Changelog EFW Community 3.2.1

Changelog EFW Community 3.2.1
=============================

* COMMUNITY-163 Automatically add the rpm channel in efw-upgrade using the major version

* COMMUNITY-167 Icon is missing, applying configuration

* COMMUNITY-196 Save username on efw-upgrade call

* COMMUNITY-219 Create community-appliance package

* COMMUNITY-223 Event notifications edit not working on Community

* CORE-1367 Replace deprecated Perl calls

* CORE-1379 3.2 cannot be installed on vmware 5.5

* CORE-1382 Update translations

* CORE-1397 Evaluate OpenSSL CVE-2016-0800 and others

* CORE-1410 Raid failing event not detected

* CORE-1413 Rpm database rebuild procedure slow

* CORE-1422 connection.cgi use 100% of CPUs

* CORE-1427 endian.logger raises an exception mixing message parameters and exc_info

* CORE-1429 Add SSL/TLS and STARTTLS support to email notifications

* CORE-1438 Signature updates may leave files in inconsistent state

* CORE-1448 Add default pythonrc

* CORE-1454 Add methods for matching/deleting iptables connections and conntack

* CORE-1455 Add an to DomainNameRegex for validating non-FQDN

* CORE-1456 Allow wildcards hostname in Dnsmasq configuration

* CORE-1467 Fix sshd reload call

* CORE-1472 Fix ebtables path

* CORE-1483 Execute a trigger when a visit is deleted for inactivity

* CORE-1487 Ulogd does not start on netwizard

* CORE-1491 Factory default does not restore ethernet settings

* CORE-1498 Fix wrong imports in endian.restartscripts.getblackholedns

* CORE-1500 Restoring a 3.0 backup on 3.2 will leave files with wrong permissions

* CORE-1505 Support additional parameters in endian.authentication.auth_client.authenticate

* CORE-1508 Ability to set a custom Diffie-Hellman group for Apache

* CORE-1511 Ipsec logs not rotated due to missing folder in /var/log/archives

* CORE-1523 Improve ciphers used by Apache

* CORE-1525 Mountpoints are shown on "Hardware information" in dashboard page

* CORE-1532 Apache job fail to start due to missing certificate

* CORE-1535 Cannot create archive only backups

* CORE-1539 syslog-ng runs in multiple instances

* CORE-1560 Network hosts imported from 3.0 to 3.2 cause a traceback

* EOS-1005 Forced dependency to db-bin because on some products was missing in

* EOS-1020 Duplicate package after an update that restarts sshd

* EOS-1026 shadow: update to 4.2.1

* EOS-1067 Single user mode for password recovery is not working in yocto

* EOS-1084 usb_modeswitch segfault when pluggin 3G modem

* EOS-1098 vim: disable mouse default

* EOS-1105 Post installation trigger for cyrus-sasl-bin slows down or even block installation

* EOS-632 Implement multilib

* EOS-881 glibc - getaddrinfo stack-based buffer overflow CVE-2015-7547

* EOS-916 Update script used to create .pot files

* EOS-922 Introduce initrd in x86 kernels

* EOS-927 usb_modeswitch doesn't create ttyUSB if usb modem is plugged before boot start

* EOS-944 Grub: missing conffile in /etc/default/grub

* EOS-964 vim: remove backup file creation at all

* EOS-997 OpenSSL is unable to verify certificates issued by default root CA

* UTM-1389 DHCP failed to run

* UTM-1397 SSLv3 POODLE for SMTP Proxy

* UTM-1422 Squid going IPv6 on IPv6 sites resulting in (101) Network is unreachable

* UTM-1435 Disable ipv6 on postfix

* UTM-1440 Unable to disable Snort rules due to a TypeError

* UTM-1445 Snort rules based on "preprocessor ssl" prevent snort to start

* UTM-1451 Error joining Proxy not Active Directory

* UTM-1457 Show the total number of connections in "show openvpn"

* UTM-1460 Can't download content filter signatures on Alpha 3.2.0

* UTM-1463 proxy.pac improvements

* UTM-1483 Allow at (@) character in certificates common name

* UTM-1491 Allow wildcard certificates generation

* UTM-1492 Allow wildcards certificate pkcs12 upload

* UTM-1496 Certificated with a CA chains with more than one CA cannot be used in VPN server and VPN portal

* UTM-1515 Missing saslauthd on yocto

* UTM-1528 Proxy authentication is not working with AD

* UTM-1530 CA certificate symlink is not created

* UTM-1531 Postfix access control rewrite

* UTM-1536 Custom DHCP configuration not applied

* UTM-1549 Web filter profile containing space in the name are not applied to proxy ACL

* UTM-1555 Wrong DHCP lease expire time

* UTM-1559 Webfilter configurations are not removed and prevent c-icap to start
Source: README, updated 2016-07-26




- wong chee tat :)