- announce - lists.freelock.com

[ledgersmb-announce] Release of ledgersmb-1.6 v1.6.6-2
by Robert J. Clay 10 Nov '18

10 Nov '18

An initial version of the debian ledgersmb-1.6 package version 1.6.6-2 (package version 2 for LedgerSMB v1.6.6) has been released and uploaded to our PPA[2], for 'cosmic' (v18.10) as well as 'bionic' (v18.04 LTS). I would have liked to make it available as well on 'xenial (v16.04 LTS), but at least one of the new (for LedgerSMB v1.6.x) dependencies fails to build for it so that needs more investigation. That is the same reason I have not uploaded new package to our apt package repository for 'main' in stretch[1]. The packages at our our PPA: ledgersmb-1.6 ledgersmb-1.6-apache ledgersmb-1.6-lighttpd ledgersmb-1.6-nginx ledgersmb-1.6-varnish Only the main 'ledgersmb-1.6' package is required; the others are related to which web proxy you might want to use and you only need one of them. Except for the server name, they do try to set up the chosen web proxy automatically for use including (except for the one for varnish) configuring an SSL certificate to use defaulting to the one created by the ssl-cert package. -- Robert James Clay rjclay(a)gmail.com, jame(a)rocasa.us GPG ID: 2448 3AE0 874D 8696 6DCD ECF4 198C AB6F 43B7 EA9A. [1] https://apt.ledgersmb.org/ [2] https://launchpad.net/~ledgersmb/+archive/ubuntu/main/+packages

1 0

[ledgersmb-announce] LedgerSMB 1.6.6 released
by Erik Huelsmann 14 Oct '18

14 Oct '18

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.6.6 * Fix search for reconciliation report by amount (Nick P) * Fix adding budget gives error (Nick P, #3850) * Fix heading not displayed when editing account (Nick P) * Fix parent not displayed when editing account heading (Nick P) * Fix 'Returns' drop-down option not shown editing account (Nick P) * Update Dojo to 1.13.3 (Erik H) Nick P is Nick Prater Erik H is Erik Huelsmann For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.6.6/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.6.6 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.6.6 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.6.6 These are the sha256 checksums of the uploaded files: 7069e42dcb0f4a871109231d1c776182582c2ab23a4b93c53db5cc16acc3d7de ledgersmb-1.6.6.tar.gz 3fc9112c3fbc0e57c9b482c31869017d34059af66e045f041571979100324a72 ledgersmb-1.6.6.tar.gz.asc

1 0

[ledgersmb-announce] LedgerSMB 1.6.5 released
by Erik Huelsmann 16 Sep '18

16 Sep '18

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fix: Changelog for 1.6.5 * Update Dojo to 1.13.3-pre; previous update broke file uploads (Erik H, #3799) Erik H is Erik Huelsmann For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.6.5/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.6.5 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.6.5 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.6.5 These are the sha256 checksums of the uploaded files: 27a20a3d700ea59cc635f706066b2e9b6994a4e6c993076ea4f4952ffe354c53 ledgersmb-1.6.5.tar.gz 4bc64a59a694f96d3f6fc015a5c8d013895b2bd948e9791e2726d66c9088758f ledgersmb-1.6.5.tar.gz.asc

1 0

[ledgersmb-announce] LedgerSMB 1.6.4 released
by Erik Huelsmann 25 Aug '18

25 Aug '18

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.6.4 * Fix GL Save Template gives error (Nick P, #3754) * Fix error adding reverse payment to batch (Nick P, #3761) * Fix wrong search screen after reversing receipt (Nick P, #3763) * Fix error displaying template transaction (Nick P, #3759) * Update Dojo to 1.13.1 (Erik H) * Fix error deleting template transaction (Nick P, #3722) - Add role 'transaction_template_delete' - Show template transaction Delete button only with permissions Nick P is Nick Prater Erik H is Erik Huelsmann For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.6.4/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.6.4 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.6.4 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.6.4 These are the sha256 checksums of the uploaded files: 54499a41f0fde071154744459d345ad85d3052a3f1598703a985e5cf02d7325e ledgersmb-1.6.4.tar.gz 059b7f49baae8f790cf7eafc6a2a3b4cbf82eafc750f0b816bdfedb74112ea24 ledgersmb-1.6.4.tar.gz.asc

1 0

[ledgersmb-announce] LedgerSMB 1.6.3 released
by Erik Huelsmann 22 Jul '18

22 Jul '18

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.6.3 * Fix for menu System > Templates fails to execute SQL script (Erik H, #3588) * Fix for GL journal buttons displaying in random order (Erik H, #3680) * Fix for 'contact_all' role missing 'contact_vendor' rights (Erik H) * Fix 1.6.1 regression browser failure to cache menu structure (Erik H) Erik H is Erik Huelsmann For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.6.3/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.6.3 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.6.3 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.6.3 These are the sha256 checksums of the uploaded files: 5f23c7464dee8245f3a618f99526106ec79b8aa7608c3b7fb67408b13f9a13d9 ledgersmb-1.6.3.tar.gz db982d4e026caf3a71ddea2aa8811e7bb451e597c4afbcb33ce605b5cd09bcae ledgersmb-1.6.3.tar.gz.asc

