rc.e-smith by moving code into e-smith-service.   - Ensure www group exists and that apache is an alias of www
258  - Fix the way '.' works in bash.   - Check where running runlevel 4, not 7 in service wrapper
259  - rename /etc/ldap.conf to /etc/pam_ldap.conf (and same for .secret).   - Correctly update NIC configuration on single NIC systems
260  - Always define InternalInterface NICBonding.   - Symlink udev-post service in rc7
261  - In the console refer to removable media instead of USB disk.   - Fix PPPoE after a post-upgrade
262  - Fix a few more syslog => rsyslog items.   - Remove dependency on microcode_ctl
263  - Remove modprobe stuff.   - Prevent emailing about the normal, weekly, checks of RAID arrays, by Mark Casey
264  - Don't be as agressive on rate limiting.   - Don't claim to own /sbin and /sbin/e-smith
265  - Change syslog templates to rsyslog.   - Add an upload_tmp_folder setting by db command
266  - Ensure existing_hwaddr is always initialized.     Thanks to Michael McCarn and Jean-philippe Pialasse
267  - Change System Name from mitel-networks-server to sme-server.   - the folder /tmp is created by the event init-ibays
268  - Patch to remove symlink to Primary ibay from /home/e-smith/files/primary.   - the event ibay-modify create/chown/chmod the folder /tmp
269  - Patch to correct issue with not being able to access a password protected   - Add an upload_tmp_folder setting by db command
270    ibay.     Thanks to Michael McCarn and Jean-philippe Pialasse
271  - Correctly display accented letters in the console.   - Force SSL following ibays settings to the relevant domain
272  - Add e-smith as a Requires(pre) and remove adding users in %pre.   - Perl::critic syntax modifications
273  - Fix uid and gid to be the same in create-system-user.   - Add more PHP options to ibays only by db commands
274  - Ignore mysql.event table.   - Add SSLRequireSSL to ibays when SSL is set to enabled
275  - Use --single-transaction in mysql-dump-tables.   - Allow the admin upsd in /etc/hosts.allow
276  - Use mysql_upgrade instead of fix_privilege_tables.   - Creation Admin Privilege for use of upscmd & upsrw
277  - Increase memory limit for ntp.   - Remove obsolete directives {allowfrom}
278  - Make rsyslog listen to our socket.   - Access property created (default value is 'localhost')
279  - Remove rc.quota_create.   - Remove obsolete directives {ACL,ACCEPT,REJECT} and switch to LISTEN
280  - the config file is radiusclient.conf, not radiusclient-ng.conf.     in /etc/ups/upsd.conf
281  - Add templates for radiusclient-ng.conf file to remove binaddr   - Allow NUT in /etc/hosts.allow and in /etc/services
282    directive.     Code change from Daniel B.<daniel@firewall-services.com>
283  - Add directive to options.pptpd so that radius plugin can find the   - Revert the patch e-smith-tinydns-2.4.0_add_hostname_following_dhcpdleases_hostname.patch
284    radiusclient configuration file..   - Duplicate hostnames with different IP are not used, a warn in log is printed
285  - Fix permissions of /etc/radiusclient-ng/servers.   - The server hostname can not be used by a dhcp client, a warning in log is printed
286  - Add hack for running rc7.d script during runlevel 4.   - Changed the name of /tmp/dhcpd.leases to /tmp/tmpdhcpd.leases
287  - Apply SME Server config file changes to pwauth.     when the dhcpd lease is modified
288  - Renew donation text and add donation graphic.   - Do template-expand of /var/service/tinydns/root/data
289  - Fix /etc/system-release.   - Do sigus1 of dhcp-dns & dnscache
290  - Fix libgomp obsoletes to not obsolete el6 version.   - Forked DHCPparse for parsing the end of lease and remove old entry of dnscache
291  - Change order of mail options in check4updates.   - Require perl-Text-DHCPparse removed
292  - Change wording of Software Update button.   - Timestamp added in tinydns, the entry in dnscache is cleared when the lease is over
293     - Add new feature 'Parse dhcpd.leases and feed to tinydns'
294     - e-smith-tinydns-2.4.0_add_hostname_following_dhcpdleases_hostname.patch
295       made from the solution of Stefano Zamboni
296     - Make slapd service an alias for ldap
297     - Switched to sysvinit from systemd (it's rhel-6)
298     - Fixed license tag Related: rhbz#632853
299     - pptpd New version
300     - Dropped pppd-unbundle patch (upstreamed)
301     - Various fixes according to Fedora review Related: rhbz#632853
302     - Modified for Fedora Resolves: rhbz#632853
303     - Update to upstream version 2.3.4, which fixes CVE-2012-3478 and CVE-2012-2252
304     - Updated rsync-protocol.patch to fix CVE-2012-2251, and to apply on top of the
305       CVE-2012-3478 and CVE-2012-2252 fixes.
306     - Updated makefile.patch to preserve RPM CFLAGS.
307     - Added command-line-error.patch (from Debian), correcting error message
308       generated when insecure command line option is used (CVE-2012-3478 fix
309       regression).
310     - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
311     - Add patch for rsync3 compat (#485946)
312     - Update runit to 2.1.2
313     - Remove now uneeded obsolete directives
314     - Remove openssl from the Exclude list of centos repo
315     - Add a default Yum db property for check4contribsupdates
316     - Added a check-update for the smecontribs repository
317     - Move protected package list to the correct location
318    
319  General features  General features
320  ================  ================
321    - Based on CentOS 6.7 and all available updates
322    
323  - Based on CentOS 6.4 and all available updates  Terry Fage
324    On behalf of the SME Server development team
 $Id: README.txt,v 1.3 2013/10/05 05:06:26 wellsi Exp $  
   
   
   
   
   

Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed