Alternc  latest
Alternc logiel libre pour l'hébergement
changelog
Go to the documentation of this file.
1 alternc (3.5.0~rc1) stable; urgency=low
2 
3  * AlternC 3.5 for Jessie & Stretch
4  * added AlternC-ssl natively now, based on cert providers (external package)
5 
6  -- Benjamin Sonntag <benjamin@sonntag.fr> Sun, 24 Jun 2018 15:26:00 +0200
7 
8 alternc (3.1.11) oldoldstable; urgency=low
9 
10  * fix This is a big security upgrade of AlternC 3.x
11  * added CSRF token to all forms (as much as possible) to prevent cross-site attacks
12  * added XSS protection to many form fields and views
13  * migrated the DB abstraction layer from mysql_* functions to PDO
14  * migrated the DB calls from addslases to prepared-queries or quotes
15  * fix many unix rights issues (prevents a root escalation from alterncpanel!)
16  * fix some little interface issues on forms
17 
18  -- Benjamin Sonntag <benjamin@sonntag.fr> Fri, 27 May 2016 10:36:00 +0200
19 
20 alternc (3.3.10) stable; urgency=low
21 
22  * Version identical to 3.1 for Squeeze
23  * Includes small patches / dependency for apache & dovecot 2.0 for Jessie
24 
25  -- Benjamin Sonntag <benjamin@sonntag.fr> Fri, 15 Jan 2016 15:26:00 +0100
26 
27 alternc (3.2.10) oldstable; urgency=low
28 
29  * Version identical to 3.1 for Squeeze
30  * Includes a small dovecot patch / dependency for dovecot 2.0 for Wheezy
31 
32  -- Benjamin Sonntag <benjamin@sonntag.fr> Fri, 15 Jan 2016 15:26:00 +0100
33 
34 alternc (3.1.11) oldoldstable; urgency=low
35 
36  * fix This is a big security upgrade of AlternC 3.x
37  * added CSRF token to all forms (as much as possible) to prevent cross-site attacks
38  * added XSS protection to many form fields and views
39  * migrated the DB abstraction layer from mysql_* functions to PDO
40  (necessary for security, also adds PHP7.0 compatibility)
41  * migrated the DB calls from addslases to prepared-queries or quotes
42  * fix many unix rights issues (prevents a root escalation from alterncpanel!)
43  * fix some little interface issues on forms
44  * enh adding IP address to panel logs (PR #153)
45  * enh adding X-Forwarded-Proto detection for SSL, not only HTTP_SSL from Apache
46  * enh add a variable to enable IP check in the panel (broken), disabled by default
47  * fix opendkim signing for mails submitted over the network
48  * fix a LOT of bugs from Github: #128 #69 #116 #123 #126 #134 #139 #156 #173 #138
49  * fix more BUGS from Github: #178 #159 #155 #176 #161 #162 #164 #165 #166 #170 #175 #177
50  * enhanced message class, managed both logs to /var/log/alternc and LEVELS of messages
51 
52  -- Benjamin Sonntag <benjamin@sonntag.fr> Wed, 6 Nov 2017 15:36:00 +0100
53 
54 alternc (3.1.10) oldoldstable; urgency=low
55 
56  * fix not showing dropdown when installing second domain in some case. #28
57  * fix password autocomplete fix for Firefox (HoneypotField) #27
58  * fix underscore not allowed in the middle of a domain name #26
59  * fix Cname not ending with . is now an error #25
60  * fix Show a warning when creating a non-working email (not pop, not alias) #18
61 
62  -- Benjamin Sonntag <benjamin@sonntag.fr> Fri, 15 Jan 2016 15:26:00 +0100
63 
64 alternc (3.1.9) oldoldstable; urgency=low
65 
66  * fix missing GLOBALS in various places
67  * fix non-installed default_spf_value and default_dmarc_value in variables
68  * fix restarting opendkim at each domain in update_domains instead of only once in the end
69  * fix the infinite loop of inotify_do_actions.sh
70  * enh added a (protected) message saying a file is write-protected
71  * fix a HTML graphical bug when uncompression a tar.gz file
72  * fix crating /etc/opendkim/TrustedHosts BEFORE searching in it
73  * enh refactoring of the code using netbeans IDE auto-formatting + manual smoothing of class code
74  * fix phpmyadmin sso not working when /etc/apache2/conf.d/phpmyadmin.conf is enabled
75 
76  -- Benjamin Sonntag <benjamin@sonntag.fr> Mon, 17 Nov 2015 14:29:16 +0100
77 
78 alternc (3.1.8) oldoldstable; urgency=low
79 
80  * fix non-working levensthein call for checkPolicy, fixed using preg_split instead
81 
82  -- Benjamin Sonntag <benjamin@sonntag.fr> Mon, 3 Aug 2015 15:53:16 +0200
83 
84 alternc (3.1.7) oldoldstable; urgency=low
85 
86  * fix added autocomplete="off" to password fields (not login form)
87  * enh better password policy 'no login in password' and the other way around
88  * fix bad message in French when editing a mailbox
89  * fix adding a CNAME without a final . is now an error (but not if really relative)
90  * fix select folder (browseforfolder) not working in forms others than dom
91  * fix don't allow CNAME + other record in DNS
92  * fix added /run/alternc in open_basedir, fix ACTIONS not working
93  * fix permission in browser not working
94  * fix FTP access security UX
95  * enh add DMARC and SPF management for gesmx & gesdns domains through variables
96  * fix error message '1' for locked domains
97  * enh sort added to quotas_users
98 
99  -- Benjamin Sonntag <benjamin@sonntag.fr> Thu, 16 Jun 2015 16:10:12 +0200
100 
101 alternc (3.1.6) oldstable; urgency=low
102 
103  * add SSL and API alternc packages (Beta)
104  * fix french translation misunderstanding
105  * fix translation not working for strings that disappeared in the past
106  * fix browseForFolder not working on domaines_type having a - in their name
107  * fix SSL url-ssl template missing
108 
109  -- Benjamin Sonntag <benjamin@sonntag.fr> Thu, 12 May 2015 17:37:12 +0200
110 
111 alternc (3.1.5) oldstable; urgency=low
112 
113  * fix alias changes not working in some cases
114  * fix ;;; END ALTERNC zones bug also for older versions
115  * fix manage remote NFS-based quota when *explicitely* stated in local.sh (QUOTA_NFS=y)
116  * fix duplicate variables may be inserted when installing a fresh AlternC
117 
118  -- Benjamin Sonntag <benjamin@sonntag.fr> Wed, 29 Apr 2015 15:30:01 +0200
119 
120 alternc (3.1.4) oldstable; urgency=low
121 
122  * ensure that values in sub_domaines are prefixed by / for hosting subdomains
123  * adding enable_original_recipient=no to postfix
124  * adding tail log view + order by DATE last files in logs
125  * fix ;;; END ALTERNC zones bug
126  * proposal (not enabled by default) of error.log per vhost
127  * default message size limit to 100M, no mailbox size limit in postfix
128  * fix removal of awstats-package crontab in favor of AlternC's one
129  * fix unzip/untar/ungzip of files from the browser (double escapeshellarg)
130  * fix catchall management (bugguy & crappy error messages)
131  * fix #1646 transport sql is not using indexes
132 
133  -- Benjamin Sonntag <benjamin@sonntag.fr> Mon, 20 Apr 2015 18:00:12 +0200
134 
135 alternc (3.1.3) oldstable; urgency=low
136 
137  * fix opendkim listening on *
138  * fix a probable privilege escalation in cron management
139  * fix a random number generation issue in PHP (rand automatically initialized by time(), not better!)
140  * fix some shell_exec() or exec() not using escapeshellarg in PHP.
141  * fix set a proper SSLCipherSuite, removes SSLv3 (poodle protection)
142  * fix touching opendkim files in alternc.instal to prevent failure at install time
143 
144  -- Benjamin Sonntag <benjamin@sonntag.fr> Mon, 27 Nov 2014 11:17:12 +0100
145 
146 alternc (3.1.2) oldstable; urgency=low
147 
148  * fix a bug when installing (doing patches from 3.1~rc)
149  * #1622 fix a bug in debian/alternc.config : overwrote mysql sysusr password all the time
150  * fix some (5) bugs in the file manager: permission, editor, file deletion... (commit c96f928 81aae4c beebd51)
151  * #1573 fix dependencies on dovecot-managesieved
152  * fix LASTLOGIN not working on Wheezy for Dovecot (commit d4d746b)
153  * fix NOT migrating automatically from /var/alternc/* to /var/(www|mail)/* (commit 4749974)
154  * fix quota issues migrating from courier to dovecot: quota was NULL, used was negative (commit 3487a95)
155  * fix variable table structure change not needed for 3.1/3.2 + %%FQDN%% found in this table (commit dc367d6)
156  * fix a bug when upgrading: mailname_bounce not defined early enough in variable table (commit 6043b37)
157  * fix a roundcube bug at install time: not migrating "webmail" type properly (commit cf37cd3)
158  * fix a bug in rebuild_all_conf doing nothing (commit 919d68e)
159 
160  -- Benjamin Sonntag <benjamin@sonntag.fr> Mon, 29 Sep 2014 17:44:12 +0200
161 
162 alternc (3.1.1) oldstable; urgency=low
163 
164  * many bugfixed from 3.1 / 3.2 :
165  * #1543 upgrade issues
166  * #1521 awstats right issues
167  * #1541 upload too big in browser doesn't show an error
168  * #1546 error in delete_logs.sh cron
169  * #1547 error with dkim during alternc.install
170  * #1548 database creation
171  * #1551 mysql account on remote server issue
172  * #1552 error editing a file in the internal browser
173  * #1560 roundcube login error
174  * #1561 chown on ALTERNC_HTML
175  * #1564 roundcube quota mail
176  * #1565 no alternc-mailman package for wheezy
177  * #1576 remove bad UNIQ index from mysql tables
178  * #1580 mail: \n management in aliases
179  * #1588 loosing custom DNS afterupgrade 3.0>3.1
180 
181  -- Benjamin Sonntag <benjamin@sonntag.fr> Fri, 28 Mar 2014 17:44:21 +0100
182 
183 alternc (3.1) stable; urgency=low
184 
185  * feature: import of existing DNS zone
186  * feature: display of current DNS zone in dom_edit
187  * LXC-host module in AlternC client-side. alternc-lxc package is server-side
188  * menu became dynamic with a class
189  * /var/alternc disapear to become Debian-compliant
190  but we upgrade properly, keeping an existing /var/alternc
191  * fix detection of ACL using pre-depends
192  * fix dovecot SSL certificate (was pointing to an non-existing file)
193  * configure dovecot properly when using /etc/alternc/alternc.pem
194  * 3.1 can be built for Squeeze or Wheezy
195  with dovecot 1.2 or 2.0 although the 2 versions slightly differs
196  as a result, 3.1 will be for Squeeze, and 3.2 the same one, for Wheezy
197  * openDKIM now supported and automagically configured
198  * autoconfig of emails using autoconfig.$domain vhost and xml/php scripts
199  for Outlook & Thunderbird
200  * fix (one more time) the translation system
201 
202  -- Benjamin Sonntag <benjamin@sonntag.fr> Thu, 18 Oct 2013 15:17:00 +0200
203 
204 alternc (3.0) stable; urgency=low
205 
206  * RELEASE of AlternC 3.0
207  Installation doc in French: http://alternc.org/wiki/Documentation/Fr/Administrateur/Installer-3.0
208  More on AlternC 3.0 upgrade, installation instructions etc: http://www.alternc.com/
209  * #1380 (double avertissement sur les quotas) closed by squidly
210  * #1350 (Suppression preferences webmail a la suppression d'un compte mail) closed by axel
211  * #1448 (ordre des mise à jour) closed by fufroma
212  * #1262 (Upgrade script for procmail rules) closed by benjamin
213  * #1446 (manque des écrasement de conf) closed by benjamin
214  * #1445 (upgrade missing webmail) closed by benjamin
215  * #1420 (Questions Debconf pas claires) closed by benjamin
216  * #1019 (conflit entre la config de bind et /etc/resolv.conf) closed by benjamin
217  * #1429 (templatisation local.sh) closed by benjamin
218  * #1409 (Problème openbasedir altern-squirrelmail) closed by benjamin
219  * #1375 (Problème ergonomie quota) closed by benjamin
220  * #1259 (Tester la séparation db user/system) closed by benjamin
221  * #1255 (List successfully created return a 550 in specific conditions) closed by benjamin
222  * #1329 (alternc slavedns utilise un fichier flag, un nouveau champ dans la bdd ...) closed by benjamin
223  * #1447 (Droits de l'utilisateur SQL) closed by fufroma
224  * #1444 (/etc/alternc/bureau.conf lors d'une maj) closed by fufroma
225  * #1437 (Modif de checkpolicy) closed by benjamin
226  * #1382 (update_domains trop long) closed by fufroma
227  * #1443 (Questions debian) closed by fufroma
228  * #1418 (Notices PHP sur le bureau) closed by fufroma
229  * #1440 (config_real.php encore utilisé ?) closed by fufroma
230  * #1442 (Langue Dutch (Netherlands) manquante) closed by fufroma
231  * #1441 (Finitions TNG) closed by fufroma
232  * #1439 (Mysql restore dans le cas de serveurs MySQL utilisateur distinct du ...) closed by squidly
233  * #1434 (erreur dans les scripts) closed by squidly
234  * #1389 (test migration ALternc 0.9.8 vers 3.0~RC1) closed by squidly
235  * #1435 (Alternc-mailman) closed by fufroma
236  * #1425 (Alternc-mailman) closed by squidly
237  * #1424 (Alias mailman) closed by squidly
238  * #1430 (Erreur à l'install alternc) closed by squidly
239  * #1383 (Erreurs à l'upgrade) closed by squidly
240  * #1432 (Impossible d'ajout un host ipv6) closed by fufroma
241  * #1433 (Création d'un host multi-ip) closed by fufroma
242  * #1410 (problème quotas mail après migration 1.0 => 3.0 rc2) closed by squidly
243  * #1423 (page blanche réaction compte ftp) closed by fufroma
244  * #1426 (module ftp) closed by fufroma
245  * #1427 (Scrollbar horizontale à l'édition d'un domaine) closed by fufroma
246 
247  -- Benjamin Sonntag <benjamin@sonntag.fr> Fri, 8 Feb 2013 17:09:00 +0100
248 
249 alternc (3.0~rc3) unstable; urgency=low
250 
251  * 3.0~rc3 release, fixing the following :
252  * #1422 Dovecot: Bug si quota Trash:storage<24M, nahuel
253  * #1412 Probleme avec les quotas (VM Xen), axel
254  * #1403 Confirmation lors de la désactivation des mails d'un domaine, axel
255  * #1404 Erreurs en wheezy lors de alternc.install, axel
256  * #1400 Alternc slavedns ne s'installe pas, axel
257  * #1414 erreur spoolsize.php, axel
258  * #1413 Récupération de mails à l'installation d'AlternC - dovecot, axel
259  * #1416 buildstatic.sh produit une erreur, axel
260  * #1417 problème lors de la génération des stats, axel
261  * #1415 erreur de scripts compress_logs.sh et delete_logs.sh, axel
262  * #1369 Faire la conf de roundcube managesieved + password, axel
263  * #1405 forcer les minuscules dans local.sh, axel
264  * #1407 Problème deploiement alternc-sudoers, axel
265  * #1406 Problème installation dovecot, axel
266  * #1401 Controle d'accès pas clair, axel
267  * #1398 Quotas pas ergonomique, axel
268  * #1399 Traduction de la date, axel
269  * #1337 alternc-slavedns depends on sh features, fufroma
270  * #1411 Navigateur fichier fonctionne mal, fufroma
271  * #1402 Choix du répertoire lors de création de compte FTP, fufroma
