/[smeserver]/cdrom.image/sme9/README.txt
ViewVC logotype

Diff of /cdrom.image/sme9/README.txt

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.6 by wellsi, Tue Dec 24 16:38:49 2013 UTC Revision 1.15 by vip-ire, Thu Jun 25 14:30:43 2015 UTC
# Line 1  Line 1 
1  SME Server 9.0 Beta 3 Release Notes  Koozali SME Server 9.1 Beta 2 Release Announcement
 ===================================  
2    
3  25 December 2013  Koozali SME Server 9.1 Beta 2 Release Notes
4    ===========================================
5    
6  The SME Server development team is pleased to announce the release of  25th June 2015
7  SME Server 9.0 Beta 3 which is based on CentOS 6.5  
8    The Koozali SME Server (SME Server) development team is pleased to announce
9    the release of SME Server 9.1 Beta 2 which is based on CentOS 6.6.
10    
11  Bug reports and reports of potential bugs should be raised in the bug  Bug reports and reports of potential bugs should be raised in the bug
12  tracker (and only there, please);  tracker (and only there, please);
13    
14      http://bugs.contribs.org/      http://bugs.contribs.org/
15    
16    Download
17    ========
18    
19    You can download SME Server 9.1 Beta 2 from
20    http://mirror.contribs.org/smeserver/releases/testing/9.1.beta2/
21    or for other methods see http://wiki.contribs.org/SME_Server:Download
22    
23    Please note it may take up to 48 hours for mirrors to finish syncing,
24    during this time you may experience problems.
25    
26    
27  About SME Server  About SME Server
28  ================  ================
29    
30  SME Server is the leading Linux distribution for small and medium  SME Server is the leading Linux distribution for small and medium
31  enterprises. SME Server is brought to you by Koozali Foundation, Inc.,  enterprises. SME Server is brought to you by Koozali Foundation, Inc.,
32  a non-profit corporation that exists to provide marketing and legal support  a non-profit corporation that exists to provide marketing and legal support
33  for SME Server.  for SME Server.
34    
35  SME Server is freely available under the GNU General Public License and  SME Server is freely available under the GNU General Public License and
# Line 25  However, the availability and quality of Line 38  However, the availability and quality of
38  meeting our expenses, such as hosting costs, server hardware, etc.  meeting our expenses, such as hosting costs, server hardware, etc.
39    
40  As such, we ask for a donation to offset costs and fund further development.  As such, we ask for a donation to offset costs and fund further development.
41    
42  a) If you are a school, a church, a non-profit organisation or an individual  a) If you are a school, a church, a non-profit organisation or an individual
43  using SME Server for private purposes, we would appreciate you to contribute  using SME Server for private purposes, we would appreciate you to contribute
44  within your means toward the costs associated with hosting, maintenance and  within your means toward the costs associated with hosting, maintenance and
45  development.  development.
46    
47  b) If you are a company or an integrator and you are deploying SME Server in  b) If you are a company or an integrator and you are deploying SME Server in
48  the course of your work to generate revenue, we expect you to make a donation  the course of your work to generate revenue, we expect you to make a donation
49  commensurate with the level of revenue you generate and the number of servers  commensurate with the level of revenue you generate and the number of servers
# Line 36  your have in the field. Please, help the Line 51  your have in the field. Please, help the
51    
52  Please visit http://wiki.contribs.org/Donate to donate.  Please visit http://wiki.contribs.org/Donate to donate.
53    
54  Koozali Inc is happy to supply an invoice for any donations received,  Koozali Inc is happy to supply an invoice for any donations received,
55  simply email treasurer@koozali.org  simply email treasurer@koozali.org
56    
57    
 Thanks  
 ======  
   
 The development team would like to thank all of those who have involved  
 themselves with this release.  
   
58  Notes  Notes
59  =====  =====
60    
61  This section will be updated in a following ISO  In-place upgrades are not supported. It is necessary to backup and then restore.
62    /boot partition is always RAID 1.
63    The spare handling for RAID arrays is not implemented.
64    
65    USB installs are now supported, see:
66    http://wiki.contribs.org/Install_From_USB#SME_Server_9
67    
 Major changes in this release  
 =============================  
   
 The installer has been substantially modified in Beta 2.  
 It now creates the degraded RAID1 array with a single disk install.  
 Some, but not all,  install options are now supported.  
   
 The base has been updated to CentOS 6.5  
   
 The network interface code has been reworked to remove all hardcoding  
 relating to eth0 and eth1.  
68    
69  Changes in this release  Changes in this release
70  =======================  =======================
71    
72  This section will be further updated in a later release  Only the changes since SME Server 9.0 are listed, mainly
73  Currently this only shows changes since SME Server 9.0 Alpha 3 and it is  autogenerated from the changelogs.
 autogenerated from the changelogs. A more human readable version will be  
 written.  
   
74    
75  Packages altered by Centos, Redhat, and Fedora-associated developers are  Packages altered by Centos, Redhat, and Fedora-associated developers are
76  not included.  not included.
# Line 79  not included. Line 78  not included.
78    
79  Backups  Backups
80  -------  -------
81     - dar new upstream version
82     - dar add pkgconfig
83     - Workstation Backup, do not fail backup for mtime/ctime mismatch
84     - Change the sub checkMount() to findmnt Ian Wells <esmith@wellsi.com>
85     - Add requires nfs-utils
86     - The nfs service is neither started or allowed to start
87     - Don't remove the apache group during restore
88    
 - Workstation Backup, fix selective restore by requesting array  
   of results from CGI.pm.  
 - Workstation Backup, new method to show files being restored is needed  
   when using dar 2.4.  
 - Simplify the workstation backup report.  
 - Workstation Backup, count backup sets from 1.  
 - Update the text in the Backup panel.  
 - Allow more time for cifs mounts before reporting errors.  
 - Dar updated to 2.4.10.  
 - Workstation Backup, add a choice to delete old backup before or after  
   backup.  
 - Workstation Backup, remove temporary directory on success.  
 - Refactor directory tree creation and removal.  
 - Workstation Backup, inconsistent formatting of host share name in messages.  
 - Workstation Backup, more reliable catalog creation.  
 - Workstation Backup, report cifs mount errors.  
 - Workstation Backup, do not access /proc/mounts  
 - Incremental backup fix.  
 - Workstation Backup, allow spaces in the backup destination.  
   Includes fix for disk usage broken with spaces.  
 - Desktop Backup, allow user setting of compression level.  
 - Use Wake on LAN before starting Backup with DAR.  
 - NFS syntax is deprecated for CIFS mount.  
 - Require cifs-utils and use UNC paths for cifs mount.  
 - Improve text in console backup for success and failure.  
 - Console USB Backup, allow user setting of compression level.  
   Compression level of the console backup is now -6 by default.  
 - Patch to exclude trying to backup aquota.* files so that backups to tape will  
   succeed.  
89    
90  File Server  LDAP
 -----------  
 - Also remove the empty template-begin file in pam.d/proftpd templates.  
 - Remove unused pam templates.  
 - Replace vfs_shadow_copy with vfs_shadow_copy2 for shadow snapshots.  
 - Add template for wide links.  
 - Add templates for max protocol.  
 - Add support for Windows 8 domain joining & user login.  
 - Add windows network performance enhancements registry file.  
 - Update default ServerName in 30smbServerName  
 - Add ability to configure waiting for network Win7 registry option.  
 - Change default Workgroup and Domain to sme-server.  
 - Fix mod_sftp/mod_sftp_pam invalid pool allocation during kbdint  
   authentication.  
 - Replace vfs_shadow_copy with vfs_shadow_copy2 for shadow snapshots.    
   
