| 1 |
alternc (0.9.8) stable; urgency=high |
|---|
| 2 |
|
|---|
| 3 |
This release is packed with minor enhancements and bugfixes. It also packages |
|---|
| 4 |
security fixes. Not all targets of the milestone were accomplished but this |
|---|
| 5 |
was released nevertheless because of the security issue. |
|---|
| 6 |
|
|---|
| 7 |
* security: |
|---|
| 8 |
* move mysql configuration into a valid MySQL configuration file |
|---|
| 9 |
(/etc/alternc/my.cnf). This fixes a serious security issue (#318) |
|---|
| 10 |
where the MySQL root password was passed on the commandline and could |
|---|
| 11 |
therefore be visible to local users (and hosted members that don't have |
|---|
| 12 |
safe_mode controls or can access the process table in some way). |
|---|
| 13 |
* disable the autocomplete on frontal user/login |
|---|
| 14 |
* various bugfixes |
|---|
| 15 |
* upgrade to Debian standard 3.7.3 (from 3.7.2.1) |
|---|
| 16 |
* added missing dependency on mysql-client |
|---|
| 17 |
* fix display of errors on directory creation |
|---|
| 18 |
* from Trac: #1012, #1082, #1077, #1109 |
|---|
| 19 |
* fix 0.9.7 regressions: #1079, #1080, #1099, #1076 |
|---|
| 20 |
* new features: |
|---|
| 21 |
* starting with this release, the old warning signal defaults to "YES" which |
|---|
| 22 |
means that AlternC can be automatically installed without preseeding. |
|---|
| 23 |
* crude implementation of a permission change interface in the file browser |
|---|
| 24 |
(partial implementation of #267) |
|---|
| 25 |
* standardisation of the web interface, along with some esthetic changes, by |
|---|
| 26 |
Marc Angles, sponsored by Koumbit (partial implementation of #37) |
|---|
| 27 |
* styles can now be changed locally in admin/styles/custom.css |
|---|
| 28 |
* allow arbitrary error strings in error handlers |
|---|
| 29 |
* copy and archive extraction in the file browser (#1043) |
|---|
| 30 |
* display at which time the DNS changes will take effect (#231) |
|---|
| 31 |
* use timestamp for sql backups rather than rotating the files (#1063) |
|---|
| 32 |
* other simple additions: #1043, #1097 |
|---|
| 33 |
|
|---|
| 34 |
-- Antoine Beaupré <anarcat@koumbit.org> Thu, 10 Apr 2008 13:56:22 -0400 |
|---|
| 35 |
|
|---|
| 36 |
alternc (0.9.7) stable; urgency=low |
|---|
| 37 |
|
|---|
| 38 |
* major release, closing more than 40 bugs, including... |
|---|
| 39 |
* Fixing MX check when hosting a mail (#1706) |
|---|
| 40 |
* Delete the zonefile properly when destroying a domain (#772) |
|---|
| 41 |
* Choose english as default language, (#1047) |
|---|
| 42 |
* Proper parameter checking in subdomain creation (#1037) |
|---|
| 43 |
* Changing ownership of /var/alternc/tmp, makes file upload work again (#1058) |
|---|
| 44 |
* Force the restart of apache & apache-ssl (#1000) |
|---|
| 45 |
* Redirect are now done on http://$url$1 base, not $url/$1 (#1054) |
|---|
| 46 |
* Patch to install properly apache and apache-ssl modules |
|---|
| 47 |
* We copy /etc/squirrelmail/default_pref content for new accounts in _createpop (#1015) |
|---|
| 48 |
* we configure postfix even if main.cf don't currently exist (#1009) |
|---|
| 49 |
* Fixed the 'view' link issues (no urlencode) (#690) |
|---|
| 50 |
* Change "move" to "move to" (ergonomic) (#787) |
|---|
| 51 |
* Confirm file deletion in the browser (#659) |
|---|
| 52 |
* fix dns install of internal hosting domains (#1056) |
|---|
| 53 |
* fix proftpd and saslauthd configuration for Etch (#1046, #1069) |
|---|
| 54 |
* fix .eu, .be, .name whois issue (#571) |
|---|
| 55 |
* change apache log format to a working one (using host request), also fix awstats issues. |
|---|
| 56 |
* fix modules manipulation rules (#1062) |
|---|
| 57 |
* try to support apache2, at least with the right dependencies |
|---|
| 58 |
* end explicit mysql-server dependencies, which switches to Recommends, |
|---|
| 59 |
since we can now configure remote mysql servers properly (#1014) |
|---|
| 60 |
* fix our phpmyadmin config for etch (#1052) |
|---|
| 61 |
* add portuguese translation |
|---|
| 62 |
* see subversion changelog for more details |
|---|
| 63 |
|
|---|
| 64 |
-- Antoine Beaupré <anarcat@koumbit.org> Fri, 9 Nov 2007 18:40:50 -0500 |
|---|
| 65 |
|
|---|
| 66 |
alternc (0.9.6.3) stable; urgency=low |
|---|
| 67 |
|
|---|
| 68 |
* change dependency on courier-authmysql or courier-authlib-mysql for etch |
|---|
| 69 |
* fix sql backups in case of missing target directory |
|---|
| 70 |
* fix translations |
|---|
| 71 |
* php5 compatibility |
|---|
| 72 |
* fix checkmx (#1031) |
|---|
| 73 |
* etch support |
|---|
| 74 |
|
|---|
| 75 |
-- Antoine Beaupré <anarcat@koumbit.org> Fri, 11 May 2007 01:18:08 +0000 |
|---|
| 76 |
|
|---|
| 77 |
alternc (0.9.6.2) stable; urgency=high |
|---|
| 78 |
|
|---|
| 79 |
* repackage 0.9.6.1 properly: include all latest fixes, which didn't make it |
|---|
| 80 |
to the package |
|---|
| 81 |
* don't put postfix in pre-depends |
|---|
| 82 |
* urgency=high because 0.9.6.1 doesn't include all the security fixes it |
|---|
| 83 |
pretends |
|---|
| 84 |
|
|---|
| 85 |
-- Antoine Beaupré <anarcat@koumbit.org> Wed, 17 Jan 2007 15:58:39 -0500 |
|---|
| 86 |
|
|---|
| 87 |
alternc (0.9.6.1) stable; urgency=high |
|---|
| 88 |
|
|---|
| 89 |
* Emergency release to fix issues with release 0.9.6. |
|---|
| 90 |
* Fix a security issue with override_php.conf not being configured in apache, effectively disabling open_basedir restrictions. Closes: #1005 |
|---|
| 91 |
* Show installation warning only once. Closes: #737 |
|---|
| 92 |
* Make it possible to erase files and directories in file browser. Closes: #1002. |
|---|
| 93 |
* Fix mail accounts creation. Closes: #1003. |
|---|
| 94 |
* Fix a race condition in update_domains.sh which could allow users to |
|---|
| 95 |
bypass openbasedir protection when creating domains. Reported by |
|---|
| 96 |
Jerome Moinet. |
|---|
| 97 |
|
|---|
| 98 |
-- Antoine Beaupré <anarcat@koumbit.org> Fri, 12 Jan 2007 15:59:42 -0500 |
|---|
| 99 |
|
|---|
| 100 |
alternc (0.9.6) stable; urgency=high |
|---|
| 101 |
|
|---|
| 102 |
* Replacing C setuid scripts by perl-suid one. AlternC is now arch-indep ! |
|---|
| 103 |
* Do not overwrite httpd.conf anymore. Everything is now done through includes in the /etc/apache/conf.d/ directory |
|---|
| 104 |
* Fix security issues with file browser and domain management that allowed an attacker to inspect the filesystem, create files in other accounts and perform cross site scripting javascript attacks. Credit: thabob. |
|---|
| 105 |
* #563: do not overwrite php.ini anymore. Everything is configured in the |
|---|
| 106 |
apache config. |
|---|
| 107 |
* All other bugs are postponed to 0.9.7 because of the security issue (hence |
|---|
| 108 |
urgency=high). See https://dev.alternc.org/trac/alternc/milestone/0.9.6 |
|---|
| 109 |
for more information. |
|---|
| 110 |
|
|---|
| 111 |
-- Antoine Beaupré <anarcat@koumbit.org> Mon, 27 Nov 2006 21:26:32 +0000 |
|---|
| 112 |
|
|---|
| 113 |
alternc (0.9.5) stable; urgency=low |
|---|
| 114 |
|
|---|
| 115 |
* maintenance release to fix packaging and security bugs |
|---|
| 116 |
* see https://dev.alternc.org/trac/alternc/milestone/0.9.5 for milestone |
|---|
| 117 |
* changelog at https://dev.alternc.org/trac/alternc/query?status=closed&milestone=0.9.5 |
|---|
| 118 |
However, this version contains mainly : |
|---|
| 119 |
* quota management fixes |
|---|
| 120 |
* bind now forbid recursion and domain poisoning |
|---|
| 121 |
* now using po-debconf |
|---|
| 122 |
* mysql right management now included in the web desktop. |
|---|
| 123 |
* .eu tld domain is now allowed. |
|---|
| 124 |
* postfix is now using saslauthd with rimap for smtp sasl authentication |
|---|
| 125 |
|
|---|
| 126 |
-- Benjamin Sonntag <benjamin@alternc.org> Thu, 4 May 2006 03:55:30 +0200 |
|---|
| 127 |
|
|---|
| 128 |
alternc (0.9.4) stable; urgency=low |
|---|
| 129 |
|
|---|
| 130 |
* maintenance release to fix packaging and security bugs |
|---|
| 131 |
* see https://dev.alternc.org/trac/alternc/milestone/0.9.4 for milestone |
|---|
| 132 |
* changelog at https://dev.alternc.org/trac/alternc/query?status=closed&milestone=0.9.4 |
|---|
| 133 |
However, this version contains mainly : |
|---|
| 134 |
* Integration of Globenet patchs (replacement of do_domains.sh by update_domains.sh and others) |
|---|
| 135 |
* Changing mysql database creation from uid to login name |
|---|
| 136 |
* Major improvements in FHS compliance |
|---|
| 137 |
* Major improvements in config file management and debconf idempotency |
|---|
| 138 |
|
|---|
| 139 |
-- Benjamin Sonntag <benjamin@alternc.org> Wed, 29 Mar 2006 19:34:41 +0200 |
|---|
| 140 |
|
|---|
| 141 |
alternc (0.9.3.1) testing; urgency=low |
|---|
| 142 |
|
|---|
| 143 |
* maintenance release to fix packaging and security bugs |
|---|
| 144 |
* see http://mantis.alternc.org/view.php?id=436 for milestones |
|---|
| 145 |
* full changelog at: http://mantis.alternc.org/changelog_page.php |
|---|
| 146 |
* Arch: all to have this package available in all architectures |
|---|
| 147 |
* take over maintainership |
|---|
| 148 |
* release sponsored by Koumbit.net |
|---|
| 149 |
|
|---|
| 150 |
-- Antoine Beaupre <anarcat@koumbit.org> Thu, 19 Jan 2006 20:48:45 +0000 |
|---|
| 151 |
|
|---|
| 152 |
alternc (0.9.3.9-globenet10) stable; urgency=low |
|---|
| 153 |
|
|---|
| 154 |
* Fix typo in sqlbackup.sh. |
|---|
| 155 |
* Another fix for empty host in update_domains.sh. |
|---|
| 156 |
* Fix database name spliting in the bureau. |