272  * #1331 alternc-slavedns erreur de configuration a l'install, axel
273  * #1341 Problème longueur login user MySQL, axel
274  * #1395 2 dbusers avec le même name, squidly
275  * #1392 Mauvais message à la création d'un utilisateur MySQL, squidly
276  * #1393 Gestion quotas disques, squidly
277  * #1394 "_" interdit dans les noms de domaines, fufroma
278 
279  -- Benjamin Sonntag <benjamin@sonntag.fr> Mon, 28 Jan 2013 11:20:47 +0100
280 
281 alternc (3.0~rc2) unstable; urgency=low
282 
283  * 3.0~rc2 release, fixing the following :
284  * #1071 remove email storage stats cache on email removal - closed by squidly
285  * #1325 install on LXC : if no ACL, install CRASHES without explanation
286  closed by axel
287  * #1327 Probleme dependance alternc et modules - closed by axel
288  * #1334 alternc-roundcube - closed by axel
289  * #1336 Alternc-munin opérationnel pour 3.0 - closed by axel
290  * #1339 bonne suppression des DNS à la suppression d'un compte
291  closed by squidly
292  * #1343 Affichage listing de mails - closed by squidly
293  * #1344 Notice PHP - closed by fufroma
294  * #1345 Postfix service submission - closed by squidly
295  * #1346 AlternC-Awstats lance alternc.install - closed by axel
296  * #1348 Problème creation membre avec installation de sous domaine
297  closed by fufroma
298  * #1349 Alternc-roundcube changement password fail - closed by axel
299  * #1354 Bug liste blanche IP - closed by fufroma
300  * #1355 Affichage informations de configuration mail - closed by fufroma
301  * #1357 Ergonomie Alternc-Awstats + champs password à confirmer
302  closed by axel
303  * #1358 Creation d'un routine de génération de mot de passe - closed by axel
304  * #1359 Creation CatchAll - closed by axel
305  * #1360 Taille négative - closed by axel
306  * #1361 dépendance quotas - closed by squidly
307  * #1362 Un administrateur ne peut voir la page /adm_list.php?show=all
308  closed by fufroma
309  * #1363 Cron d'alternc ne lance pas les crons utilisateurs - closed by axel
310  * #1365 creation fichier log - closed by squidly
311  * #1366 Inverser les "serveurs" phpmyadmin - closed by fufroma
312  * #1367 "Installer le domaine login.hosting_tld.tld" ne fonctionne pas
313  closed by fufroma
314  * #1368 adm_edit.php avec domaine inexistant - closed by axel
315  * #1370 Traduction manquante : "quota_web" - closed by fufroma
316  * #1371 Valeur par défaut incorrecte pour le quota_web - closed by axel
317  * #1372 dpkg: mauvaise syntaxe de la version « 0.9.1_migrationldap » :
318  caractère ... - closed by squidly
319  * #1373 Footer absent sur login.php - closed by fufroma
320  * #1374 mail_list.php : Le formulaire de recherche n'est plus affiché
321  si aucun ... - closed by axel
322  * #1376 Bug lors de l'édition d'un sous domaine - closed by fufroma
323  * #1378 Bug choix du webmail page de login - closed by axel
324  * #1379 Dépendance sur dovecot-imapd casse la mise à jour - closed by squidly
325  * #1381 erreur sur /usr/lib/alternc/fixperms.sh - closed by axel
326  * #1385 Template d'apache pour roundcube ne se met pas a jour
327  closed by axel
328  * #1386 Policy Password bug - closed by squidly
329  * #1387 Ajout de sous-domaines, messages erreur non explicite
330  closed by squidly
331  * #1390 AlternC roundcube et Roundcube se se melangent les pinceaux
332  a l'install - closed by axel
333  * #1391 alternc : Dépend: dovecot-imapd mais ne sera pas installé
334  closed by benjamin
335 
336  -- Benjamin Sonntag <benjamin@sonntag.fr> Fri, 7 Dec 2012 18:14:17 +0100
337 
338 alternc (3.0~rc1) unstable; urgency=low
339 
340  [ Alan Garcia (fufroma) ]
341  * Halloween skin for the desktop
342 
343  [ Benjamin Sonntag ]
344  * 3.0~rc1 release, change the release to 'unstable' so that
345  http://debian.alternc.org/ have the packages in the right distribution.
346 
347  -- Benjamin Sonntag <benjamin@sonntag.fr> Wed, 31 Oct 2012 11:34:37 +0100
348 
349 alternc (1.1+nmu6) stable; urgency=low
350 
351  * Squirrelmail plugin is now fully functionnal, including the changepass
352  and filter plugins. it's using a specific MySQL account to change
353  the password.
354  * Roundcube plugin now exists, to be tested!
355 
356  -- Benjamin Sonntag <benjamin@sonntag.fr> Tue, 16 Oct 2012 17:25:07 +0200
357 
358 alternc (1.1+nmu5) stable; urgency=low
359 
360  * Modification in alternc package config script.
361  * Order of questions changed
362  * Check the public IP address according to RFC 1918
363  * checking SQL connectivity ( different procedure for local
364  and remote server )
365 
366  -- squidly <squidly@nnx.com> Tue, 19 Sep 2012 13:47:47 +0200
367 
368 alternc (1.1+nmu4) stable; urgency=low
369 
370  * SQL Modification
371  * MySQL tables used for Alternc users databases modified (mysql.sql)
372  * Adding a special phpmyadmin user.