 LDAP (Optional in SME 9.0, and considered experimental)  
91  ----  ----
92  - Adjust slapd ACL to change dn.subtree to dn.children.   - Remove size limit for search result
93     - Make pdbedit output independent from locale and timezone so it can be
94       parsed
95     - Symlink /etc/init.d/ldap to /usr/bin/sv
96     - Chown all DB files to ldap before staring slapd
97     - Set checkpoint in slapd.conf instead of DB_CONFIG
98     - Stop ldap on shutdown (rc0 and rc6)
99     - Don't overwrite the ldif dump if slapcat's output is empty
100       (code from Charlie Brady)
101     - Run db_recover on startup
102     - Don't wipe LDAP DB when the ldif dump is empty
103    
104  Localisation  Localisation
105  ------------  ------------
106  - Latest translations included.   - apply locale 2015-03-14 patch from pootle
107     - apply locale 2014-12-25 patch from pootle
108    
109  Mail Server  Mail Server
110  -----------  -----------
111  - Only present one auth method at a time, in order, to NET::SMTP.   - ClamAV Updated to release 0.98.7
112  - Allow webmail-only-local-network.   - Remove the patch e-smith-email-5.4.0-UEsDBBQDAAAIA-new-signature.patch
113  - Fix handling of messages with no body and no trailing \n after   - Add new zip file signatures to default mailpatterns database : UEsDBBQDAAAIA
114    headers (eq was used in attempted assignment).   - Add new zip file signatures to default mailpatterns database : ZIPVOSX & ZIPV3
115  - Fetchmail multidrop mode follows TCPPort setting.   - Disable fips mode on stunnel
116  - Always enable imap, listen on loopback is disabled.   - Use stunnel instead of sslio to support TLS
117  - Avoid use of unitialised variables in smtp migrate fragments.   - Revert forcing TLSv1 patch as it breaks some inbound delivery
118  - Simplify qmail concurrency templates.   - Revert whitelist_soft dnsbl as it hasn't been verified yet and we need to
119  - Modify domain style pseudonym pointing to user with dot in name.     push the fix for TLSv1
120  - Accept messages with no body and no trailing \n after headers.   - Modify whitelist_soft transaction to interact with dnsbl filter
121  - Fix Net::DNS update breaks qpsmtpd.     by John Crisp <jcrisp@safeandsoundit.co.uk>
122  - allows the spamassassin plugin to read the size limit from its   - Force usage of TLSv1
123    arguments   - Increase MemLimit to 700M for clamav-0.98
124  - Move clamscan scheduling to complete before 99-raid-check.   - Allow custom passdb args
125  - Listen on loopback if disabled.   - allow IP relayclient stored by DB
126  - Fix permissions on imapd.pem as it's used by pop3s.     Code from Stefano ZAmboni <zamboni@mind-at-work.it>
127  - Do not obsolete bglibs, it's required for cvm.     & Charlie Brady <charlieb-contribs-bugzilla@budge.apana.org.au>
128  - Allow plaintext (unless explicitly disabled).   - allow IP relayclient stored by DB
129  - Do not obsolete cvm, it's still needed for qpsmtpd.     Code from Stefano ZAmboni <zamboni@mind-at-work.it>
 - Fix size_limit initialization.  
 - reads MaxMessageSize prop of spamassassin and adds it  
   to the arguments of the plugin if defined.  
 - Requires e-smith-cvm-unix-local.  
 - Load TextCat plugin if ok_languages is enabled.  
 - Fix how qpsmtpd tags spam email.  
130    
131  Server manager  Server manager
132  --------------  --------------
133  - Renew donation text in server-manager.   - fileinfo: fix out-of-bounds read in elf note headers. CVE-2014-3710
134  - Do not load mod_ssl.   - xmlrpc: fix out-of-bounds read flaw in mkgmtime() CVE-2014-3668
135  - Remove log noise from Create starter web site panel.   - core: fix integer overflow in unserialize() CVE-2014-3669
136  - Add security fix for CVE-2013-4113.   - exif: fix heap corruption issue in exif_thumbnail() CVE-2014-3670
137  - Renew donation text and graphic in server-manager.   - spl: fix use-after-free in ArrayIterator due to object
138  - Update footer copyright and renew full copyright text.     change during sorting. CVE-2014-4698
139  - Change wording of Software Update button.   - spl: fix use-after-free in SPL Iterators. CVE-2014-4670
140     - gd: fix NULL pointer dereference in gdImageCreateFromXpm.
141  Webmail and Groupware     CVE-2014-2497
142  ---------------------   - fileinfo: fix incomplete fix for CVE-2012-1571 in
143  - Allow webmail-only-local-network.     cdf_read_property_info. CVE-2014-3587
144  - Don't use SSL over loopback.   - core: fix incomplete fix for CVE-2014-4049 DNS TXT
145       record parsing. CVE-2014-3597
146     - core: type confusion issue in phpinfo(). CVE-2014-4721
147     - date: fix heap-based buffer over-read in DateInterval. CVE-2013-6712
148     - core: fix heap-based buffer overflow in DNS TXT record parsing.
149       CVE-2014-4049
150     - core: unserialize() SPL ArrayObject / SPLObjectStorage type
151       confusion flaw. CVE-2014-3515
