1 |
Koozali SME Server 9.2 Beta 1 Release Notes |
Koozali SME Server 9.2 Beta1 Release Notes |
2 |
=========================================== |
=========================================== |
3 |
|
|
4 |
27 September 2016 |
10 October 2016 |
5 |
|
|
6 |
The Koozali SME Server (SME Server) development team is pleased to announce |
The Koozali SME Server (SME Server) development team is pleased to announce |
7 |
the release of SME Server 9.2 Beta 1 which is based on CentOS 6.8 |
the release of SME Server 9.2 Beta1 which is based on CentOS 6.8 |
8 |
|
|
9 |
Bug reports and reports of potential bugs should be raised in the bug |
Bug reports and reports of potential bugs should be raised in the bug |
10 |
tracker (and only there, please); |
tracker (and only there, please); |
14 |
Download |
Download |
15 |
======== |
======== |
16 |
|
|
17 |
You can download Koozali SME Server 9.2 Beta 1 from |
You can download Koozali SME Server 9.2 Beta1 from |
18 |
http://mirror.contribs.org/smeserver/releases/testing/9.2.beta1/ |
http://mirror.contribs.org/smeserver/releases/testing/9.2.beta1/ |
19 |
or for other methods see http://wiki.contribs.org/SME_Server:Download |
or for other methods see http://wiki.contribs.org/SME_Server:Download |
20 |
|
|
68 |
Major changes in this release |
Major changes in this release |
69 |
============================= |
============================= |
70 |
|
|
71 |
Major Changes in this release. LDAP - Hook into the new ssl-update event, Mail Server - Allow reading SSL_version from the tls_protocols config file (and turn TLSv1 back on by default), Modify whitelist_soft transaction to interact with dnsbl filter, Revert forcing TLSv1 patch as it breaks some inbound delivery, Remove karma rcpt handling, Check rua is defined before trying to parse it to prevent an error if a domain has a DMARC entry published with no rua, add support for the uribl plugin, add detailed spamassassin report headers. Server Manager - Allow access to the server-manager without SSL from the loopback, Don't redirect to http when login in/out of the server-manager from localhost. Web Server - Hook into the new ssl-update event, Set TLSv1 back to enabled (but keep a prop to disable it if needed). Other fixes and updates - Correctly display http URL to the server-manager in the console, Remove motd text from grub.cfg |
Major Changes in this release. Updated all to Koozali branding. Server Manager - Allow access to the server-manager without SSL from the loopback, Don't redirect to http when login in/out of the server-manager from localhost. File Server - added W10 support to SME Domain LDAP - Hook into the new ssl-update event, Mail Server - Allow reading SSL_version from the tls_protocols config file (and turn TLSv1 back on by default), Modify whitelist_soft transaction to interact with dnsbl filter, Revert forcing TLSv1 patch as it breaks some inbound delivery, Remove karma rcpt handling, Check rua is defined before trying to parse it to prevent an error if a domain has a DMARC entry published with no rua, add support for the uribl plugin, add detailed spamassassin report headers. Web Server - Hook into the new ssl-update event, Set TLSv1 back to enabled (but keep a prop to disable it if needed). Other fixes and updates - Correctly display http URL to the server-manager in the console, Remove motd text from grub.cfg |
72 |
|
|
73 |
|
|
74 |
Detailoed changes in this release |
Detailoed changes in this release |
82 |
|
|
83 |
File Server |
File Server |
84 |
|
|
85 |
|
- Create V6 profile dir (for Win10 roaming profiles) |
86 |
|
- The samba performance registry is now added in the win10samba.reg |
87 |
|
- added W10 support to SME Domain |
88 |
|
- Corrected typo in patch of bad character '', relative to roaming profile |
89 |
|
- e-smith-samba-2.4.0.bz9038.W10_registry.patch |
90 |
|
- Roaming profiles follow Windows version (.V2,.V3,.V4,.V5) |
91 |
|
- Added e-smith-samba-2.4.0.bz9048.RoamingProfileForW8.patch |
92 |
|
- Modified the registry file for roaming profile with W8 |
93 |
|
- e-smith-samba-2.4.0.bz9038.W10_registry.patch |
94 |
|
- Fix samba audit parameters Patch from Jorge Gonzalez |
95 |
|
- Replace syslog template to rsyslog so samba audits are logged in the correct |
96 |
|
file |
97 |
- Additional tweak (to avoid null pointer dereference) for upstream bug 3868 |
- Additional tweak (to avoid null pointer dereference) for upstream bug 3868 |
98 |
- Fix for CVE-2016-3125: usage of 1024 bit DH key even with manual parameters |
- Fix for CVE-2016-3125: usage of 1024 bit DH key even with manual parameters |
99 |
set (http://bugs.proftpd.org/show_bug.cgi?id=4230) |
set (http://bugs.proftpd.org/show_bug.cgi?id=4230) |
113 |
- Hook into the new ssl-update event |
- Hook into the new ssl-update event |
114 |
- Remove size limit for search result |
- Remove size limit for search result |
115 |
- Make pdbedit output independent from locale and timezone so it can be |
- Make pdbedit output independent from locale and timezone so it can be |
116 |
parsed |
parsed |
117 |
- Symlink /etc/init.d/ldap to /usr/bin/sv, |
- Symlink /etc/init.d/ldap to /usr/bin/sv, |
118 |
Chown all DB files to ldap before staring slapd |
Chown all DB files to ldap before staring slapd |
119 |
- Set checkpoint in slapd.conf instead of DB_CONFIG, |
- Set checkpoint in slapd.conf instead of DB_CONFIG, |
138 |
- Disable fips mode on stunnel |
- Disable fips mode on stunnel |
139 |
- Use stunnel instead of sslio to support TLS |
- Use stunnel instead of sslio to support TLS |
140 |
- Add possibility to exclude users or members of other groups from group |
- Add possibility to exclude users or members of other groups from group |
141 |
email address |
email address |
142 |
|
- Validate domains found in uribl with Data::Validate::Domain [SME: 9499] |
143 |
|
- Use eval to fetch dkim policies, prevent fatal errors in case of DNS |
144 |
|
timeout [SME: 9504] |
145 |
- Remove karma rcpt handling, Fix karma logic by checking negative strikes |
- Remove karma rcpt handling, Fix karma logic by checking negative strikes |
146 |
Backport a fix for karma_tool so it can find its database |
Backport a fix for karma_tool so it can find its database |
147 |
- Check rua is defined before trying to parse it to prevent an error |
- Check rua is defined before trying to parse it to prevent an error |
169 |
- Allow settings SSL protocols from DB (and set TLSv1 back to enabled |
- Allow settings SSL protocols from DB (and set TLSv1 back to enabled |
170 |
on a default install) |
on a default install) |
171 |
- Disable TLSv1 |
- Disable TLSv1 |
172 |
- Allow custom passdb args |
- Allow custom passdb args |
173 |
|
- Set the default helo policy to lenient [SME: 9767] |
174 |
|
- Turn SPF and DMARC rejects off by default [SME: 9654] |
175 |
|
- Fix disabling DMARC reporting [SME: 9507] |
176 |
- Remove o and r DKIM fields as they are not standard |
- Remove o and r DKIM fields as they are not standard |
177 |
- In qpsmtpd-print-dns set DKIM options after the public key so the string |
- In qpsmtpd-print-dns set DKIM options after the public key so the string |
178 |
will still be split correctly |
will still be split correctly |
211 |
|
|
212 |
Server manager |
Server manager |
213 |
|
|
214 |
|
- Update server-manager to Koozali branding thanks to John Crisp |
215 |
|
- e-smith-manager-2.6.0-Koozali_manager.patch |
216 |
- Better syntax for removing Indexes option for the manager |
- Better syntax for removing Indexes option for the manager |
217 |
- Remove index option for manager's resources |
- Remove index option for manager's resources |
218 |
- fix 307 redirection to http when https is used |
- fix 307 redirection to http when https is used |
219 |
- update syntaxe for TKT Auth bump 7 for typo |
- update syntaxe for TKT Auth bump 7 for typo |
220 |
corrected typo in e-smith-manager-2.4.0-dont_rewrite_to_https_from_localhost.patch |
corrected typo in e-smith-manager-2.4.0- dont_rewrite_to_https_from_localhost.patch |
221 |
code from John H. Bennett III bennettj@johnbennettservices.com |
code from John H. Bennett III bennettj@johnbennettservices.com |
222 |
- Really don't redirect to http when login in/out of the server-manager |
- Really don't redirect to http when login in/out of the server-manager |
223 |
- Don't redirect to http when login in/out of the server-manager from |
- Don't redirect to http when login in/out of the server-manager from |
224 |
localhost |
localhost |
225 |
- Allow access to the server-manager without SSL from the loopback |
- Allow access to the server-manager without SSL from the loopback |
226 |
|
- don't set environmental variable based on user supplied Proxy |
227 |
|
request header CVE-2016-5385 |
228 |
- fix wrong warning in openssl_encrypt() for missing IV |
- fix wrong warning in openssl_encrypt() for missing IV |
229 |
when IV is not required #1260315 |
when IV is not required #1260315 |
230 |
- fix segfault's when you try and allocate an SplFixedArray |
- fix segfault's when you try and allocate an SplFixedArray |
298 |
- mysqli: fix possible segfault in mysqli_stmt::bind_result |
- mysqli: fix possible segfault in mysqli_stmt::bind_result |
299 |
php bug 66762 (#1069167) |
php bug 66762 (#1069167) |
300 |
- mysql: fix php_mysql_fetch_hash writes long value into int |
- mysql: fix php_mysql_fetch_hash writes long value into int |
301 |
php bug 52636 (#1054953) |
php bug 52636 (#1054953) |
302 |
|
|
303 |
Web Server |
Web Server |
304 |
|
|
312 |
|
|
313 |
Other fixes and updates |
Other fixes and updates |
314 |
|
|
315 |
|
- Allow /32 masks on the external interface, in which case we don't |
316 |
|
check if the gateway is on the correct network) [SME: 9765] |
317 |
- Add a column to display forwarding address |
- Add a column to display forwarding address |
318 |
- Correctly display http URL to the server-manager in the console |
- Correctly display http URL to the server-manager in the console |
319 |
- Fire ssl-update event when default cert is renewed |
- Fire ssl-update event when default cert is renewed |
339 |
- Fix PPPoE after a post-upgrade |
- Fix PPPoE after a post-upgrade |
340 |
- Remove dependency on microcode_ctl |
- Remove dependency on microcode_ctl |
341 |
- Prevent emailing about the normal, weekly, checks of RAID arrays, by Mark Casey |
- Prevent emailing about the normal, weekly, checks of RAID arrays, by Mark Casey |
342 |
|
- Quote filenames in genfilelist so filenames containing spaces are correctly |
343 |
|
handled |
344 |
|
- Added new createlinks function event_templates event_actions event_services |
345 |
|
- Don't claim to own /sbin and /sbin/e-smith |
346 |
- Remove motd text from grub.cfg |
- Remove motd text from grub.cfg |
347 |
- Allow empty comment when creating/modifying a hostname |
- Allow empty comment when creating/modifying a hostname |
348 |
- Add a migrate fragment to sanitize the host comment |
- Add a migrate fragment to sanitize the host comment |
355 |
- Thanks to Michael McCarn and Jean-philippe Pialasse |
- Thanks to Michael McCarn and Jean-philippe Pialasse |
356 |
- init-ibays create the folder tmp within all i-bays root directory |
- init-ibays create the folder tmp within all i-bays root directory |
357 |
- ibay-modify create/chown/chmod the folder tmp within the i-bays root directory |
- ibay-modify create/chown/chmod the folder tmp within the i-bays root directory |
358 |
- Add an upload_tmp_folder setting by db command |
- Add an upload_tmp_folder setting by db command Thanks to Michael McCarn and Jean-philippe Pialasse |
|
- Thanks to Michael McCarn and Jean-philippe Pialasse |
|
359 |
- Force SSL following ibays settings to the relevant domain |
- Force SSL following ibays settings to the relevant domain |
360 |
- Perl::critic syntax modifications |
- Perl::critic syntax modifications |
361 |
- Add more PHP options to ibays only by db commands |
- Add more PHP options to ibays only by db commands |
367 |
- Roll in CentOS Branding |
- Roll in CentOS Branding |
368 |
- functions: parse -d first |
- functions: parse -d first |
369 |
- functions: fix ignored delay in killproc |
- functions: fix ignored delay in killproc |
370 |
- netfs: only unmount loopback device mounted on top of netdev or with back-file on netdev |
- netfs: only unmount loopback device mounted on top of netdev or with back-file on netdev |
371 |
- functions: improve killing loops |
- functions: improve killing loops |
372 |
- netfs: tweak nfs umount |
- netfs: tweak nfs umount |
373 |
- sysctl.conf: mention sysctl -a |
- sysctl.conf: mention sysctl -a |
415 |
- backport to SME9 |
- backport to SME9 |
416 |
- fix redirection when proxy ssl |
- fix redirection when proxy ssl |
417 |
- update apxs path for SME9 (sbin) |
- update apxs path for SME9 (sbin) |
418 |
- Bump for beta1 release of 9.2 |
- Koozali branding of manager |
|
- Bump for 9.1 final |
|
|
- Bump for release candidate 1 |
|
|
- Bump for beta3 of 9.1 |
|
|
- Bump for beta2 of 9.1 and update displayversion as well |
|
|
- Update for beta1 release of 9.1 |
|
419 |
- Update copyright in server-manager footer |
- Update copyright in server-manager footer |
420 |
- Don't put motd content in /etc/redhat-release |
- Don't put motd content in /etc/redhat-release |
421 |
- created a template for /etc/system-release |
- created a template for /etc/system-release |