Release Notes CGS 5.0.12

Collax Groupware Suite
11.03.2010

New in this Version

GUI: Login and Hostname Display

From this version some improvements are included for the administration interface. The login dialog includes the IP address of the server and the product name. Additional the entire host name is indicated in the header of the administration gui. Loading the data for a form is marked by a tip.

System Management: CPU Load (%) by Service

The analysis of the CPU Load (%) by Service in the form System-> Monitoring/Analysis -> Status -> System Information is extended with this update by the services Webproxy, SMTP, IMAP/POP3, LDAP and MySQL. With it the CPU utilisation of running services can be observed even easier.

Hardware: Support of IBM x3250 M3 Type 4252 Model EAG (Chipset Intel 3420)

With this update Collax Server support IBM x3250 M3 Type 4252. The driver for the SATA controller has been rebuild. Collax Server can be installed and run on IBM x3250 M3 Type 4252.

Zarafa 6.30.11

With this Collax software update the new version 6.30.11 of Zarafa Groupware is available. This version includes mainly improvements and some new funcionality for Zarafa Webaccess. Please find details here:

https://doc.zarafa.com

Zarafa Brick Level Backup

The backup tool allows to save individual e-mail boxes and to recover single elements of e-mail boxes or public folders. In the form * Settings-> Mail and Messaging-> Zarafa Groupware-> Bricklevel backup * a 1-, 2-, 3-day full backup can be defined. When required also one to 4 hourly incremental backups can be executed. Saved backups are browsed with the help of an index in the form * System-> System Operation -> Zarafa Groupware-> Bricklevel Restore * and single elements can be recovered from it.

Note: Assuming the very first backup is type incremental, the Zarafa Brick Level Backup is going to gather and save all data of the e-mail stores, like a full backup does.

Issues Fixed in this Version

E-Mail: Fetch Emails and Email Lists

When fetching emails from external email boxes the option Forward to mailing list can be used. If no mailing list was defined this led to the fact that the service to fetch emails had not been launched. With this update the field will be validated, thereby a faulty input is not possible any more.

E-Mail: Train Spam Filter; manual and automatic

Up to now it was not possibly to train the spam filter exclusive by hand with spam and Ham folder. From this update it is possibly to feed the spam and ham folder by hand at first. In the following the option Automatic training can be used to reach the best possible spam filtering result.

E-Mail: Release of Held Emails

If e-mails are stopped by defined filters for attachments or MIME under circumstances it was not possible to release this e-mail again. The release of such to hold e-mails is corrected with this update. If e-mails are released via the administration GUI they are passed to the next instance of the SMTP server and they are delivered to the receiver.

Fax: Missing Sender in Notification

If a facsimile is received a notification is sent by e-mail to the receiver. In this notification the sender was given only in the e-mail text. From this update the sender’s number is also displayed within the notifications subject.

Fax: Forwarding Fax to specific Mail Address

Receiving a facsimile and forwarding to a certain e-mail address, containing a hyphen resulted in not receiving faxes any more. This is repaired with this update, faxes can be receive and forwared to a certain e-mail address, even if the e-mail address contains a hyphen.

Collax E-Mail Archive: Forwarding to Receiver within Subdomains

In the search form of the Collax E-Mail Archive e-mails can be forwarded to certain receivers. The declaration of the receiver’s address was very restrictive up to now. Did the domain part contain more than one dot the e-mail was not forwarded. With this update this restriction is canceled. E-mails from the archive can be forwarded to any receivers.

GUI: Support of Firefox 3.6

The Firefox browser version 3.6 uses a new method getBoundingClientRect to provide offset coordinates of an element. Previous Firefox versions use the method getBoxObjectFor. Both methods are supported by the administration GUI from this update on. Operations, like right mouse click can be executed using Firefox 3.6.

Security: Linux Kernel 2.6.25

In the source code of the Linux kernel security holes have been discovered. These holes will be closed within these patches for the Linux kernel 2.6.25.

Assigned Common Vulnerabilities and Exposures (CVE) numbers:

CVE-2005-4881 CVE-2009-1633 CVE-2009-2848 CVE-2009-2903 CVE-2009-2910 CVE-2009-3001 CVE-2009-3002 CVE-2009-3238 CVE-2009-3547 CVE-2009-3612 CVE-2009-3621 CVE-2009-3726 CVE-2009-3939 CVE-2010-0007 CVE-2010-0415

Security: Internet Domain Name Server Bind

In the source code of the Internet Domain Name Server security holes have been discovered. These holes will be closed within this patch update for Bind version 9.5.2.

Assigned Common Vulnerabilities and Exposures (CVE) numbers:

CVE-2010-0382 CVE-2010-0290 CVE-2010-0097

Security: Cryptography Toolkit OpenSSL

In the source code of the cryptography toolkit OpenSSL 0.9.8k security holes have been discovered. These holes will be closed within this Collax software update.

Assigned Common Vulnerabilities and Exposures (CVE) numbers:

CVE-2009-4355

Security: Compression Utility gzip

In the source code of the compression utility gzip security holes have been discovered. These holes will be closed within this patch update for the gzip 1.3.12.

Assigned Common Vulnerabilities and Exposures (CVE) numbers:

CVE-2009-2624 CVE-2010-0001

System Management: Monthly Log File Rotation is omitted

Up to now the contents of the system log file could be kept for 1 day, 1 week or 1 month. Then the file was saved and moved. To process and search through the system log file the option to store the file monthly is cancelled and replaced with the weekly rotation from this update on.

Add-on Software: Log Rotation of Collax Virus Protection

The file scan executed by the Collax virus Protection generates log file entries for every search. The rotation of these log files had been irregular up to now. With this update this process is going to be integrated within the system-specific rotation for log files.

Notes

Add-on Software: New Licensing of Avira Antivir

The Anti Virus product Avira Antivir will now be identically licensed like all Collax Modules. With this method a higher handling comfort is reached.