373  * Users can now create databases en databases users independently
374  ( no need to create a first database to create a user anymore)
375  * Bugfixes in installation process
376  * Kick off register_globals
377 
378  -- squidly <squidly@nnx.com> Tue, 14 Aug 2012 11:21:14 +0200
379 
380 alternc (1.1+nmu3) stable; urgency=low
381 
382  * Templating full configuration of postfix & dovecot
383  * bugfixes in mysql database configuration
384  * adding default quota (to use with dovecot) in local mailbox creation
385 
386  -- Squidly <squidly@nnx.com> Wed, 02 May 2012 14:51:49 +0200
387 
388 alternc (1.1+nmu2) stable; urgency=low
389 
390  * Templating of dovecot and postfix
391  adding a view for dovecot usage (dovecot_view)
392  adding of user vmail dedicated to the mail system
393  * Bugfixes
394 
395  -- Squidly <squidly@nnx.com> Sat, 03 Mar 2012 13:09:06 +0100
396 
397 alternc (1.1+nmu1) stable; urgency=low
398 
399  * Dev in progres.
400  * New class: m_export allowing account exporting given it's iud and a path:
401  http://www.alternc.org/wiki/AlterncExport
402  * Adding script export_account.php usind the above class to export
403  an account.
404  * Bugfixes: quota's scripts udpated ( mostly concerning LVM partitions),
405  and lots of others (permissions, browser ...)
406 
407  -- Lerider Steven <squidly@nnx.com> Tue, 28 Feb 2012 14:57:48 +0100
408 
409 alternc (1.1) stable; urgency=low
410  * Dev in progress
411  * New class : access security. Allow to restrict some function to specific
412  IP or subnet
413  * Access security management on the ftp account.
414 
415  -- Alan Garcia <fufroma@mailfr.com> Wed, 25 May 2011 09:24:30 +0200
416 
417 alternc (1.0.3) stable; urgency=high
418  * Bugfix : the 'connect' button in the list of installed domains didn't work
419 
420  -- Benjamin Sonntag <benjamin@alternc.org> Wed, 12 Oct 2011 18:00:00 +0200
421 
422 alternc (1.0.2) stable; urgency=high
423  * Bugfix : dependency on gamin OR fam : gamin is better for courier-imap
424  and fam makes sasl imap auth fail
425  * Bugfix : adding french messages for domain new error messages
426  * Bugfix : Fixing domaines types templates issues
427  (incompatibility with pre 1.0 alternc)
428 
429  -- Benjamin Sonntag <benjamin@alternc.org> Thu, 11 Oct 2011 10:17:00 +0200
430 
431 alternc (1.0.1) stable; urgency=high
432  * Bugfix : upgrades from 0.* to 1.0 was not working for MX fields, Fixed.
433 
434  -- Benjamin Sonntag <benjamin@alternc.org> Thu, 14 Jun 2011 17:59:50 +0200
435 
436 alternc (1.0) stable; urgency=low
437  * Major patch
438  * Web & DNS file generation rebuild from scratch
439  * Drop of apache 1 support
440  * Big changes in database schema (domaines, sub_domaines, *_standby
441  removal)
442  * Major changes
443  * Drop mass virtual hosting, now use full vhost
444  * Panel URL do not need anymore /admin/ (but you can still use it,
445  we put a 301 redirect)
446  * JQuery is now used by AlternC (but not needed for any usual feature
447  usage)
448  * New features
449  * Domains type are dynamic, the administrator can create domaine type
450  with his own apache template
451  * Advanced DNS options (ipv6, cname, txt, mx)
452  * Possibility to create a temporary mail (not yet shown, need cron)
453  * Admin can connect to other account and go back to their own
454  * Language link is back inside the menu
455  * MX and secondary MX are now available in debconf
456  * Bugfixes
457  * Too many to be listed (we change the historic update_domaines.sh)
458  * Dash compatibility
459  * Use iana.org to have whois server list up to date
460  * Preseeding compatibility : don't ask for questions when already set
461 
462  -- Benjamin Sonntag <benjamin@alternc.org> Sat, 04 June 2011 10:15:30 +0200
463 
464 alternc (1.0~rc1) stable; urgency=low
465 
466  * Major patch
467  * Blue desktop using only css, no frameset etc
468  * Sanitizing of get/request/post parameters using getFields function.
469  May allow alternc not to use register_globals some day ...
470  * security: passwords are now MANDATORY in MySQL class (whoosh...)
471  * security: now using htmlspecialchars on every form default values ...
472  * i18n: charset is now variable depending on the current language
473  * new features:
474  * removed the dependency on postgrey, added dnsutils (for domain checks)
475  * added domain check (exists, ns, mx, ip) when listing domains in
476  admin panel.
477  * bugfixes:
478  * fix a "already exist" error when creating a database containing
479  an hyphen (-)
480  * #1163: fix sqlbackup script call routine to retain backwards
481  compatibility
482  * fix usage of ISO8859-15 charset (that may NOT be defined in locales...)
483  and add it to the correct url (%%fqdn_lettre%%...)
484  * major changes:
485  * PHP sessions are now stored in /var/alternc/sessions
486  * new features:
487  * add support for .cc and .re domains.
488  * when adding a new domain to an account, a directory "examplenet"
489  is automatically created and the domain points to it instead of /.
490  * add new field to member form: 'notes' which is just a text field
491  * send an email on new account creation. the actual email needs to be
492  configured through the AlternC variables for this to work.
493  * added the password policy management module : you can choose which
494  password complexity you want to force for each place a password
495  is required.
496  * API changes
497  * m_mysql->get_db_list() doesn't include size anymore because this
498  is a major performance hit on MySQL < 5.1.22 if there are > 1000
499  databases on the system. This speeds up the AlternC login by about
500  30 seconds on Koumbit.org.
501 
502  -- Benjamin Sonntag <benjamin@alternc.org> Sat, 12 May 2009 17:55:30 +0200
503 
504 alternc (0.9.9) stable; urgency=low
505 
506  * bugfixes:
507  * #1080: fix webmail redirection
508  * #1128, #1110: translation fixes
509  * fix WHOIS lookups for .ca, .com and .net
510  * fix ProFTPd TLS/SSL mode
511  * #708: remove '-' from the list of authorized usernames
512  * put the logout button at the end of the left menu
513  * #1124: fix database user configuration
514  * FTP/TLS is now working properly (config is RSA not DSA, and key AND
515  certif config must be BOTH populated)
516  * #1029: do not overwrite the main.cf from postfix
517  * #1129: remove 2GB quota limit
518  * #1017: fix apache2 configuration
519  * #1078: run upgrade scripts properly
520  * new features:
521  * start logging IP addresses in logs
522  * rework the sqlbackup script to allow for date-based backups instead of
523  log-like incremental backups
524  * #1131: allow admins to make all list URLs be based on the FQDN
525  * #1087: allow admins to create user subdomains according to hardcoded
526  value or available domains
527  * make a new alternc-slave package that eases installation on NFS-backed
528  frontend nodes
529  * builtin postgrey and Spamhaus blacklisting configuration
530  * #1017: complete apache2 support, although apache1 is still the "official"
531  platform for now
532  * FTP+SSL support
533  * other changes:
534  * deprecate the mynetwork modification in Postfix, this is now left to the
535  admin
536  * do not overwrite main.cf
537  * do not overwrite named.conf
538 
539  -- Antoine Beaupré <anarcat@koumbit.org> Tue, 15 Apr 2008 11:52:56 -0400
540 
541 alternc (0.9.8) stable; urgency=high
542 
543  This release is packed with minor enhancements and bugfixes. It also packages
544  security fixes. Not all targets of the milestone were accomplished but this
545  was released nevertheless because of the security issue.
546 
547  * security:
548  * move mysql configuration into a valid MySQL configuration file
549  (/etc/alternc/my.cnf). This fixes a serious security issue (#318)
550  where the MySQL root password was passed on the commandline and could
551  therefore be visible to local users (and hosted members that don't have
552  safe_mode controls or can access the process table in some way).
553  * disable the autocomplete on frontal user/login
554  * various bugfixes
555  * upgrade to Debian standard 3.7.3 (from 3.7.2.1)
556  * added missing dependency on mysql-client
557  * fix display of errors on directory creation
558  * from Trac: #1012, #1082, #1077, #1109
559  * fix 0.9.7 regressions: #1079, #1080, #1099, #1076
560  * new features:
561  * starting with this release, the old warning signal defaults to "YES"
562  which means that AlternC can be automatically installed without
563  preseeding.
564  * crude implementation of a permission change interface in the file browser
565  (partial implementation of #267)
566  * standardisation of the web interface, along with some esthetic changes,
567  by Marc Angles, sponsored by Koumbit (partial implementation of #37)
568  * styles can now be changed locally in admin/styles/custom.css
569  * allow arbitrary error strings in error handlers
570  * copy and archive extraction in the file browser (#1043)
571  * display at which time the DNS changes will take effect (#231)
572  * use timestamp for sql backups rather than rotating the files (#1063)
573  * other simple additions: #1043, #1097
574 
575  -- Antoine Beaupré <anarcat@koumbit.org> Thu, 10 Apr 2008 13:56:22 -0400
576 
577 alternc (0.9.7) stable; urgency=low
578 
579  * major release, closing more than 40 bugs, including...
580  * Fixing MX check when hosting a mail (#1706)
581  * Delete the zonefile properly when destroying a domain (#772)
582  * Choose english as default language, (#1047)
583  * Proper parameter checking in subdomain creation (#1037)
584  * Changing ownership of /var/alternc/tmp, makes file upload work again
585  (#1058)
586  * Force the restart of apache & apache-ssl (#1000)
587  * Redirect are now done on http://$url$1 base, not $url/$1 (#1054)
588  * Patch to install properly apache and apache-ssl modules
589  * We copy /etc/squirrelmail/default_pref content for new accounts
590  in _createpop (#1015)
591  * we configure postfix even if main.cf don't currently exist (#1009)
592  * Fixed the 'view' link issues (no urlencode) (#690)
593  * Change "move" to "move to" (ergonomic) (#787)
594  * Confirm file deletion in the browser (#659)
595  * fix dns install of internal hosting domains (#1056)
596  * fix proftpd and saslauthd configuration for Etch (#1046, #1069)
597  * fix .eu, .be, .name whois issue (#571)
598  * change apache log format to a working one (using host request),
599  also fix awstats issues.