152     - fileinfo: out-of-bounds memory access in fileinfo. CVE-2014-2270
153     - fileinfo: unrestricted recursion in handling of indirect type
154       rules. CVE-2014-1943
155     - fileinfo: out of bounds read in CDF parser. CVE-2012-1571
156     - fileinfo: cdf_check_stream_offset boundary check. CVE-2014-3479
157     - fileinfo: cdf_count_chain insufficient boundary check. CVE-2014-3480
158     - fileinfo: cdf_unpack_summary_info() excessive looping
159       DoS. CVE-2014-0237
160     - fileinfo: CDF property info parsing nelements infinite
161       loop. CVE-2014-0238
162     - add php_get_module_initialized internal function (#1053301)
163     - soap: fixRFC2616 transgression (#1045019)
164     - fix static calling in non-static method (#953786)
165     - fix autoload called from closing session (#954027)
166     - drop unneeded part of CVE-2006-724.patch and fileinfo.patch
167       extension not provided or git binary patches (#1064027)
168     - odbc: fix incompatible pointer type (#1053982)
169     - mysqli: fix possible segfault in mysqli_stmt::bind_result
170       php bug 66762 (#1069167)
171     - mysql: fix php_mysql_fetch_hash writes long value into int
172       php bug 52636 (#1054953)
173    
174  Web Server  Web Server
175  ----------  ----------
176  - Force magic_quotes Off.   - DIsable SSLv3
177     - Revert CRIME mitigation patch, as it's not needed
178     - Mitigate CVE-2012-4929
179     - Turn SSLEngine on in the SSL vhost (ProxyPassVirtualHosts)
180     - Remove obsolete gpc_order setting from php.ini.
181     - Add an upload_tmp_folder setting by db command
182     - Thanks to Michael McCarn and Jean-philippe Pialasse
183    
184  Other fixes and updates  Other fixes and updates
185  -----------------------  -----------------------
186  - Do not hardcode NIC names to eth0 and eth1.   - Add dummy NIC support as InternalInterface
187  - Return nic names in probeAdapters so we can drop HWAddress.   - Only fire the ip-change event when IP is assigned to WAN nic
188  - Remove HWAddress prop from interfaces.   (Code by Charlie Brady and John Crisp)
189  - Remove the "swap interface" feature.   - Only reset service access when switching to or from private server mode
190  - Remove obsolete VLAN code.   (Code by Charlie Brady)
191  - Load the bonding module if NIC bonding is enabled.   - When quiting the console app with unsaved changes set the default selected
192  - Define the udev-post service in the DB.     answer to NO
193  - Restart rsyslog in logrotate event.   - Added a comment to specify the real configuration file of dhcpd
194  - Set smb ServerName if unset.   - Modified the patch of daniel e-smith-base-5.6.0-ensure_apache_alias_www.patch
195  - Don't reload init in bootstrap-console-save and console-save.   - Ensure www group exists and that apache is an alias of www
196  - Fix add_new_disk_to_raid1.   - Check where running runlevel 4, not 7 in service wrapper
197  - Provide the ability to force https per ibay.   - Correctly update NIC configuration on single NIC systems
198  - Add an audit for groups.   - Symlink udev-post service in rc7
199  - Update the full names of users added in %pre.   - Fix PPPoE after a post-upgrade
200  - Fix uid and gid to be the same for the users added in %pre.   - Remove dependency on microcode_ctl
201  - Changed Prereq to Requires(pre) as Prereq is deprecated.   - Prevent emailing about the normal, weekly, checks of RAID arrays, by Mark Casey
202  - Patch to correct issue with not being able to access a password protected   - Don't claim to own /sbin and /sbin/e-smith
203    ibay.   - Add an upload_tmp_folder setting by db command
204  - Update ServerName (Samba netbios name) when SystemName is updated.     Thanks to Michael McCarn and Jean-philippe Pialasse
205  - Remove old System Name from the Hosts DB.   - the folder /tmp is created by the event init-ibays
206  - Fix group creation when LDAP auth is enabled.   - the event ibay-modify create/chown/chmod the folder /tmp
207  - Disable IPv6 on a default install.   - Add an upload_tmp_folder setting by db command
208  - Continue escaping control chars in rsyslog, just replace LF with space.     Thanks to Michael McCarn and Jean-philippe Pialasse
209  - Use UTF-8 in the console.   - Force SSL following ibays settings to the relevant domain
210  - Remove redundant parts of init-accounts.   - Perl::critic syntax modifications
211  - Add_template_to_ssl.pem, codes by JP Pialasse.   - Add more PHP options to ibays only by db commands
212  - Require diald.   - Add SSLRequireSSL to ibays when SSL is set to enabled
213  - Removal of rc.e-smith now functionality is in e-smith-service.   - Allow the admin upsd in /etc/hosts.allow
214  - Replacement of rc.e-smith by moving code into e-smith-service.   - Creation Admin Privilege for use of upscmd & upsrw