|---|
| 157 |
* Fix zone reload and php overrides bugs in update_domains.sh. |
|---|
| 158 |
* Don't try to generate php override file for IP hosts. |
|---|
| 159 |
* Redirect apache reload output to the log file in update_domains.sh. |
|---|
| 160 |
* Fix sendmail wrapper behaviour w.r.t. Sender header. |
|---|
| 161 |
* Correct Section and Maintainer field for the Debian package. |
|---|
| 162 |
|
|---|
| 163 |
-- Lunar <lunar@anargeek.net> Sat, 15 Oct 2005 02:43:37 +0200 |
|---|
| 164 |
|
|---|
| 165 |
alternc (0.9.3.9-globenet9) unstable; urgency=low |
|---|
| 166 |
|
|---|
| 167 |
* Fix deletion of empty host in update_domains.sh. |
|---|
| 168 |
* Fix DNS zone serial generation. |
|---|
| 169 |
|
|---|
| 170 |
-- Lunar <lunar@anargeek.net> Thu, 22 Sep 2005 00:26:15 +0200 |
|---|
| 171 |
|
|---|
| 172 |
alternc (0.9.3.9-globenet8) unstable; urgency=low |
|---|
| 173 |
|
|---|
| 174 |
* Finally fix empty host handling in update_domains.sh. |
|---|
| 175 |
|
|---|
| 176 |
-- Lunar <lunar@anargeek.net> Wed, 21 Sep 2005 23:45:06 +0200 |
|---|
| 177 |
|
|---|
| 178 |
alternc (0.9.3.9-globenet7) unstable; urgency=low |
|---|
| 179 |
|
|---|
| 180 |
* Fix menulist.txt symlink target. |
|---|
| 181 |
|
|---|
| 182 |
-- Lunar <lunar@anargeek.net> Wed, 21 Sep 2005 21:26:02 +0200 |
|---|
| 183 |
|
|---|
| 184 |
alternc (0.9.3.9-globenet6) unstable; urgency=low |
|---|
| 185 |
|
|---|
| 186 |
* Create menulist.txt symbolic link in debian/rules |
|---|
| 187 |
* Make menulist.txt migration more likely to happen |
|---|
| 188 |
|
|---|
| 189 |
-- Lunar <lunar@anargeek.net> Wed, 21 Sep 2005 21:08:08 +0200 |
|---|
| 190 |
|
|---|
| 191 |
alternc (0.9.3.9-globenet5) unstable; urgency=low |
|---|
| 192 |
|
|---|
| 193 |
* Rewrite sqlbackup.sh, enabling non-local MySQL server |
|---|
| 194 |
* allow mysql users connection from the web server (jonathan) |
|---|
| 195 |
* Move menulist.txt to /etc/alternc |
|---|
| 196 |
* Fix update_domains.sh not working with empty hostnames |
|---|
| 197 |
|
|---|
| 198 |
-- Lunar <lunar@anargeek.net> Wed, 21 Sep 2005 19:57:59 +0200 |
|---|
| 199 |
|
|---|
| 200 |
alternc (0.9.3.9-globenet4) unstable; urgency=low |
|---|
| 201 |
|
|---|
| 202 |
* named.template now points to the correct directory.. |
|---|
| 203 |
|
|---|
| 204 |
-- Lunar <lunar@anargeek.net> Thu, 15 Sep 2005 00:00:37 +0200 |
|---|
| 205 |
|
|---|
| 206 |
alternc (0.9.3.9-globenet3) unstable; urgency=low |
|---|
| 207 |
|
|---|
| 208 |
* Fix mail not sent from PHP scripts |
|---|
| 209 |
* Actually exit update_domains.sh when killed |
|---|
| 210 |
* Fix templates warning |
|---|
| 211 |
* Fix reverse DNS test for BIND_INTERNAL |
|---|
| 212 |
|
|---|
| 213 |
-- Lunar <lunar@anargeek.net> Wed, 14 Sep 2005 23:54:23 +0200 |
|---|
| 214 |
|
|---|
| 215 |
alternc (0.9.3.9-globenet2) unstable; urgency=low |
|---|
| 216 |
|
|---|
| 217 |
* Fix alternc.install failling when unable to backup an unecessary file. |
|---|
| 218 |
|
|---|
| 219 |
-- Lunar <lunar@anargeek.net> Tue, 6 Sep 2005 23:18:56 +0200 |
|---|
| 220 |
|
|---|
| 221 |
alternc (0.9.3.9-globenet1) unstable; urgency=low |
|---|
| 222 |
|
|---|
| 223 |
* Major overhaul of configuration and install system: |
|---|
| 224 |
- /etc/alternc/alternc.conf is no more and /etc/alternc/local.sh |
|---|
| 225 |
is used by everyone else. |
|---|
| 226 |
- alternc.install was rewritten. |
|---|
| 227 |
- configuration templates now lies in /etc/alternc/templates, |
|---|
| 228 |
tagged as conffiles. |
|---|
| 229 |
- alternc.install will now check if you have changed a configuration |
|---|
| 230 |
file without modifying the template and calling alternc.install |
|---|
| 231 |
again. |
|---|
| 232 |
- alternc.install now determines which configuration files it needs |
|---|
| 233 |
based on what is currently installed, thus it's easier to build |
|---|
| 234 |
custom Debian package with lower deps. |
|---|
| 235 |
* BIND interaction mostly rewritten: |
|---|
| 236 |
- do_domaines.sh is no more and replaced by update_domains.sh |
|---|
| 237 |
- templates used to build automatic.conf and zone files are now in |
|---|
| 238 |
/etc/bind/templates once installed |
|---|
| 239 |
- automatic.conf and slaveip.conf are now generated in /var/alternc/bind |
|---|
| 240 |
- zone files are now generated in /var/alternc/bind/zones. |
|---|
| 241 |
- the secondary feature and /usr/lib/alternc/bind2 are gone |
|---|
| 242 |
* Small things: |
|---|
| 243 |
- Striped the second reject_unauth_destination from postfix main.cf. |
|---|
| 244 |
- Fixed debconf dependency. |
|---|
| 245 |
- Add support for quota on NFS partitions. |
|---|
| 246 |
- Disk usage calculation disabled for directories in browser. |
|---|
| 247 |
- bind_internal is now used in named.conf template. |
|---|
| 248 |
- Fixed phpmyadmin server list bug. |
|---|
| 249 |
|
|---|
| 250 |
-- Lunar <lunar@anargeek.net> Tue, 6 Sep 2005 20:34:53 +0200 |
|---|
| 251 |
|
|---|
| 252 |
alternc (0.9.3) testing; urgency=low |
|---|
| 253 |
|
|---|
| 254 |
* Upstream update : many bugfixes, see the bugs related to |
|---|
| 255 |
http://mantis.alternc.org/view.php?id=246 for details |
|---|
| 256 |
|
|---|
| 257 |
-- Benjamin Sonntag <benjamin@alternc.org> Wed, 10 Nov 2004 00:00:00 +0200 |
|---|
| 258 |
|
|---|
| 259 |
alternc (0.9.2-2) testing; urgency=low |
|---|
| 260 |
|
|---|
| 261 |
* Upstream update : many bugfixes (http://mantis.alternc.org) |
|---|
| 262 |
|
|---|
| 263 |
-- Benjamin Sonntag <benjamin@alternc.org> Wed, 09 Sep 2004 23:04:26 +0200 |
|---|
| 264 |
|
|---|
| 265 |
alternc (0.9.2-1) testing; urgency=low |
|---|
| 266 |
|
|---|
| 267 |
* Upstream update |
|---|
| 268 |
|
|---|
| 269 |
-- Benjamin Sonntag <benjamin@alternc.org> Fri, 27 Aug 2004 18:04:26 +0200 |
|---|
| 270 |
|
|---|
| 271 |
alternc (0.9.1-1) testing; urgency=low |
|---|
| 272 |
|
|---|
| 273 |
* Upstream update |
|---|
| 274 |
|
|---|
| 275 |
-- Benjamin Sonntag <benjamin@alternc.org> Fri, 04 Jun 2004 19:31:26 +0200 |
|---|
| 276 |
|
|---|
| 277 |
alternc (0.9-1) testing; urgency=low |
|---|
| 278 |
|
|---|
| 279 |
* Initial Release. |
|---|
| 280 |
|
|---|
| 281 |
-- Benjamin Sonntag <benjamin@alternc.org> Tue, 27 Aug 2002 19:31:26 +0200 |
|---|
| 282 |
|
|---|
| 283 |
Local variables: |
|---|
| 284 |
mode: debian-changelog |
|---|
| 285 |
End: |
|---|
| 286 |
|
|---|
| 287 |
|
|---|