600  * fix modules manipulation rules (#1062)
601  * try to support apache2, at least with the right dependencies
602  * end explicit mysql-server dependencies, which switches to Recommends,
603  since we can now configure remote mysql servers properly (#1014)
604  * fix our phpmyadmin config for etch (#1052)
605  * add portuguese translation
606  * see subversion changelog for more details
607 
608  -- Antoine Beaupré <anarcat@koumbit.org> Fri, 9 Nov 2007 18:40:50 -0500
609 
610 alternc (0.9.6.3) stable; urgency=low
611 
612  * change dependency on courier-authmysql or courier-authlib-mysql for etch
613  * fix sql backups in case of missing target directory
614  * fix translations
615  * php5 compatibility
616  * fix checkmx (#1031)
617  * etch support
618 
619  -- Antoine Beaupré <anarcat@koumbit.org> Fri, 11 May 2007 01:18:08 +0000
620 
621 alternc (0.9.6.2) stable; urgency=high
622 
623  * repackage 0.9.6.1 properly: include all latest fixes, which didn't make it
624  to the package
625  * don't put postfix in pre-depends
626  * urgency=high because 0.9.6.1 doesn't include all the security fixes it
627  pretends
628 
629  -- Antoine Beaupré <anarcat@koumbit.org> Wed, 17 Jan 2007 15:58:39 -0500
630 
631 alternc (0.9.6.1) stable; urgency=high
632 
633  * Emergency release to fix issues with release 0.9.6.
634  * Fix a security issue with override_php.conf not being configured
635  in apache, effectively disabling open_basedir restrictions.
636  Closes: #1005
637  * Show installation warning only once. Closes: #737
638  * Make it possible to erase files and directories in file browser.
639  Closes: #1002.
640  * Fix mail accounts creation. Closes: #1003.
641  * Fix a race condition in update_domains.sh which could allow users to
642  bypass openbasedir protection when creating domains. Reported by
643  Jerome Moinet.
644 
645  -- Antoine Beaupré <anarcat@koumbit.org> Fri, 12 Jan 2007 15:59:42 -0500
646 
647 alternc (0.9.6) stable; urgency=high
648 
649  * Replacing C setuid scripts by perl-suid one. AlternC is now arch-indep !
650  * Do not overwrite httpd.conf anymore. Everything is now done
651  through includes in the /etc/apache/conf.d/ directory
652  * Fix security issues with file browser and domain management
653  that allowed an attacker to inspect the filesystem, create
654  files in other accounts and perform cross site scripting
655  javascript attacks. Credit: thabob.
656  * #563: do not overwrite php.ini anymore. Everything is configured in the
657  apache config.
658  * All other bugs are postponed to 0.9.7 because of the security issue (hence
659  urgency=high). See https://dev.alternc.org/trac/alternc/milestone/0.9.6
660  for more information.
661 
662  -- Antoine Beaupré <anarcat@koumbit.org> Mon, 27 Nov 2006 21:26:32 +0000
663 
664 alternc (0.9.5) stable; urgency=low
665 
666  * maintenance release to fix packaging and security bugs
667  * see https://dev.alternc.org/trac/alternc/milestone/0.9.5 for milestone
668  * changelog at https://alternc.org/trac/alternc/query?status=closed&milestone=0.9.5
669  However, this version contains mainly :
670  * quota management fixes
671  * bind now forbid recursion and domain poisoning
672  * now using po-debconf
673  * mysql right management now included in the web desktop.
674  * .eu tld domain is now allowed.
675  * postfix is now using saslauthd with rimap for smtp sasl authentication
676 
677  -- Benjamin Sonntag <benjamin@alternc.org> Thu, 4 May 2006 03:55:30 +0200
678 
679 alternc (0.9.4) stable; urgency=low
680 
681  * maintenance release to fix packaging and security bugs
682  * see https://dev.alternc.org/trac/alternc/milestone/0.9.4 for milestone
683  * changelog at https://alternc.org/trac/alternc/query?status=closed&milestone=0.9.4
684  However, this version contains mainly :
685  * Integration of Globenet patchs (replacement of do_domains.sh by
686  update_domains.sh and others)
687  * Changing mysql database creation from uid to login name
688  * Major improvements in FHS compliance
689  * Major improvements in config file management and debconf idempotency
690 
691  -- Benjamin Sonntag <benjamin@alternc.org> Wed, 29 Mar 2006 19:34:41 +0200
692 
693 alternc (0.9.3.1) testing; urgency=low
694 
695  * maintenance release to fix packaging and security bugs
696  * see http://mantis.alternc.org/view.php?id=436 for milestones
697  * full changelog at: http://mantis.alternc.org/changelog_page.php
698  * Arch: all to have this package available in all architectures
699  * take over maintainership
700  * release sponsored by Koumbit.net
701 
702  -- Antoine Beaupre <anarcat@koumbit.org> Thu, 19 Jan 2006 20:48:45 +0000
703 
704 alternc (0.9.3.9-globenet10) stable; urgency=low
705 
706  * Fix typo in sqlbackup.sh.
707  * Another fix for empty host in update_domains.sh.
708  * Fix database name spliting in the bureau.
709  * Fix zone reload and php overrides bugs in update_domains.sh.
710  * Don't try to generate php override file for IP hosts.
711  * Redirect apache reload output to the log file in update_domains.sh.
712  * Fix sendmail wrapper behaviour w.r.t. Sender header.
713  * Correct Section and Maintainer field for the Debian package.