215  - Fix the way '.' works in bash.   - Remove obsolete directives {allowfrom}
216  - rename /etc/ldap.conf to /etc/pam_ldap.conf (and same for .secret).   - Access property created (default value is 'localhost')
217  - Always define InternalInterface NICBonding.   - Remove obsolete directives {ACL,ACCEPT,REJECT} and switch to LISTEN
218  - In the console refer to removable media instead of USB disk.     in /etc/ups/upsd.conf
219  - Fix a few more syslog => rsyslog items.   - Allow NUT in /etc/hosts.allow and in /etc/services
220  - Remove modprobe stuff.     Code change from Daniel B.<daniel@firewall-services.com>
221  - Don't be as agressive on rate limiting.   - Revert the patch e-smith-tinydns-2.4.0_add_hostname_following_dhcpdleases_hostname.patch
222  - Change syslog templates to rsyslog.   - Duplicate hostnames with different IP are not used, a warn in log is printed
223  - Ensure existing_hwaddr is always initialized.   - The server hostname can not be used by a dhcp client, a warning in log is printed
224  - Change System Name from mitel-networks-server to sme-server.   - Changed the name of /tmp/dhcpd.leases to /tmp/tmpdhcpd.leases
225  - Patch to remove symlink to Primary ibay from /home/e-smith/files/primary.     when the dhcpd lease is modified
226  - Patch to correct issue with not being able to access a password protected   - Do template-expand of /var/service/tinydns/root/data
227    ibay.   - Do sigus1 of dhcp-dns & dnscache
228  - Correctly display accented letters in the console.   - Forked DHCPparse for parsing the end of lease and remove old entry of dnscache
229  - Add e-smith as a Requires(pre) and remove adding users in %pre.   - Require perl-Text-DHCPparse removed
230  - Fix uid and gid to be the same in create-system-user.   - Timestamp added in tinydns, the entry in dnscache is cleared when the lease is over
231  - Ignore mysql.event table.   - Add new feature 'Parse dhcpd.leases and feed to tinydns'
232  - Use --single-transaction in mysql-dump-tables.   - e-smith-tinydns-2.4.0_add_hostname_following_dhcpdleases_hostname.patch
233  - Use mysql_upgrade instead of fix_privilege_tables.     made from the solution of Stefano Zamboni
234  - Increase memory limit for ntp.   - Make slapd service an alias for ldap
235  - Make rsyslog listen to our socket.   - Switched to sysvinit from systemd (it's rhel-6)
236  - Remove rc.quota_create.   - Fixed license tag Related: rhbz#632853
237  - the config file is radiusclient.conf, not radiusclient-ng.conf.   - pptpd New version
238  - Add templates for radiusclient-ng.conf file to remove binaddr   - Dropped pppd-unbundle patch (upstreamed)
239    directive.   - Various fixes according to Fedora review Related: rhbz#632853
240  - Add directive to options.pptpd so that radius plugin can find the   - Modified for Fedora Resolves: rhbz#632853
241    radiusclient configuration file..   - Update to upstream version 2.3.4, which fixes CVE-2012-3478 and CVE-2012-2252
242  - Fix permissions of /etc/radiusclient-ng/servers.   - Updated rsync-protocol.patch to fix CVE-2012-2251, and to apply on top of the
243  - Add hack for running rc7.d script during runlevel 4.     CVE-2012-3478 and CVE-2012-2252 fixes.
244  - Apply SME Server config file changes to pwauth.   - Updated makefile.patch to preserve RPM CFLAGS.
245  - Fix libgomp obsoletes to not obsolete el6 version.   - Added command-line-error.patch (from Debian), correcting error message
246  - Change order of mail options in check4updates.     generated when insecure command line option is used (CVE-2012-3478 fix
247  - Fix parsing issues with "manage RAID" menu option in the console.     regression).
248  - Remove SSH v1 legacy support.   - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
249  - Support nolvm boot option.   - Add patch for rsync3 compat (#485946)
250  - Create degraded RAID1 array with single disk install.   - Update runit to 2.1.2
251  - nodmraid is the default for SME 9.0 installs.   - Remove now uneeded obsolete directives
252  - Give more time to the grub menu.   - Remove openssl from the Exclude list of centos repo
253  - Update installer hard drive warning.   - Add a default Yum db property for check4contribsupdates
254  - Customize confirmation dialogs during fresh install.   - Added a check-update for the smecontribs repository
255  - Run installer in 'text' mode.   - Move protected package list to the correct location
256    
257    
258  General features  General features
259  ================  ================
260    
261  - Based on CentOS 6.5 and all available updates  - Based on CentOS 6.6 and all available updates
262    
263    
264  $Id: README.txt,v 1.5 2013/11/06 06:26:57 wellsi Exp $  Terry Fage
265    On behalf of the SME Server development team


Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters

admin@koozali.org
ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed