From thomas at intevation.de Wed Jan 9 18:07:39 2008 From: thomas at intevation.de (Thomas Arendsen Hein) Date: Wed, 9 Jan 2008 18:07:39 +0100 Subject: [Kolab-announce] Kolab Security Issue 18 20080109 (clamav) Message-ID: <20080109170738.GH3538.thomas@intevation.de> Kolab Security Issue 18 20080109 ================================ Package: Kolab Server, ClamAV Vulnerability: various Kolab Specific: no Dependent Packages: none Summary ~~~~~~~ CVE-2007-6335 It was discovered that an integer overflow in the decompression code for MEW archives may lead to the execution of arbitrary code. CVE-2007-6336 It was discovered that on off-by-one in the MS-ZIP decompression code may lead to the execution of arbitrary code. CVE-2007-6337 Unspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h Affected Versions ~~~~~~~~~~~~~~~~~ This affects versions of ClamAV up to version 0.91.2. Kolab Server 2.1.0 and previous releases of the 2.1 branch are affected. Kolab Server 2.0.4 and previous releases of the 2.0 branch are affected. Kolab Server 2.2-beta3 and previous prereleases are affected. Fix ~~~ Upgrade to ClamAV 0.92. The ClamAV source RPM patched to be compilable with Kolab Server 2.1 and 2.0 is available from the Kolab download mirrors as: security-updates/20080109/clamav-0.92-20080101_kolab.src.rpm A binary RPM for Kolab Server 2.1.0 (ix86 Debian GNU/Linux Sarge) is available: security-updates/20080109/clamav-0.92-20080101_kolab.ix86-debian3.1-kolab.rpm All other server versions: Please build from the src.rpm. For Kolab Server 2.2-beta3 the unmodified OpenPKG rpm can be used: security-updates/20080109/clamav-0.92-20080101.src.rpm The mirrors are listed on http://kolab.org/mirrors.html While the mirrors are catching up, you can also get the package via rsync: # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080109/clamav-0.92-20080101_kolab.src.rpm . # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080109/clamav-0.92-20080101_kolab.ix86-debian3.1-kolab.rpm . # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080109/clamav-0.92-20080101.src.rpm . MD5 sums: ad61c36b1d84aaa06e734fa02e13923b clamav-0.92-20080101.src.rpm 3fe0e99160eea9816e55630378cd79d8 clamav-0.92-20080101_kolab.ix86-debian3.1-kolab.rpm 91094b48f22958536685eb29c786ea4f clamav-0.92-20080101_kolab.src.rpm The package can be installed on your Kolab Server with # /kolab/bin/openpkg rpm --rebuild clamav-0.92-20080101_kolab.src.rpm # /kolab/bin/openpkg rpm \ -Uvh /kolab/RPM/PKG/clamav-0.92-20080108_kolab.--kolab.rpm # rm /kolab/etc/clamav/*.rpmsave # /kolab/bin/openpkg rc clamav start # su - kolab-r $ freshclam For Kolab Server 2.0.4 you have to copy the new /kolab/etc/clamav/clamd.conf to /kolab/etc/kolab/templates/clamd.conf.template so it will not be overwritten by kolabconf. Do NOT copy this file with Kolab Server 2.1 or 2.2! Details ~~~~~~~ http://sourceforge.net/project/shownotes.php?release_id=562254 ClamAV 0.92 release notes http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6335 CVE-2007-6335 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6336 CVE-2007-6336 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6337 CVE-2007-6337 Timeline ~~~~~~~~ 20071217 ClamAV release 0.92. 20071217 OpenPKG 0.92 package release. 20080109 Kolab Server security advisory published. -- thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A Intevation GmbH, Osnabrueck - Register: Amtsgericht Osnabrueck, HR B 18998 Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: not available Url : http://kolab.org/pipermail/kolab-announce/attachments/20080109/4d17654b/attachment.bin From emanuel at intevation.de Wed Jan 30 10:15:58 2008 From: emanuel at intevation.de (Emanuel =?iso-8859-1?q?Sch=FCtze?=) Date: Wed, 30 Jan 2008 10:15:58 +0100 Subject: [Kolab-announce] New Kolab documentation material Message-ID: <200801301015.58829.emanuel@intevation.de> New Kolab documentation material has been released: http://kolab.org/documentation.html +++ Operating manual for Kolab Server 2.2 +++ version 1.0, only in german ("Allgemeine Betriebsdokumentation"). +++ Example slides for Kolab presentations +++ version 1.0, only in german. Translations and improvements are welcome! Changes and new draft versions can be uploaded and added in the Kolab wiki. See here for more information: http://wiki.kolab.org/index.php/Operating_Manual http://wiki.kolab.org/index.php/Example_Slides_for_Kolab_Presentations Regards, Emanuel -- Emanuel Sch?tze | ++49-541-335 08 38 | http://www.intevation.de/ Intevation GmbH, Georgstr. 4, 49074 Osnabr?ck, DE | AG Osnabr?ck, HR B 18998 Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From thomas at intevation.de Tue Feb 5 12:24:51 2008 From: thomas at intevation.de (Thomas Arendsen Hein) Date: Tue, 5 Feb 2008 12:24:51 +0100 Subject: [Kolab-announce] Kolab Server 2.2 Release Candidate 1 released Message-ID: <20080205112451.GE10443.thomas@intevation.de> Hi! Yesterday I uploaded Kolab Server 2.2-rc1, which includes some enhancements and fixes compared to beta 3 and feature and security updates for OpenPKG components. Since 2.2 beta 2 the Kolab server provides a web client that supports all the groupware features known from Outlook and Kontact. Thus users are less dependent on their local client and can access their groupware data from anywhere in the world provided they have a standard browser available. All packages except for openldap and db were upgraded to OpenPKG-CURRENT (as of 20080118). The package openldap-2.3.39-20071130 was created to fix security issues (CVE-2007-5707 and CVE-2007-5708) without upgrading to OpenLDAP 2.4. The new imapd package was modified to behave like in previous server releases, i.e. to not send capabilities after STARTTLS, see kolab/issue2443 for details. Documentation and OpenPKG source packages are be available in the directory server/beta/kolab-server-2.2-rc-1/ of the mirrors listed on http://kolab.org/mirrors.html, e.g.: http://ftp.belnet.be/packages/kolab/server/beta/kolab-server-2.2-rc-1/ ftp://ftp.belnet.be/packages/kolab/server/beta/kolab-server-2.2-rc-1/ http://ftp.gwdg.de/pub/linux/kolab/server/beta/kolab-server-2.2-rc-1/ ftp://ftp.gwdg.de/pub/linux/kolab/server/beta/kolab-server-2.2-rc-1/ Included is a gpg signed MD5SUMS file to verify if your download is correct: $ gpg --verify MD5SUMS $ md5sum -c MD5SUMS Binary packages for Debian GNU/Linux (etch/stable) on x86 platforms can be found in the ix86-debian4.0 directory next to the sources. Please look at 1st.README and release-notes.txt for more information about this release. Please report any problems you encounter in our issue tracker: https://issues.kolab.org/ Regards, Thomas Arendsen Hein -- thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A Intevation GmbH, Osnabrueck - Register: Amtsgericht Osnabrueck, HR B 18998 Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: not available Url : http://kolab.org/pipermail/kolab-announce/attachments/20080205/da3d5dda/attachment.bin From thomas at intevation.de Mon Feb 18 18:28:30 2008 From: thomas at intevation.de (Thomas Arendsen Hein) Date: Mon, 18 Feb 2008 18:28:30 +0100 Subject: [Kolab-announce] Kolab Security Issue 19 20080218 (clamav) Message-ID: <20080218172830.GF567.thomas@intevation.de> Kolab Security Issue 19 20080218 ================================ Package: Kolab Server, ClamAV Vulnerability: various Kolab Specific: no Dependent Packages: none Summary ~~~~~~~ CVE-2007-6595 ClamAV 0.92 allows local users to overwrite arbitrary files via a symlink attack on (1) temporary files in the cli_gentempfd function in libclamav/others.c or on (2) .ascii files in sigtool, when utf16-decode is enabled. CVE-2008-0318 Integer overflow in libclamav in ClamAV before 0.92.1, as used in clamd, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted Petite packed PE file, which triggers a heap-based buffer overflow. CVE-2008-0728 libclamav/mew.c in libclamav in ClamAV before 0.92.1 has unknown impact and attack vectors that trigger "heap corruption." Affected Versions ~~~~~~~~~~~~~~~~~ This affects versions of ClamAV up to version 0.92. Kolab Server 2.1.0 and previous releases of the 2.1 branch are affected. Kolab Server 2.0.4 and previous releases of the 2.0 branch are affected. Kolab Server 2.2-rc1 and previous prereleases are affected. Fix ~~~ Upgrade to ClamAV 0.92.1. The ClamAV source RPM patched to be compilable with Kolab Server 2.1 and 2.0 is available from the Kolab download mirrors as: security-updates/20080218/clamav-0.92.1-20080213_kolab.src.rpm A binary RPM for Kolab Server 2.1.0 (ix86 Debian GNU/Linux Sarge) is available: security-updates/20080218/clamav-0.92.1-20080213_kolab.ix86-debian3.1-kolab.rpm All other server versions: Please build from the src.rpm. For Kolab Server 2.2-rc1 the unmodified OpenPKG rpm can be used: security-updates/20080218/clamav-0.92.1-20080213.src.rpm The mirrors are listed on http://kolab.org/mirrors.html While the mirrors are catching up, you can also get the package via rsync: # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080218/clamav-0.92.1-20080213_kolab.src.rpm . # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080218/clamav-0.92.1-20080213_kolab.ix86-debian3.1-kolab.rpm . # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080218/clamav-0.92.1-20080213.src.rpm . MD5 sums: 272ecc840ac8c322aa845e70b44917d6 clamav-0.92.1-20080213.src.rpm 1d787aa112cebf1788b1965ae22d5d30 clamav-0.92.1-20080213_kolab.ix86-debian3.1-kolab.rpm 09cb2442abbb333371874d9f60c0e439 clamav-0.92.1-20080213_kolab.src.rpm The package can be installed on your Kolab Server with # /kolab/bin/openpkg rpm --rebuild clamav-0.92.1-20080213_kolab.src.rpm # /kolab/bin/openpkg rpm \ -Uvh /kolab/RPM/PKG/clamav-0.92.1-20080213_kolab.--kolab.rpm # rm /kolab/etc/clamav/*.rpmsave # /kolab/bin/openpkg rc clamav stop # /kolab/bin/openpkg rc clamav start # su - kolab-r $ freshclam For Kolab Server 2.0.4 you have to copy the new /kolab/etc/clamav/clamd.conf to /kolab/etc/kolab/templates/clamd.conf.template so it will not be overwritten by kolabconf. Do NOT copy this file with Kolab Server 2.1 or 2.2! Details ~~~~~~~ http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=575703 ClamAV 0.92.1 release notes http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6595 CVE-2007-6595 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0318 CVE-2008-0318 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0728 CVE-2008-0728 Timeline ~~~~~~~~ 20080211 ClamAV release 0.92.1. 20080213 OpenPKG 0.92.1 package release. 20080218 Kolab Server security advisory published. -- thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A Intevation GmbH, Osnabrueck - Register: Amtsgericht Osnabrueck, HR B 18998 Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: not available Url : http://kolab.org/pipermail/kolab-announce/attachments/20080218/ff9d10ee/attachment.bin From thomas at intevation.de Mon Mar 17 15:57:13 2008 From: thomas at intevation.de (Thomas Arendsen Hein) Date: Mon, 17 Mar 2008 15:57:13 +0100 Subject: [Kolab-announce] Kolab Server 2.2 Release Candidate 2 released Message-ID: <20080317145712.GH15003.thomas@intevation.de> Hi! On Friday I uploaded Kolab Server 2.2-rc2, which includes important fixes compared to rc 2 and includes the ClamAV security update. enhancements and fixes compared to beta 3 and feature and security updates for OpenPKG components. Documentation and OpenPKG source packages are be available in the directory server/beta/kolab-server-2.2-rc-2/ of the mirrors listed on http://kolab.org/mirrors.html (which currently is only one): http://ftp.gwdg.de/pub/linux/kolab/server/beta/kolab-server-2.2-rc-2/ ftp://ftp.gwdg.de/pub/linux/kolab/server/beta/kolab-server-2.2-rc-2/ Included is a gpg signed MD5SUMS file to verify if your download is correct: $ gpg --verify MD5SUMS $ md5sum -c MD5SUMS Binary packages for Debian GNU/Linux (etch/stable) on x86 platforms can be found in the ix86-debian4.0 directory next to the sources. Please look at 1st.README and release-notes.txt for more information about this release. Please report any problems you encounter in our issue tracker: https://issues.kolab.org/ Regards, Thomas Arendsen Hein P.S.: A very quick way to upgrade a server running 2.2-rc1 via source packages is to download only the new RPM files from server/development-2.2/20080314-since-20080204/sources/ and compile them with the following (long) command line: # su - kolab $ openpkg rpm --rebuild --define 'with_fsl yes' --define 'with_group yes' --define 'with_group_igncase yes' --define 'with_atvdom yes' --define 'with_drac no' --define 'with_replication no' --define 'with_murder no' --define 'with_listext no' --define 'with_nntp no' --define 'with_ldap yes' --define 'with_annotate yes' --define 'with_morelogging yes' --define 'with_kolab yes' --define 'with_kolab_nocaps yes' imapd-2.3.11-20080101_kolab2.src.rpm && openpkg rpm --rebuild clamav-0.92.1-20080213.src.rpm horde-framework-kolab-3.2_rc1-20080311.src.rpm && openpkg rpm --rebuild --define 'with_horde = yes' --define 'kolab_version = 2.2-rc2' kolab-filter-2.2.rc2-20080314.src.rpm kolab-freebusy-2.2.rc2-20080314.src.rpm kolab-webadmin-2.1.99-20080314.src.rpm kolabconf-2.2.rc2-20080314.src.rpm kolabd-2.1.99-20080314.src.rpm perl-kolab-2.2.rc2-20080314.src.rpm php-kolab-2.2.rc2-20080314.src.rpm (please drop "--define 'with_horde = yes'" if your server does not use the Horde web interface) After compilation you can use "openpkg rpm -Uvh" on the new rpm files in the /kolab/RPM/PKG directory. -- thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A Intevation GmbH, Osnabrueck - Register: Amtsgericht Osnabrueck, HR B 18998 Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 205 bytes Desc: not available Url : http://kolab.org/pipermail/kolab-announce/attachments/20080317/ce640af6/attachment.bin From ludwig.reiter at intevation.de Wed Mar 19 14:23:46 2008 From: ludwig.reiter at intevation.de (Ludwig Reiter) Date: Wed, 19 Mar 2008 14:23:46 +0100 Subject: [Kolab-announce] Kolab KDE Client 2.1.12 released Message-ID: <200803191423.55230.ludwig.reiter@intevation.de> Kolab KDE Client 2.1.12 has been released. This release contains bug fixes and some new minor features. A tarball and release notes with a list of the changes can be found in the Kolab download area once the mirrors have been updated. Ludwig Reiter -- Intevation GmbH, Osnabr?ck Registereintrag: Amtsgericht Osnabr?ck, HR B 18998 Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner -------------- n?chster Teil -------------- Current Release is Proko2 2.1.12 Changes since Proko2 2.1.11 (released 18.10.2007) Bugfixes ======== * Kolab/issue2184 Don't crash when trying to save a composer backup copy of a message that is already being sent. * Kolab issue 2172 Skip quoted text when looking for the address separator. * Kolab/issue2182 Ensure smime opaque encrypted emails lacking the smime-type parameter in the header are treated correctely wrt error handling and decryption is attempted, when in doubt. * Kolab/issue2183 In the case of smime opaque signed and encrypted messages missing the smime-type parameter in the header the cases where decryption fails because of an error are discerned from those cases where decryption is attempted but fails because the message is not in fact encrypted. This ensures such messages being properly treated as signed, still. -------------- n?chster Teil -------------- Ein Dateianhang mit Bin?rdaten wurde abgetrennt... Dateiname : smime.p7s Dateityp : application/pkcs7-signature Dateigr??e : 1574 bytes Beschreibung: nicht verf?gbar URL : http://kolab.org/pipermail/kolab-announce/attachments/20080319/68d403e5/smime.bin From thomas at intevation.de Wed Apr 16 17:25:23 2008 From: thomas at intevation.de (Thomas Arendsen Hein) Date: Wed, 16 Apr 2008 17:25:23 +0200 Subject: [Kolab-announce] Kolab Security Issue 20 20080416 (clamav) Message-ID: <20080416152523.GL3360.thomas@intevation.de> Kolab Security Issue 20 20080416 ================================ Package: Kolab Server, ClamAV Vulnerability: various Kolab Specific: no Dependent Packages: none Summary ~~~~~~~ Various vulnerabilities, some allowing remote attackers to execute arbitrary code, others causing a denial of service, have been found in ClamAV. Affected Versions ~~~~~~~~~~~~~~~~~ This affects versions of ClamAV up to version 0.92.1 Kolab Server 2.1.0 and previous releases of the 2.1 branch are affected. Kolab Server 2.0.4 and previous releases of the 2.0 branch are affected. Kolab Server 2.2-rc2 and previous prereleases are affected. Fix ~~~ Upgrade to ClamAV 0.93. The ClamAV source RPM patched to be compilable with Kolab Server 2.1 and 2.0 is available from the Kolab download mirrors as: security-updates/20080416/clamav-0.93-20080414_kolab.src.rpm For Kolab Server 2.2-rc1 and -rc2 the unmodified OpenPKG rpm can be used: security-updates/20080416/clamav-0.93-20080414.src.rpm A binary RPM for Kolab Server 2.1.0 (ix86 Debian GNU/Linux Sarge) is available: security-updates/20080416/clamav-0.93-20080414_kolab.ix86-debian3.1-kolab.rpm A binary RPM for Kolab Server 2.2-rc1 and rc2 (ix86 Debian GNU/Linux Etch) is available from: security-updates/20080416/clamav-0.93-20080414_kolab.ix86-debian4.0-kolab.rpm All other server versions: Please build from the src.rpm. The mirrors are listed on http://kolab.org/mirrors.html While the mirrors are catching up, you can also get the package via rsync: # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080416/clamav-0.93-20080414_kolab.src.rpm . # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080416/clamav-0.93-20080414_kolab.ix86-debian3.1-kolab.rpm . # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080416/clamav-0.93-20080414.src.rpm . # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080416/clamav-0.93-20080414.ix86-debian4.0-kolab.rpm . MD5 sums: 3f4a1e82a83ad3122e72744653c4d5d0 clamav-0.93-20080414.ix86-debian4.0-kolab.rpm 35c11b1f4e56b5b7169a52521f24dbdb clamav-0.93-20080414.src.rpm 34f2a4853eab14c83559c80dd2b619c5 clamav-0.93-20080414_kolab.ix86-debian3.1-kolab.rpm 21ff5b7812d27bc22f4e808d93d68714 clamav-0.93-20080414_kolab.src.rpm The package can be installed on your Kolab Server with # /kolab/bin/openpkg rpm --rebuild clamav-0.93-20080414_kolab.src.rpm # /kolab/bin/openpkg rpm \ -Uvh /kolab/RPM/PKG/clamav-0.93-20080414_kolab.--kolab.rpm # rm /kolab/etc/clamav/*.rpmsave # /kolab/bin/openpkg rc clamav stop # /kolab/bin/openpkg rc clamav start # su - kolab-r $ freshclam $ rm -r /kolab/share/clamav/*.inc For Kolab Server 2.0.4 you have to copy the new /kolab/etc/clamav/clamd.conf to /kolab/etc/kolab/templates/clamd.conf.template so it will not be overwritten by kolabconf. Do NOT copy this file with Kolab Server 2.1 or 2.2! Details ~~~~~~~ http://sourceforge.net/project/shownotes.php?release_id=592112&group_id=86638 ClamAV 0.93 release notes https://wwws.clamav.net/bugzilla/show_bug.cgi?id=876 PeSpin Heap Overflow Vulnerability https://wwws.clamav.net/bugzilla/show_bug.cgi?id=877 WWPack Heap Overflow Vulnerability https://wwws.clamav.net/bugzilla/show_bug.cgi?id=878 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1100 Upack Buffer Overflow Vulnerability (CVE-2008-1100) https://wwws.clamav.net/bugzilla/show_bug.cgi?id=897 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1387 ARJ: Sample from CERT-FI hangs clamav (CVE-2008-1387) Timeline ~~~~~~~~ 20080414 ClamAV release 0.93. 20080414 OpenPKG 0.93 package release. 20080416 Kolab Server security advisory published. -- thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A Intevation GmbH, Osnabrueck - Register: Amtsgericht Osnabrueck, HR B 18998 Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: not available Url : http://kolab.org/pipermail/kolab-announce/attachments/20080416/931f9d41/attachment.bin From emanuel at intevation.de Thu Apr 17 12:09:55 2008 From: emanuel at intevation.de (Emanuel =?utf-8?q?Sch=C3=BCtze?=) Date: Thu, 17 Apr 2008 12:09:55 +0200 Subject: [Kolab-announce] New german-speaking users mailing list Message-ID: <200804171209.55986.emanuel@intevation.de> Hi Kolab community, we have created a new mailing list for all german-speaking Kolab users: kolab-users-de at kolab.org You are welcome to subscribe to the list at: http://lists.wald.intevation.org/mailman/listinfo/kolab-users-de Regards, Emanuel -- Emanuel Sch?tze | ++49-541-335 08 38 | http://www.intevation.de/ Intevation GmbH, Georgstr. 4, 49074 Osnabr?ck, DE | AG Osnabr?ck, HR B 18998 Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From thomas at intevation.de Fri May 23 14:48:32 2008 From: thomas at intevation.de (Thomas Arendsen Hein) Date: Fri, 23 May 2008 14:48:32 +0200 Subject: [Kolab-announce] Kolab Server 2.2 Release Candidate 3 released Message-ID: <20080523124832.GA17529.thomas@intevation.de> Hi! I just uploaded Kolab Server 2.2-rc3, which includes many important fixes, an updated Horde webmail component and security updates for ClamAV, OpenLDAP and PHP. Documentation and OpenPKG source packages will soon be available in the directory server/beta/kolab-server-2.2-rc-3/ of the mirrors listed on http://kolab.org/mirrors.html, e.g.: http://ftp.gwdg.de/pub/linux/kolab/server/beta/kolab-server-2.2-rc-3/ ftp://ftp.gwdg.de/pub/linux/kolab/server/beta/kolab-server-2.2-rc-3/ rsync://rsync.kolab.org/kolab/RSYNC.txt explains how to get (or mirror) the files via rsync. All files updated since 2.2-rc1 and 2.2-rc2 are available in the directory server/development-2.2/20080523-since-20080314/ Included is a gpg signed MD5SUMS file to verify if your download is correct: $ gpg --verify MD5SUMS $ md5sum -c MD5SUMS Binary packages for Debian GNU/Linux (etch/stable) on x86 platforms can be found in the ix86-debian4.0 directory next to the sources. Please look at 1st.README and release-notes.txt for more information about this release. The file 1st.README contains a new section "Generating your own 00INDEX.rdf for installations or upgrades" which explains how to use existing binary packages for faster upgrades. Please report any problems you encounter in our issue tracker: https://issues.kolab.org/ Regards, Thomas Arendsen Hein -- thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A Intevation GmbH, Osnabrueck - Register: Amtsgericht Osnabrueck, HR B 18998 Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: not available Url : http://kolab.org/pipermail/kolab-announce/attachments/20080523/e32c1e7f/attachment.bin From emanuel at intevation.de Wed Jun 11 11:40:17 2008 From: emanuel at intevation.de (Emanuel =?iso-8859-1?q?Sch=FCtze?=) Date: Wed, 11 Jun 2008 11:40:17 +0200 Subject: [Kolab-announce] Thunderbird Plugin SyncKolab 1.0.0 available Message-ID: <200806111140.17460.emanuel@intevation.de> Version 1.0.0 of SyncKolab is available. SyncKolab was written to add Kolab functionality to Thunderbird. It reads a selected Imap folder and synchronizes it with the local address book and calendar. It has been tested under Thunderbird for Windows (XP and Vista), MacOSX and Linux. Version 1.0 had 61 prereleases and 83 nightly releases with over 100 bugs fixed and is known to work nicely with Thunderbird 2 and Lightning 0.8. More information: http://synckolab.mozdev.org/ From emanuel at intevation.de Wed Jun 11 11:40:52 2008 From: emanuel at intevation.de (Emanuel =?iso-8859-1?q?Sch=FCtze?=) Date: Wed, 11 Jun 2008 11:40:52 +0200 Subject: [Kolab-announce] Kontact for Windows and Mac OS X (developer version) presented Message-ID: <200806111140.53266.emanuel@intevation.de> The german Federal Office for Information Security (BSI) has presented a prototype of KDE Kolab Client Kontact on Windows and Mac OS X at the LinuxTag 2008 (may 28th to 31th) in Berlin. These new Kolab clients based on KDE and Qt. They are still in development. A stable release is planed for the end of 2008. More information: * Screenshots of Kontact/Win and Kontact/Mac: http://www.kolab.org/screenshots.html * BSI press release (2008-05-21): http://www.bsi.bund.de/presse/pressinf/linuxtag210508.htm * German News of Heise (2008-05-29): http://www.heise.de/newsticker/LinuxTag-Kontact-fuer-Windows-und-Mac-OS-X--/meldung/108689 * German News of Linux-Magazin (2008-05-29): http://www.linux-magazin.de/news/linuxtag_2008_kontact_vorkonfiguriert_fuer_windows_und_mac * German News of Golem (2008-05-30): http://www.golem.de/0805/60069.html From thomas at intevation.de Wed Jun 18 18:09:53 2008 From: thomas at intevation.de (Thomas Arendsen Hein) Date: Wed, 18 Jun 2008 18:09:53 +0200 Subject: [Kolab-announce] Kolab Security Issue 21 20080618 (clamav) Message-ID: <20080618160953.GG19025.thomas@intevation.de> Kolab Security Issue 21 20080618 ================================ Package: Kolab Server, ClamAV Vulnerability: denial of service Kolab Specific: no Dependent Packages: none Summary ~~~~~~~ Damian Put reported a problem in ClamAV's code to decompress executables created by the Petite packer, which causes invalid memory access. Affected Versions ~~~~~~~~~~~~~~~~~ This affects versions of ClamAV up to version 0.93 Kolab Server 2.1.0 and previous releases of the 2.1 branch are affected. Kolab Server 2.0.4 and previous releases of the 2.0 branch are affected. Kolab Server 2.2-rc3 and previous prereleases are affected. Fix ~~~ Upgrade to ClamAV 0.93.1. The ClamAV source RPM patched to be compilable with Kolab Server 2.1 and 2.0 is available from the Kolab download mirrors as: security-updates/20080618/clamav-0.93.1-20080610_kolab.src.rpm For Kolab Server 2.2 release candidates the unmodified OpenPKG rpm can be used: security-updates/20080618/clamav-0.93.1-20080610.src.rpm A binary RPM for Kolab Server 2.1.0 (ix86 Debian GNU/Linux Sarge) is available: security-updates/20080618/clamav-0.93.1-20080610_kolab.ix86-debian3.1-kolab.rpm A binary RPM for Kolab Server 2.2 release candidates (ix86 Debian GNU/Linux Etch) is available from: security-updates/20080618/clamav-0.93.1-20080610_kolab.ix86-debian4.0-kolab.rpm All other server versions: Please build from the src.rpm. The mirrors are listed on http://kolab.org/mirrors.html While the mirrors are catching up, you can also get the package via rsync: # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080618/clamav-0.93.1-20080610_kolab.src.rpm . # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080618/clamav-0.93.1-20080610_kolab.ix86-debian3.1-kolab.rpm . # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080618/clamav-0.93.1-20080610.src.rpm . # rsync -tvP rsync://rsync.kolab.org/kolab/server/security-updates/20080618/clamav-0.93.1-20080610.ix86-debian4.0-kolab.rpm . MD5 sums: 15a088fcdcd8af3513c38afe69a69d2b clamav-0.93.1-20080610.ix86-debian4.0-kolab.rpm 57d5566041ee8f771673be894de8c00f clamav-0.93.1-20080610.src.rpm 9c7d90027b3c4a923be2269f7a91fd3e clamav-0.93.1-20080610_kolab.ix86-debian3.1-kolab.rpm 7d7e51d550282eff0eeb9c0eb34bb446 clamav-0.93.1-20080610_kolab.src.rpm The package can be installed on your Kolab Server with # /kolab/bin/openpkg rpm --rebuild clamav-0.93.1-20080610_kolab.src.rpm # /kolab/bin/openpkg rpm \ -Uvh /kolab/RPM/PKG/clamav-0.93.1-20080610_kolab.--kolab.rpm # rm /kolab/etc/clamav/*.rpmsave # /kolab/bin/openpkg rc clamav stop # /kolab/bin/openpkg rc clamav start # su - kolab-r $ freshclam $ rm -r /kolab/share/clamav/*.inc For Kolab Server 2.0.4 you have to copy the new /kolab/etc/clamav/clamd.conf to /kolab/etc/kolab/templates/clamd.conf.template so it will not be overwritten by kolabconf. Do NOT copy this file with Kolab Server 2.1 or 2.2! Details ~~~~~~~ http://sourceforge.net/project/shownotes.php?group_id=86638&release_id=605577 ClamAV 0.93.1 release notes https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1000 Entry in the ClamAV bug database http://www.heise.de/security/news/meldung/109606 http://www.heise-online.co.uk/news/110947 News about DoS vulnerability on Heise security Timeline ~~~~~~~~ 20080609 ClamAV release 0.93.1. 20080610 OpenPKG 0.93.1 package release. 20080618 News on Heise security. 20080618 Kolab Server security advisory published. -- thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A Intevation GmbH, Osnabrueck - Register: Amtsgericht Osnabrueck, HR B 18998 Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 197 bytes Desc: not available Url : http://kolab.org/pipermail/kolab-announce/attachments/20080618/e04c0967/attachment.bin From lennart.johansen at intevation.de Wed Jul 9 18:09:18 2008 From: lennart.johansen at intevation.de (Lennart Johansen) Date: Wed, 9 Jul 2008 18:09:18 +0200 Subject: [Kolab-announce] Kolab integrates mobile devices via SyncML Message-ID: <200807091809.24585.lennart.johansen@intevation.de> Univention GmbH has realised an extension to Kolab in cooperation with the Kolab Konsortium and Pardus, which allows users to connect mobile devices directly to the groupware server. Now it is possible to synchronize appointment times and contact information being away on business. This was done by integrating the SyncML protocol into the Horde part of Kolab server. SyncML is a platform independant standard designed for the exchange of data between servers, clients and mobile devices. The Horde interface is going to be integrated into Kolab Server/OpenPKG 2.2.0 as a beta version. Version 2.2.1 is then expected to integrate the SyncML extensions for tasks and contacts. In Univention's UGS the SyncML extensions are available as release candidates for testing purposes. You can find more information in Univention's press release (German only). -------------- nächster Teil -------------- Ein Dateianhang mit Binärdaten wurde abgetrennt... Dateiname : nicht verfügbar Dateityp : application/pgp-signature Dateigröße : 197 bytes Beschreibung: This is a digitally signed message part. URL : http://kolab.org/pipermail/kolab-announce/attachments/20080709/64007dcc/attachment.bin From thomas at intevation.de Fri Jul 11 19:38:59 2008 From: thomas at intevation.de (Thomas Arendsen Hein) Date: Fri, 11 Jul 2008 19:38:59 +0200 Subject: [Kolab-announce] Kolab Server 2.2.0 Final Release Message-ID: <20080711173859.GC4107.thomas@intevation.de> Hi! I just uploaded the final release of Kolab Server 2.2.0, which includes some important fixes to the last release candidates. Again mmany thanks to all the people who helped with this! Documentation and OpenPKG source packages will soon be available in the directory server/release/kolab-server-2.2.0/ of the mirrors listed on http://kolab.org/mirrors.html for example: http://ftp.gwdg.de/pub/linux/kolab/server/release/kolab-server-2.2.0/ ftp://ftp.gwdg.de/pub/linux/kolab/server/release/kolab-server-2.2.0/ rsync://rsync.kolab.org/kolab/RSYNC.txt explains how to get (or mirror) the files via rsync. All files updated since 2.2-rc3 are available in the directory server/development-2.2/20080711-since-20080523/ You can check the integrity of the downloaded files with: $ gpg --keyserver hkp://subkeys.pgp.net --recv-key 5816791A or import the key from https://www.intevation.de/~thomas/gpg_pub_key.asc (the same key that I used to sign this email) $ gpg --verify MD5SUMS.sig $ md5sum -c MD5SUMS Binary packages for Debian GNU/Linux (etch/stable) on x86 platforms can be found in the ix86-debian4.0 directory next to the sources. Please look at 1st.README and release-notes.txt (attached for your convenience) for install instructions and more information about this release. The install and upgrade instructions have been extended since version 2.2-rc3. Please report any problems you encounter in our issue tracker: https://issues.kolab.org/ Regards, Thomas Arendsen Hein -- thomas at intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A Intevation GmbH, Osnabrueck - Register: Amtsgericht Osnabrueck, HR B 18998 Geschaeftsfuehrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner -------------- next part -------------- Kolab2 Server Install and Upgrade Information ============================================= See http://kolab.org/ for general information about Kolab, or look at http://wiki.kolab.org/ for specific topics. It is recommended to subscribe to the announcement mailing list at http://kolab.org/mailman/listinfo/kolab-announce to receive security advisories and release announcements. Quick install instructions -------------------------- Kolab server with Horde needs about 1GB of disk space for the initial install. By default the directory /kolab will be used, which should be an empty directory or a symbolic link to an empty directory. If this directory does not yet exist, it will be automatically created. For production use it is recommended to create a separate partition for /kolab (2GB to have some spare) and partitions for /kolab/var (at least 2GB for log files, virus filtering and caches) and /kolab/var/imapd/spool (with enough space for your users' mails). For evaluation you could start with the 2GB partition for /kolab (or 2GB free space on / if you only have one big partition for your test system) and create the other partitions when needed. Do _not_ use an NFS mounted drive! Make sure that the following names are not in /etc/passwd or /etc/groups, as OpenPKG will want to create them: "kolab" "kolab-r" "kolab-n" To install the Kolab server, you need to download the files from the directory containing this file (1st.README) to some local directory. You can check the integrity of the downloaded files with: $ gpg --keyserver hkp://subkeys.pgp.net --recv-key 5816791A or import the key from https://www.intevation.de/~thomas/gpg_pub_key.asc $ gpg --verify MD5SUMS.sig $ md5sum -c MD5SUMS Then as root, cd into that local directory and run # sh install-kolab.sh 2>&1 | tee /root/kolab-install.log to build and install packages in /kolab. The command output will be logged to install-kolab.log so that you have a reference in case an errors occurs during installation. The install script needs to store some files and creates a subdirectory below /tmp (or $TMPDIR if set) for this purpose. Horde might create much load on your server if there are many concurrent users, so you can choose to not install it by adding the option "-x horde-kolab-client" to the call to install-kolab.sh. Installing Horde on a separate host is possible, but not discussed here. If you do not want to install the free/busy view tool, add the option "-x fbview-kronolith". The binary packages distributed via kolab.org are compiled with Horde and the free/busy view tool. Currently you need to compile from the source packages to install without these features, see kolab/issue2440 for details. By default, the Kolab server will now be started at boottime, so you have to bootstrap the server configuration now to prevent unconfigured components from being started, see kolab/issue1745 for details. Please run: # /kolab/etc/kolab/kolab_bootstrap -b and follow the instructions. Check http://www.openpkg.org/documentation/ for additional documentation about the OpenPKG packaging system. General update instructions --------------------------- Usually an update of the Kolab server works as described here. In some cases you will need to deviate from these instructions a bit. All such cases are documented below, so read the release specific update instructions for all releases newer than the one you already have before you start the update. In any case you should completely read *all* relevant update instruction *before* starting the upgrade procedure. Always make sure you have a recent backup of your /kolab directory before you attempt to upgrade Kolab. The installation of the new packages works just as for the initial installation. Download the files as described above and run # sh install-kolab.sh 2>&1 | tee /root/kolab-update.log If you installed without Horde or F/B-View you need to drop the corresponding flags again. install-kolab.sh will usually automatically determine which packages need to be built. If you have made changes to configuration files or an updated package includes configuration files which are usually regenerated from files in /kolab/etc/kolab/templates/ the old configuration file will be saved with the extension .rpmsave. For files generated from templates you just have to remove the rpmsave file, because services will refuse to start if there still is an rpmsave file, e.g.: # rm /kolab/etc/clamav/*.conf.rpmsave For other changed files (e.g. the template files themselves) you may want to transfer your changes from the .rpmsave backup to the new files. Then regenerate the configuration and restart Kolab with: # /kolab/sbin/kolabconf # /kolab/bin/openpkg rc all restart Or alternatively if the Kolab server was stopped before the upgrade: # /kolab/bin/openpkg rc openldap start # /kolab/sbin/kolabconf # /kolab/bin/openpkg rc all start Generating your own 00INDEX.rdf for installations or upgrades ------------------------------------------------------------- The source and binary downloads contain the 00INDEX.rdf file needed by the "openpkg build" command used by install-kolab.sh to install or upgrade a Kolab server. If you already have your own set of binary packages from a previous build, you can