/[smeserver]/cdrom.image/sme9/README.txt
ViewVC logotype

Diff of /cdrom.image/sme9/README.txt

Parent Directory Parent Directory | Revision Log Revision Log | View Revision Graph Revision Graph | View Patch Patch

Revision 1.21 by vip-ire, Tue Sep 27 19:56:16 2016 UTC Revision 1.22 by vip-ire, Sat Oct 8 09:53:48 2016 UTC
# Line 1  Line 1 
1  Koozali SME Server 9.2 Beta 1 Release Notes  Koozali SME Server 9.2 Beta1 Release Notes
2  ===========================================  ===========================================
3    
4  27 September 2016  10 October 2016
5    
6  The Koozali SME Server (SME Server) development team is pleased to announce  The Koozali SME Server (SME Server) development team is pleased to announce
7  the release of SME Server 9.2 Beta 1 which is based on CentOS 6.8  the release of SME Server 9.2 Beta1 which is based on CentOS 6.8
8    
9  Bug reports and reports of potential bugs should be raised in the bug  Bug reports and reports of potential bugs should be raised in the bug
10  tracker (and only there, please);  tracker (and only there, please);
# Line 14  tracker (and only there, please); Line 14  tracker (and only there, please);
14  Download  Download
15  ========  ========
16    
17  You can download Koozali SME Server 9.2 Beta 1 from  You can download Koozali SME Server 9.2 Beta1 from
18  http://mirror.contribs.org/smeserver/releases/testing/9.2.beta1/  http://mirror.contribs.org/smeserver/releases/testing/9.2.beta1/
19  or for other methods see http://wiki.contribs.org/SME_Server:Download  or for other methods see http://wiki.contribs.org/SME_Server:Download
20    
# Line 68  http://wiki.contribs.org/Install_From_US Line 68  http://wiki.contribs.org/Install_From_US
68  Major changes in this release  Major changes in this release
69  =============================  =============================
70    
71  Major Changes in this release. LDAP - Hook into the new ssl-update event, Mail Server - Allow reading SSL_version from the tls_protocols config file (and turn TLSv1 back on by default), Modify whitelist_soft transaction to interact with dnsbl filter, Revert forcing TLSv1 patch as it breaks some inbound delivery, Remove karma rcpt handling, Check rua is defined before trying to parse it to prevent an error if a domain has a DMARC entry published with no rua, add support for the uribl plugin, add detailed spamassassin report headers. Server Manager - Allow access to the server-manager without SSL from the loopback, Don't redirect to http when login in/out of the server-manager from localhost. Web Server - Hook into the new ssl-update event, Set TLSv1 back to enabled (but keep a prop to disable it if needed). Other fixes and updates - Correctly display http URL to the server-manager in the console, Remove motd text from grub.cfg  Major Changes in this release. Updated all to Koozali branding. Server Manager - Allow access to the server-manager without SSL from the loopback, Don't redirect to http when login in/out of the server-manager from localhost. File Server - added W10 support to SME Domain LDAP - Hook into the new ssl-update event, Mail Server - Allow reading SSL_version from the tls_protocols config file (and turn TLSv1 back on by default), Modify whitelist_soft transaction to interact with dnsbl filter, Revert forcing TLSv1 patch as it breaks some inbound delivery, Remove karma rcpt handling, Check rua is defined before trying to parse it to prevent an error if a domain has a DMARC entry published with no rua, add support for the uribl plugin, add detailed spamassassin report headers. Web Server - Hook into the new ssl-update event, Set TLSv1 back to enabled (but keep a prop to disable it if needed). Other fixes and updates - Correctly display http URL to the server-manager in the console, Remove motd text from grub.cfg
72    
73    
74  Detailoed changes in this release  Detailoed changes in this release
# Line 82  not included. Line 82  not included.
82    
83  File Server  File Server
84    
85     - Create V6 profile dir (for Win10 roaming profiles)
86     - The samba performance registry is now added in the win10samba.reg
87     - added W10 support to SME Domain  
88     - Corrected typo in patch of bad character '“', relative to roaming profile
89     - e-smith-samba-2.4.0.bz9038.W10_registry.patch
90     - Roaming profiles follow Windows version (.V2,.V3,.V4,.V5)  
91     - Added e-smith-samba-2.4.0.bz9048.RoamingProfileForW8.patch
92     - Modified the registry file for roaming profile with W8
93     - e-smith-samba-2.4.0.bz9038.W10_registry.patch
94     - Fix samba audit parameters Patch from Jorge Gonzalez
95     - Replace syslog template to rsyslog so samba audits are logged in the correct
96       file
97   - Additional tweak (to avoid null pointer dereference) for upstream bug 3868   - Additional tweak (to avoid null pointer dereference) for upstream bug 3868
98   - Fix for CVE-2016-3125: usage of 1024 bit DH key even with manual parameters   - Fix for CVE-2016-3125: usage of 1024 bit DH key even with manual parameters
99     set (http://bugs.proftpd.org/show_bug.cgi?id=4230)     set (http://bugs.proftpd.org/show_bug.cgi?id=4230)
# Line 101  LDAP Line 113  LDAP
113   - Hook into the new ssl-update event   - Hook into the new ssl-update event
114   - Remove size limit for search result   - Remove size limit for search result
115   - Make pdbedit output independent from locale and timezone so it can be   - Make pdbedit output independent from locale and timezone so it can be
116   parsed     parsed
117   - Symlink /etc/init.d/ldap to /usr/bin/sv,   - Symlink /etc/init.d/ldap to /usr/bin/sv,
118     Chown all DB files to ldap before staring slapd     Chown all DB files to ldap before staring slapd
119   - Set checkpoint in slapd.conf instead of DB_CONFIG,     - Set checkpoint in slapd.conf instead of DB_CONFIG,  
# Line 126  Mail Server Line 138  Mail Server
138   - Disable fips mode on stunnel   - Disable fips mode on stunnel
139   - Use stunnel instead of sslio to support TLS   - Use stunnel instead of sslio to support TLS
140   - Add possibility to exclude users or members of other groups from group   - Add possibility to exclude users or members of other groups from group
141     email address     email address
142     - Validate domains found in uribl with Data::Validate::Domain [SME: 9499]
143     - Use eval to fetch dkim policies, prevent fatal errors in case of DNS
144       timeout [SME: 9504]
145   - Remove karma rcpt handling, Fix karma logic by checking negative strikes   - Remove karma rcpt handling, Fix karma logic by checking negative strikes
146     Backport a fix for karma_tool so it can find its database     Backport a fix for karma_tool so it can find its database
147   - Check rua is defined before trying to parse it to prevent an error   - Check rua is defined before trying to parse it to prevent an error
# Line 154  Mail Server Line 169  Mail Server
169   - Allow settings SSL protocols from DB (and set TLSv1 back to enabled   - Allow settings SSL protocols from DB (and set TLSv1 back to enabled
170     on a default install)     on a default install)
171   - Disable TLSv1   - Disable TLSv1
172   - Allow custom passdb args   - Allow custom passdb args
173     - Set the default helo policy to lenient [SME: 9767]
174     - Turn SPF and DMARC rejects off by default [SME: 9654]
175     - Fix disabling DMARC reporting [SME: 9507]
176   - Remove o and r DKIM fields as they are not standard   - Remove o and r DKIM fields as they are not standard
177   - In qpsmtpd-print-dns set DKIM options after the public key so the string   - In qpsmtpd-print-dns set DKIM options after the public key so the string
178     will still be split correctly     will still be split correctly
# Line 193  Mail Server Line 211  Mail Server
211    
212  Server manager  Server manager
213    
214     - Update server-manager to Koozali branding thanks to John Crisp
215     - e-smith-manager-2.6.0-Koozali_manager.patch
216   - Better syntax for removing Indexes option for the manager   - Better syntax for removing Indexes option for the manager
217   - Remove index option for manager's resources   - Remove index option for manager's resources
218   - fix 307 redirection to http when https is used   - fix 307 redirection to http when https is used
219   - update syntaxe for TKT Auth bump 7 for typo   - update syntaxe for TKT Auth bump 7 for typo
220     corrected typo in e-smith-manager-2.4.0-dont_rewrite_to_https_from_localhost.patch     corrected typo in e-smith-manager-2.4.0-         dont_rewrite_to_https_from_localhost.patch
221     code from John H. Bennett III bennettj@johnbennettservices.com     code from John H. Bennett III bennettj@johnbennettservices.com
222   - Really don't redirect to http when login in/out of the server-manager   - Really don't redirect to http when login in/out of the server-manager
223   - Don't redirect to http when login in/out of the server-manager from   - Don't redirect to http when login in/out of the server-manager from
224     localhost     localhost
225   - Allow access to the server-manager without SSL from the loopback   - Allow access to the server-manager without SSL from the loopback
226     - don't set environmental variable based on user supplied Proxy
227       request header CVE-2016-5385
228   - fix wrong warning in openssl_encrypt() for missing IV   - fix wrong warning in openssl_encrypt() for missing IV
229     when IV is not required #1260315     when IV is not required #1260315
230   - fix segfault's when you try and allocate an SplFixedArray   - fix segfault's when you try and allocate an SplFixedArray
# Line 276  Server manager Line 298  Server manager
298   - mysqli: fix possible segfault in mysqli_stmt::bind_result   - mysqli: fix possible segfault in mysqli_stmt::bind_result
299     php bug 66762 (#1069167)     php bug 66762 (#1069167)
300   - mysql: fix php_mysql_fetch_hash writes long value into int   - mysql: fix php_mysql_fetch_hash writes long value into int
301   php bug 52636 (#1054953)     php bug 52636 (#1054953)
302    
303  Web Server  Web Server
304    
# Line 290  Web Server Line 312  Web Server
312    
313  Other fixes and updates  Other fixes and updates
314    
315     - Allow /32 masks on the external interface, in which case we don't
316      check if the gateway is on the correct network) [SME: 9765]
317   - Add a column to display forwarding address   - Add a column to display forwarding address
318   - Correctly display http URL to the server-manager in the console   - Correctly display http URL to the server-manager in the console
319   - Fire ssl-update event when default cert is renewed   - Fire ssl-update event when default cert is renewed
# Line 315  Other fixes and updates Line 339  Other fixes and updates
339   - Fix PPPoE after a post-upgrade   - Fix PPPoE after a post-upgrade
340   - Remove dependency on microcode_ctl   - Remove dependency on microcode_ctl
341   - Prevent emailing about the normal, weekly, checks of RAID arrays, by Mark Casey   - Prevent emailing about the normal, weekly, checks of RAID arrays, by Mark Casey
342     - Quote filenames in genfilelist so filenames containing spaces are correctly
343       handled
344     - Added new createlinks function event_templates event_actions event_services
345     - Don't claim to own /sbin and /sbin/e-smith
346   - Remove motd text from grub.cfg   - Remove motd text from grub.cfg
347   - Allow empty comment when creating/modifying a hostname   - Allow empty comment when creating/modifying a hostname
348   - Add a migrate fragment to sanitize the host comment   - Add a migrate fragment to sanitize the host comment
# Line 327  Other fixes and updates Line 355  Other fixes and updates
355   - Thanks to Michael McCarn and Jean-philippe Pialasse   - Thanks to Michael McCarn and Jean-philippe Pialasse
356   - init-ibays create the folder tmp within all i-bays root directory   - init-ibays create the folder tmp within all i-bays root directory
357   - ibay-modify create/chown/chmod the folder tmp within the i-bays root directory   - ibay-modify create/chown/chmod the folder tmp within the i-bays root directory
358   - Add an upload_tmp_folder setting by db command   - Add an upload_tmp_folder setting by db command Thanks to Michael McCarn and         Jean-philippe Pialasse
  - Thanks to Michael McCarn and Jean-philippe Pialasse  
359   - Force SSL following ibays settings to the relevant domain   - Force SSL following ibays settings to the relevant domain
360   - Perl::critic syntax modifications   - Perl::critic syntax modifications
361   - Add more PHP options to ibays only by db commands   - Add more PHP options to ibays only by db commands
# Line 340  Other fixes and updates Line 367  Other fixes and updates
367   - Roll in CentOS Branding   - Roll in CentOS Branding
368   - functions: parse -d first   - functions: parse -d first
369   - functions: fix ignored delay in killproc   - functions: fix ignored delay in killproc
370   - netfs: only unmount loopback device mounted on top of netdev or with back-file on netdev   - netfs: only unmount loopback device mounted on top of netdev or with back-file    on netdev
371   - functions: improve killing loops   - functions: improve killing loops
372   - netfs: tweak nfs umount   - netfs: tweak nfs umount
373   - sysctl.conf: mention sysctl -a   - sysctl.conf: mention sysctl -a
# Line 388  Other fixes and updates Line 415  Other fixes and updates
415   - backport to SME9   - backport to SME9
416   - fix redirection when proxy ssl   - fix redirection when proxy ssl
417   - update apxs path for SME9 (sbin)   - update apxs path for SME9 (sbin)
418   - Bump for beta1 release of 9.2   - Koozali branding of manager
  - Bump for 9.1 final  
  - Bump for release candidate 1  
  - Bump for beta3 of 9.1  
  - Bump for beta2 of 9.1 and update displayversion as well  
  - Update for beta1 release of 9.1  
419   - Update copyright in server-manager footer   - Update copyright in server-manager footer
420   - Don't put motd content in /etc/redhat-release   - Don't put motd content in /etc/redhat-release
421   - created a template for /etc/system-release   - created a template for /etc/system-release

Legend:
Removed lines/characters  
Changed lines/characters
  Added lines/characters
admin@koozali.org
 ViewVC Help
Powered by ViewVC 1.2.1 RSS 2.0 feed