SME Server:10.0Alpha5

Languages:

English

Koozali SME Server 10 Alpha 4 Release Notes

These are draft only and are in a constant state of update.

08 Jan 2019

The Koozali SME Server development team is pleased to announce the release of SME Server 10 Alpha 4 which will be the next major release of SME Server.

This release is based on CentOS 7. CentOS 7.# has an EOL of 30 June 2024.

Koozali SME Server users should not upgrade production servers to this release but those who can are encouraged to load the alpha to a dedicated test machine and take part in the testing phase.

Some notes on Koozali SME Server 10 can be found at https://wiki.contribs.org/SME_Server_10.0_Development

Bug reports and reports of potential bugs should be raised in the bug tracker (and only there, please);

   https://bugs.koozali.org/

The Koozali SME Server project

The Koozali Foundation Inc. is a nonprofit corporation that governs the open source Koozali SME Server project. Koozali SME Server is a stable, secure and easy to use/manage linux server that provides common server functionalities out of the box. Many open source contributions are available that can extend the default server functionality making Koozali SME Server an even more powerful and flexible business server solution. Thousands of Koozali SME Severs have been deployed as real or virtual servers and in the cloud to serve many small to medium enterprises, and this number is growing day by day. The Koozali SME Server is free to use but it takes a lot of effort and money to develop, make, and maintain. We therefore ask you for your considerations.

Volunteering

Koozali Foundation Inc. together with its community hosted at https://contribs.org is a collaborative effort of volunteers. You too can contribute to the development and continuity of the Koozali SME Server project as described on our volunteering page. Everybody is welcome to join the already 4000+ member contribs.org community and can contribute with any skill set.

Financial donations

You can also show your support by making financial donations. The preferred way to make financial donations is using the donate option in the forums. You are free to choose any amount and frequency, being monthly, yearly or only once. The benefit of donating through your forums account is that your forum user name will receive a badge, showing your donation status. If you do not have a forum account, you can create one, or select the below PayPal option to make your donations.

Commercial usage

Organizations that use Koozali SME Server for their business, provide professional services related to SME Server or in any other way benefit commercially from the Koozali SME Server project, are kindly requested to consider regular financial donations that reflect their business benefits.

Koozali Foundation Inc. is happy to supply an invoice for any donations received. For more information on invoicing please send a mail to treasurer@koozali.org.

Thank you for your considerations and support!

Download

You can download SME Server 10 from https://mirror.koozali.org/smeserver/releases/testing/10/ or for other methods see https://wiki.koozali.org/SME_Server:Download

Please note it may take up to 48 hours for mirrors to finish syncing, during this time you may experience problems.

About SME Server

SME Server is the leading Linux distribution for small and medium enterprises. SME Server is brought to you by Koozali Foundation, Inc., a non-profit corporation that exists to provide marketing and legal support for SME Server.

SME Server is freely available under the GNU General Public License and is only possible through the efforts of the SME Server community.

However, the availability and quality of SME Server is dependent on meeting our expenses, such as hosting costs, server hardware, etc.

As such, we ask for a donation to offset costs and fund further development.

a) If you are a school, a church, a non-profit organisation or an individual using SME Server for private purposes, we would appreciate you to contribute within your means toward the costs associated with hosting, maintenance and development.

b) If you are a company or an integrator and you are deploying SME Server in the course of your work to generate revenue, we expect you to make a donation commensurate with the level of revenue you generate and the number of servers your have in the field. Please, help the project

Please visit https://wiki.koozali.org/Donate to donate.

Koozali Inc is happy to supply an invoice for any donations received, simply email treasurer@koozali.org

Notes

In-place upgrades are not supported. It is necessary to backup and then restore. (Remember, testing purpose only)

The spare handling for RAID arrays is not implemented as yet.

USB installs are not supported in this release, see Bug 10632

Current installer is still branded CentOS. A kickstart script allows you to go through the graphical installation process. If your disk is not empty, you will need to use the Anaconda interface to format it and partition it. If it is empty all is automatic. You will have to set your root password during the Koozali SME server configuration process.

Major changes in this release

This release is based on CentOS 7

Changes in this release

see above

General features

====

- Based on CentOS 7.6.1810 and all available updates

Detailed changes in this release

===========

Only the changes since SME Server 10 Alpha3 are listed, mainly autogenerated from the changelogs.

Packages altered by Centos, Redhat, and Fedora-associated developers are not included.

Backups

1. e-smith-backup updated from 2.6.0-11.el7.sme to 2.6.0-12.el7.sme

- added patch for workstation backup lock [SME: 9127] - code from Stefano Zamboni <zamboni at mind-at-work.it>

File Server

1. e-smith-samba updated from 2.6.0-6.el7.sme to 2.6.0-7.el7.sme

- fix typo in /server-resources/regedit/win10samba.reg [SME: 10515]

1. samba updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
2. samba-common updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
3. samba-common-tools updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
4. samba-python updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
5. samba-client-libs updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
6. samba-client updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
7. samba-winbind-krb5-locator updated from 4.4.4-14.6.el7.sme to

4.6.2-12.4.el7.sme

1. samba-libs updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
2. samba-dc updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
3. samba-winbind-modules updated from 4.4.4-14.6.el7.sme to

4.6.2-12.4.el7.sme

1. samba-dc-libs updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
2. samba-winbind-clients updated from 4.4.4-14.6.el7.sme to

4.6.2-12.4.el7.sme

1. libwbclient updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
2. samba-common-libs updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
3. libsmbclient updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme
4. samba-winbind updated from 4.4.4-14.6.el7.sme to 4.6.2-12.4.el7.sme

- import 4.6.2-12 [SME: 10429] - change gnutls-devel >= 3.4.7 to gnutls-devel to allow build - import to SME the two last upstream releases [SME: 10326] - resolves: #1514314 - Fix CVE-2017-14746 and CVE-2017-15275 - resolves: #1491213 - CVE-2017-12150 CVE-2017-12151 CVE-2017-12163 - resolves: #1484423 - Require at least krb5 version 1.15.1 - resolves: #1484713 - Fix password changes for users via smbpasswd - resolves: #1484723 - Be more graceful on FSCTL_VALIDATE_NEGOTIATE_INFO - resolves: #1481188 - Fix 'net ads changetrustpw' - resolves: #1459936 - Fix regression with "follow symlinks = no" - resolves: #1461336 - Fix smbclient username parsing - resolves: #1460937 - Fix username normalization with winbind - resolves: #1459179 - Fix smbclient session setup printing - related: #1277999 - Add missing patchset - resolves: #1431986 - Fix expand_msdfs VFS module

LDAP

Localisation

1. smeserver-locale updated from 2.6.0-9.el7.sme to 2.6.0-11.el7.sme

- apply locale 2018-12-14 patch - apply locale 2017-12-02 patch

Mail Server

1. clamav updated from 0.99.2-1.el7.sme to 0.100.2-1.el7.sme

- Update to 0.100.2 [SME: 10578]

1. e-smith-pop3 updated from 2.6.0-2.el7.sme to 2.6.0-3.el7.sme

- fix undefined fqdn for pop3 [SME: 10257]

1. qpsmtpd updated from 0.96-18.el7.sme to 0.96-19.el7.sme

- add support to force spamcheck on specific IP for fetchmail [SME: 10290]

1. smeserver-qpsmtpd updated from 2.6.0-30.el7.sme to 2.6.0-32.el7.sme

- add forcespamcheck support for fetchmail [SME: 10290] - Log DMARC reporting in syslog instead of sending email to the admin. - Also suppress SSL connection failed warnings [SME: 10298]

1. djbdns updated from 1.05-8.el7.sme to 1.05-10.el7.sme

- improve short ttl cname resolution and glueless answer from akadns [SME: 8362] - 500-cutom-dnscache-maxloop.patch: increase QUERY_MAXLEVEL 5->10 , set QUERY_MAXLOOP 160 --import patches from openwrt and rename already applied patches --fix security issues [SME: 10374] - 020-dnsroots-update.patch: update list of root DNS servers - 070-dnscache-dpos-tcp-servfail.patch: SERVFAIL rename previous patch dns_transmit-bug.patch - 080-dnscache-cache-negatives.patch: rfc2308 ? - 210-dnscache-strict-forwardonly.patch: rename previous patch dnscache-strict-forwardonly.patch - 240-tinydns-alias-chain-truncation.patch: rename previous patch tinydns-alias-chain-truncation.patch - 270-dnscache-sigpipe-fix.patch: SIGPIPE - 300-bugfix-dnscache-dempsky-poison.patch: CVE-2009-0858 - 310-bugfix-dnscache-merge-outgoing-requests.patch: CVE-2008-4392 - 320-bugfix-dnscache-cache-soa-records.patch: CVE-2008-4392 - 450-dnscache-ghost-domain-CVE-2012-1191.patch: CVE-2012-1191 http://marc.info/?l=djbdns&m=134190748729079&w=2 --bug fixes [SME: 10374] - 060-dnscache-big-udp-packets.patch: accept and handle longer than 512 bytes UDP packets - 230-tinydns-data-semantic-error.patch: handle semantic error to avoid publishing false dns records --fix issue with short ttl cname like akamaid [SME: 8362] - 200-dnscache-cname-handling.patch: rename previous patch dnscache-cname-handling.patch - 330-fix-dnscache-cname-handling.patch: fix dnscache cname for short ttl - 500-cutom-dnscache-maxloop.patch: set max loop to 200 --needed for previous patches to apply cleanly - 030-srv-records-and-axfrget.patch: add SRV record type and axfr-get decompose SRC and PTR records (for 230-*.patch) - 050-tinydns-mmap-leak.patch: report cdb leak - 080-dnscache-cache-negatives.patch: rfc2308 ? - 090-tinydns-one-second.patch: improve tinydns with 8 or more concurent connections (for 240-*.patch) - 120-compiler-temporary-filename.patch: change tmp filename to avoid conflicts (for 230-*.patch)

1. smeserver-spamassassin updated from 2.6.0-7.el7.sme to 2.6.0-8.el7.sme

- disable auto_learn by default when enabling Bayes [SME: 8160] - added properties UseBayesAutoLearn, BayesAutoLearnThresholdSpam and BayesAutoLearnThresholdNonSpam

1. e-smith-qmail updated from 2.6.0-3.el7.sme to 2.6.0-4.el7.sme

- Update aliases files for every groups passed as argument [SME: 10386]

Server manager

php - load openssl configuration file on startup #1408301 - gd: fix buffer over-read into uninitialized memory CVE-2017-7890 - fix php should provide php(httpd) #1215429 - fpm: backport PHP-FPM's clear_env option from 5.4.27 #1410010 default value is "yes", preserving previous behaviour - openssl: fix default_socket_timeout does not work with SSL #1378196 - gd: fix DoS vulnerability in gdImageCreateFromGd2Ctx() CVE-2016-10167 - gd: Signed Integer Overflow gd_io.c CVE-2016-10168

Webmail and Groupware

Web Server

Other fixes and updates

1. e-smith-base updated from 5.8.0-35.el7.sme to 5.8.0-38.el7.sme

- icleaning xinetd.conf fragment out of the package [SME: 10219] - revert previous change - wrong package - added post transaction rule for ntp [SME: 10190] - thank you to Stefano Zamboni for this work

1. smeserver-yum updated from 2.6.0-16.el7.sme to 2.6.0-17.el7.sme

- add yum-plugin-post-transaction-actions as requirement [SME: 1100]

1. e-smith-devtools updated from 2.6.0-6.el7.sme to 2.6.0-7.el7.sme

- ease update of e-smith-devtools on non SME builders [SME: 10536]

1. smeserver-support updated from 2.8.0-12.el7.sme to 2.8.0-15.el7.sme

- exclude libtevent,python-tevent from base and updates to avoid conflict with localy build version of samba [SME: 10573] - add back perl(LWP::Protocol::https) support [SME: 10516] - upstream samba packages were not all excluded [SME: 10428]

1. e-smith-ntp updated from 2.6.0-3.el7.sme to 2.6.0-4.el7.sme

- added post transaction rule for ntp [SME: 10190] - thank you to Stefano Zamboni for this work

1. e-smith-lib updated from 2.6.0-6.el7.sme to 2.6.0-7.el7.sme

- Skip tap_soft interfaces (eg SoftEther, code from Hsing-Foo Wang)

  [SME: 10445]

On behalf of the Koozali SME Server development team - Compilation of release data is thanks to Ian Wells and Jean Phillipe Pialasse