714 
715  -- Lunar <lunar@anargeek.net> Sat, 15 Oct 2005 02:43:37 +0200
716 
717 alternc (0.9.3.9-globenet9) unstable; urgency=low
718 
719  * Fix deletion of empty host in update_domains.sh.
720  * Fix DNS zone serial generation.
721 
722  -- Lunar <lunar@anargeek.net> Thu, 22 Sep 2005 00:26:15 +0200
723 
724 alternc (0.9.3.9-globenet8) unstable; urgency=low
725 
726  * Finally fix empty host handling in update_domains.sh.
727 
728  -- Lunar <lunar@anargeek.net> Wed, 21 Sep 2005 23:45:06 +0200
729 
730 alternc (0.9.3.9-globenet7) unstable; urgency=low
731 
732  * Fix menulist.txt symlink target.
733 
734  -- Lunar <lunar@anargeek.net> Wed, 21 Sep 2005 21:26:02 +0200
735 
736 alternc (0.9.3.9-globenet6) unstable; urgency=low
737 
738  * Create menulist.txt symbolic link in debian/rules
739  * Make menulist.txt migration more likely to happen
740 
741  -- Lunar <lunar@anargeek.net> Wed, 21 Sep 2005 21:08:08 +0200
742 
743 alternc (0.9.3.9-globenet5) unstable; urgency=low
744 
745  * Rewrite sqlbackup.sh, enabling non-local MySQL server
746  * allow mysql users connection from the web server (jonathan)
747  * Move menulist.txt to /etc/alternc
748  * Fix update_domains.sh not working with empty hostnames
749 
750  -- Lunar <lunar@anargeek.net> Wed, 21 Sep 2005 19:57:59 +0200
751 
752 alternc (0.9.3.9-globenet4) unstable; urgency=low
753 
754  * named.template now points to the correct directory..
755 
756  -- Lunar <lunar@anargeek.net> Thu, 15 Sep 2005 00:00:37 +0200
757 
758 alternc (0.9.3.9-globenet3) unstable; urgency=low
759 
760  * Fix mail not sent from PHP scripts
761  * Actually exit update_domains.sh when killed
762  * Fix templates warning
763  * Fix reverse DNS test for BIND_INTERNAL
764 
765  -- Lunar <lunar@anargeek.net> Wed, 14 Sep 2005 23:54:23 +0200
766 
767 alternc (0.9.3.9-globenet2) unstable; urgency=low
768 
769  * Fix alternc.install failling when unable to backup an unecessary file.
770 
771  -- Lunar <lunar@anargeek.net> Tue, 6 Sep 2005 23:18:56 +0200
772 
773 alternc (0.9.3.9-globenet1) unstable; urgency=low
774 
775  * Major overhaul of configuration and install system:
776  - /etc/alternc/alternc.conf is no more and /etc/alternc/local.sh
777  is used by everyone else.
778  - alternc.install was rewritten.
779  - configuration templates now lies in /etc/alternc/templates,
780  tagged as conffiles.
781  - alternc.install will now check if you have changed a configuration
782  file without modifying the template and calling alternc.install
783  again.
784  - alternc.install now determines which configuration files it needs
785  based on what is currently installed, thus it's easier to build
786  custom Debian package with lower deps.
787  * BIND interaction mostly rewritten:
788  - do_domaines.sh is no more and replaced by update_domains.sh
789  - templates used to build automatic.conf and zone files are now in
790  /etc/bind/templates once installed
791  - automatic.conf and slaveip.conf are now generated in /var/alternc/bind
792  - zone files are now generated in /var/alternc/bind/zones.
793  - the secondary feature and /usr/lib/alternc/bind2 are gone
794  * Small things:
795  - Striped the second reject_unauth_destination from postfix main.cf.
796  - Fixed debconf dependency.
797  - Add support for quota on NFS partitions.
798  - Disk usage calculation disabled for directories in browser.
799  - bind_internal is now used in named.conf template.
800  - Fixed phpmyadmin server list bug.
801 
802  -- Lunar <lunar@anargeek.net> Tue, 6 Sep 2005 20:34:53 +0200
803 
804 alternc (0.9.3) testing; urgency=low
805 
806  * Upstream update : many bugfixes, see the bugs related to
807  http://mantis.alternc.org/view.php?id=246 for details
808 
809  -- Benjamin Sonntag <benjamin@alternc.org> Wed, 10 Nov 2004 00:00:00 +0200
810 
811 alternc (0.9.2-2) testing; urgency=low
812 
813  * Upstream update : many bugfixes (http://mantis.alternc.org)
814 
815  -- Benjamin Sonntag <benjamin@alternc.org> Wed, 09 Sep 2004 23:04:26 +0200
816 
817 alternc (0.9.2-1) testing; urgency=low
818 
819  * Upstream update
820 
821  -- Benjamin Sonntag <benjamin@alternc.org> Fri, 27 Aug 2004 18:04:26 +0200
822 
823 alternc (0.9.1-1) testing; urgency=low
824 
825  * Upstream update
826 
827  -- Benjamin Sonntag <benjamin@alternc.org> Fri, 04 Jun 2004 19:31:26 +0200
828 
829 alternc (0.9-1) testing; urgency=low
830 
831  * Initial Release.
832 
833  -- Benjamin Sonntag <benjamin@alternc.org> Tue, 27 Aug 2002 19:31:26 +0200