use these to create a full binary installer (e.g. to install the packages on a second machine) or or a partial binary installer (for upgrades where you only want to compile the new .src.rpm files instead of everything). To generate this file, you always need all .src.rpm files, so link or copy them in a new directory (needs to be writable by the kolab user of your installation). After this you can link/copy the install-kolab.sh file and your binary rpm files (e.g. from /kolab/RPM/PKG/) into this directory and run the following command as user kolab or root to create the new 00INDEX.rdf file:: $ sh install-kolab.sh -X If you want a pure binary installer, you can remove the .src.rpm files now. To be able to use this directory for fresh installations (i.e. not only for upgrades), you need to put the OpenPKG bootstrap file (openpkg-*.src.sh or openpkg---kolab.rpm) into this directory, too. Upgrade from 2.2-rc3 to 2.2.0 ----------------------------- Nothing special has to be done for this upgrade. Upgrade from 2.2-rc2 to 2.2-rc3 ------------------------------- You should regenerated the free/busy cache again, as described in the upgrading instructions from 2.2-rc1 to 2.2-rc2. The IMAP annotation /vendor/kolab/xfb-readable (introduced in 2.2-beta3) was renamed to /vendor/kolab/pxfb-readable-for to reflect the actual meaning. After the upgrade the old annotations are still readable, but unused by the server. If you still need to write this annotation for some reason, you have to add it to imapd.annotation_definitions.template and run kolabconf. Upgrade from 2.2-rc1 to 2.2-rc2 ------------------------------- You have to regenerated the free/busy cache, which now can be done automatically. First (optional, but recommended) step is to remove the current cache below /kolab/var/kolab-freebusy/cache: # su - kolab-n $ rm -r /kolab/var/kolab-freebusy/cache/* Now you can use the following command (still as user kolab-n): $ PHP_AUTH_USER=manager PHP_AUTH_PW='managerpassword' /kolab/bin/php \ -c /kolab/etc/apache/php.ini /kolab/var/kolab/www/freebusy/generatefb.php As this will show the manager's password on the command line, you can alternatively open https://yourserver.example.com/freebusy/generatefb.php in a web browser and login as "manager". This needs "Allow unauthenticated downloading of Free/Busy information" to be disabled, which is the default. Upgrade from 2.2-beta3 to 2.2-rc1 --------------------------------- Updating the free/busy cache has to be triggered for all calendar folders of all accounts: - Users need to create or update an appointment in their folders. - Resources can be invited to a new appointment or send them an update to an existing appointment. Upgrade from 2.2-beta2 to 2.2-beta3 ----------------------------------- After upgrading, you should remove the package "kolab-horde-framework", which is no longer needed: # /kolab/bin/openpkg rpm -e kolab-horde-framework Upgrade from 2.2-beta1 to 2.2-beta2 ----------------------------------- Before running install-kolab.sh, you should stop the running Kolab server and remove some packages which got renamed or will no longer be needed by running this command: # /kolab/bin/openpkg rc all stop # /kolab/bin/openpkg rpm -e --nodeps apache2 apache2-php getopt proftpd \ pth sharutils kolab-horde-fbview kolab-resource-handlers Ignore errors about pth or sharutils not being installed, these were included in the beta1 release but not installed by default. Upgrade from Kolab server 2.1 or before --------------------------------------- Instructions for upgrading from Kolab server 2.0 will be added in a future version of this document. These instructions are for upgrading from Kolab server 2.1.0 to 2.2.0: 0. Make a backup of your installation and data stored inside /kolab 1. Before upgrading the Kolab server must be stoped: # /kolab/bin/openpkg rc all stop 2. Save the current ldap: Copy the contents of the openldap database, use a different output filename if you want. You should make sure that no other users can read the sensitive data contained in the ldif file, e.g. with umask: # umask 077 # /kolab/sbin/slapcat > ~/kolab-2.1.ldif 3. Some of the old Kolab packages must be removed to avoid conflicts during the upgrade process: # /kolab/bin/openpkg rpm -e --nodeps \ kolabd kolab-webadmin kolab-horde-fbview kolab-horde-framework \ kolab-resource-handlers getopt patch proftpd sharutils 4. New versions of openpkg and openpkg-tools are needed for the upgrade, so you have to install them manually beforehand. As root, cd into the directory of kolab server 2.2 binary packages and run: # /kolab/bin/openpkg rpm -Uvh \ ./openpkg-20071227-20071227.--kolab.rpm # /kolab/bin/openpkg rpm -Uvh \ ./openpkg-tools-1.4.6-20071231.--kolab.rpm If you do not have binary packages for you platform, you have to build them from source first. As root, cd into the Kolab server 2.2 source directory and run: # /kolab/bin/openpkg rpm --rebuild ./openpkg-20071227-20071227.src.rpm # /kolab/bin/openpkg rpm -Uvh \ /kolab/RPM/PKG/openpkg-20071227-20071227.--kolab.rpm # /kolab/bin/openpkg rpm --rebuild ./openpkg-tools-1.4.6-20071231.src.rpm # /kolab/bin/openpkg rpm -Uvh \ /kolab/RPM/PKG/openpkg-tools-1.4.6-20071231.--kolab.rpm ( and must be replaced by the correct values for your system). 5. Start the standard upgrade (as described above): # sh install-kolab.sh 2>&1 | tee /root/kolab-update.log 6. Before starting the LDAP server the database must be restored from the ldif: # rm /kolab/var/openldap/openldap-data/* # /kolab/sbin/slapadd -l ~/kolab-2.1.ldif 7. The format of the TLS session cache changed, therefore you have truncated it to zero length: # > /kolab/var/imapd/tls_sessions.db 8 Check /kolab/etc/kolab/kolab.conf and merge new entries from kolab.conf.rpmnew manually! 9. Remove all *.conf.rpmsave files in the subdirectories of /kolab/etc/ as described above. 10. Start the OpenLDAP, generate the configuration files and start the Kolab server: # /kolab/bin/openpkg rc openldap start # /kolab/sbin/kolabconf # /kolab/bin/openpkg rc all start 11. After the successful upgrade some cleanup can be done, by removing obsolete files/directories: # rm -r /kolab/etc/resmgr # rm -r /kolab/etc/proftpd # rm -r /kolab/var/kolab/www/freebusy/cache/* 12. The free/busy cache has to be regenerated for all calendar folders of all accounts, see "Upgrade from 2.2-rc1 to 2.2-rc2" in this file. Additional hints may be available in the Kolab wiki: http://wiki.kolab.org/index.php/Kolab2_Upgrading Direct upgrade from Kolab1 is not supported. We suggest that you back up your IMAP store, install Kolab2 and manually recreate user accounts and then restore the IMAP data from the backup. Known problems and workarounds ------------------------------ - Your system (C library) has to support all languages you want to have available in the web admin interface and fbview. For most languages you have to use the non-UTF-8 and non-euro locales, i.e. de_DE, fr_FR, it_IT, nl_NL instead of e.g. de_DE at euro. For fbview some languages need a UTF-8 locale, e.g. ja_JP.UTF-8 for Japanese. See kolab/issue2732 (Horde and Web Admin Interface Language Selection depends on OS locale support) for details. - If login on https://yourserver.example.com/fbview and triggering free/busy regeneration does not work, try as user kolab: /kolab/bin/php -r 'imap_open("{localhost:143/notls}", "" ,"");' If it yields "Segmentation fault (core dumped)", then there probably is a conflict between a dynamically loaded libdb3 from your system and a statically linked libdb4 from the OpenpPKG php package. If it yields a "PHP Warning: ...", this part of the system works correctly. One reason for such a conflict could be the mere presence of /lib/libnss_db.so.*, which is installed on some distributions by default. On Debian systems it is contained in the package "libnss-db". If you really need this library, you could work around the loading of libdb3 by placing a symbolic link with the correct name in /kolab/lib, e.g.: ldd /lib/libnss_db.so.2 libnss_files.so.2 => /lib/tls/libnss_files.so.2 (0xb7f16000) ---> libdb3.so.3 => /usr/lib/libdb3.so.3 (0xb7e6b000) libc.so.6 => /lib/tls/libc.so.6 (0xb7d36000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x80000000) ln -s /dev/null /kolab/lib/libdb3.so.3 See kolab/issue1607 (need to replace gdbm for pfbcache, because of license clash gdbm vs php) for details. - /kolab/etc/kolab/kolab_bootstrap -b fails to start the temporary slapd on Linux 2.4 kernels if binaries compiled on Linux 2.6 (as provided on kolab.org) are used. See kolab/issue1795 for details. - Under some circumstance the Kolab server may not create or delete users or update the configuration after changes have been made in the web interface. This happens most often immediately after the bootstrap. In that case restart the kolabd: /kolab/bin/openpkg rc kolabd restart If user accounts are still not created or deleted, you can try removing the file /kolab/var/kolab/mailbox-uidcache.db and restarting kolabd. See kolab/issue1068 (Mailboxes are not created until kolabd restart) and kolab/issue1098 (Changes in the service tab are not accepted after bootstrap) for details. - If modifying or deleting of address book entries doesn't work, restarting openldap can help, see kolab/issue854 for details. - There is a report that the manager can only see users in the primary domain, see kolab/issue1485. We can't reproduce this problem, please tell us if you can. - Calendar folders for group/resource accounts can't be created for domains which were added after bootstrap, i.e. via the web admin interface. See kolab/issue1313 for details. - When deleting domains via the web admin interface, the corresponding LDAP data and IMAP spool stay on the server and have to be deleted manually. See kolab/issue1571 and kolab/issue1576 for details. - A domain maintainer can not always edit the email aliases for a user, even if the user and the alias is in domains the domain maintainer has access to. See kolab/issue2825 for details. $Id: README.1st,v 1.90 2008/07/10 12:41:32 thomas Exp $ -------------- next part -------------- Kolab Server 2.2 Release Notes ============================== (Version 20080711, Kolab Server 2.2.0) For upgrading and installation instructions, please refer to the 1st.README file in the package directory. Upgrading from Kolab server 2.1 is not yet documented. Differences between Kolab 2.1 and 2.2: - Upgrade of central Kolab server components The Apache server shipped with the Kolab server has been upgraded to Apache-2.2.*. At the same time the system was switched to PHP5. Postfix got upgraded to 2.4.* which removes the need for special Kolab patches which were integrated upstream. The Cyrus IMAP server was updated to 2.3.* also removing the need for some, though not all, Kolab specific patches. - Inclusion of the web based Horde Groupware client The Kolab server now provides a web client that supports all the groupware features known from Outlook and Kontact. Thus users are less dependent on their local client and can access their groupware data from anywhere in the world provided they have a standard browser available. - Structural improvements Several components of the Kolab server got restructured so that porting the Kolab server to distributions other than OpenPKG got easier. This also improves the development model in general. - Improvements, bugfixes and upgraded software components The 2.2 release received many improvements and bugfixes for issues found in earlier versions. Additionally all software components have been upgraded to new upstream versions. The specifics are described below. Changes between 2.2-rc-3 and 2.2.0 - clamav-0.93.3-20080708 New upstream version, fixes denial of service. - fbview-horde-3.2_rc3-20080605 Allow login if public imap service is disabled. - fbview-kronolith-2.2_rc2-20080710 kolab/issue2872 (Building horde packages fails if different version already installed) - horde-imp-kolab-4.2_rc3-20080710 kolab/issue2872 (Building horde packages fails if different version already installed) - horde-ingo-kolab-1.2_rc2-20080710 kolab/issue2872 (Building horde packages fails if different version already installed) - horde-kolab-3.2_rc3-20080707 Allow login if public imap service is disabled. kolab/issue2831 (SECURITY: for forms in webadmin) kolab/issue1615 (Use