1 0

[ledgersmb-announce] LedgerSMB 1.6.2 released
by Erik Huelsmann 23 Jun '18

23 Jun '18

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains fixes for two regressions in 1.6 over 1.5: Changelog for 1.6.2 * Print button (to screen) doesn't work more than once (Erik H, #3705) * Menu links ignore clicks long after first click (Erik H, #3704) Erik H is Erik Huelsmann For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.6.2/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.6.2 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.6.2 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.6.2 These are the sha256 checksums of the uploaded files: e24c9f03d5fc306a10e0b759be7b65c44d75f47e19449cd6cefda83ff2d05c62 ledgersmb-1.6.2.tar.gz 60ec07555dc77a96eb590e1ae7792103021fc353ce98207468906926e0505018 ledgersmb-1.6.2.tar.gz.asc

1 0

[ledgersmb-announce] LedgerSMB 1.6.1 released
by Erik Huelsmann 17 Jun '18

17 Jun '18

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.6.1 * Menu fails to show sometimes (Erik H, #3684) * Error when managing user permissions through HR screen (Erik H, #3686) * Reconciliation reports sometimes can't be submitted (Nick P) Erik H is Erik Huelsmann Nick P is Nick Prater For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.6.1/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.6.1 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.6.1 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.6.1 These are the sha256 checksums of the uploaded files: badf997073eea49f8fd81a9db6c6d6ae7c91f13fa6f778d06677d9e9b00ffc18 ledgersmb-1.6.1.tar.gz d493654ec13433dec7ee6201c39b7dec4e9947d6afb8454369ba723954056d7c ledgersmb-1.6.1.tar.gz.asc

1 0

[ledgersmb-announce] LedgerSMB 1.6.0 released
by Erik Huelsmann 10 Jun '18

10 Jun '18

The LedgerSMB development team is happy to announce the start of a new series of stable releases: 1.6.0. Over the past 18 months (since the release of 1.5.0) the team has worked on a multitude of aspects of the system with the primary focus to build a solid foundation for future development as well as reducing system complexity -- both at the code and installation levels. User Interface * Reports and search results exportable to XLS(X) (Yves L) * Left menu replaced by a (faster) Dojo-based version (Yves L/Erik H) Installation & Administration * Added 'System Information' page to setup.pl for problem diagnosis (Erik H) * Numerous improvements for the migrations and infrastructure (Yves L/Erik H) * Better detection of incorrect @INC paths (David G) * Automatic date format selection using browser locale (Yves L/Erik H) * No more warnings from database creation and upgrade (Erik H) * Improved logging: various logs correlated using unique request IDs (Erik H) * Functions 'warn()' and 'die()' logged to debug logs (Erik H) * Removed need for 'tempdir' and associated configuration option (Nick P) * Removed numerous unused configuration options (Nick P) * Specific output formats can be disabled in configuration (Yves L) * Respect smtpuser and smtppass configuration options (Nick P) * Add smtpport configuration option (Nick P) * Database upgrades now ask for user input on (expected) faulty data (Erik H) Performance * PSGI responses no longer written to file but kept in memory (Erik H/Yves L) Rewritten inventory tracking and adjustments * Removed the need for the ill-understood 'Inventory Entity' (Erik H) * Inventory adjustments GL transactions instead of dummy invoices (Erik H) * SQL & in-browser(BDD) tests (Erik H) Code cleanup * Removed code duplication in - Template handling framework (Yves L) * Remove unused variables and unreachable code (Nick P) * Remove fragments of REST framework never fully implemented (Erik H) * Authentication handling centralized in request dispatch code (Erik H) * Cleaned up handling of uploaded files in request handling (Erik H) * Moved to Plack::Request (from CGI::Simple & LedgerSMB) (Erik H) * Template format plugin cleanup and refactoring (Erik H/Nick P) * Template handling code cleanup (Erik H/Nick P) * Unreferenced UI templates deleted (Erik H) * Centralized and more robust entry point for code in old/ (Erik H) * Merge of SQL-Ledger 2.8 and 3.0 migration code; improved consistency (Yves L) * Improved cleanup of temp files and dirs after use (Erik H) * Improved HTML structure (balanced closing/opening tags, etc) (Yves L) * Factored HTTP response responsibility out of LedgerSMB::Template (Erik H) * Moved request pre- and post-processing into custom Plack Middlewares (Erik H) Quality assurance * Port testing of database routines to pgTAP (and Perl's 'prove') (Yves L) * Enforce numerous Perl::Critic policies with code cleanup (Nick P/Rob R) * Add tests for all template output formats (Nick P) * Constrain password_duration setting to valid values (Nick P) Erik H is Erik Huelsmann Yves L is Yves Lavoie Nick P is Nick Prater Rob R is Rob Ransbottom David G is David Godfrey For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.6.0/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.6.0 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.6.0 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.6.0 These are the sha256 checksums of the uploaded files: 97de4d0749b0789bf2f1e4fac1fa91e5fe936cd0889697b225f94b5255491484 ledgersmb-1.6.0.tar.gz 1a619c49b6c8a225c25bff74c4101a3d0ef988e37a8d0b7b2152784102419793 ledgersmb-1.6.0.tar.gz.asc

1 0

[ledgersmb-announce] Security announcement for CVE-2018-9246 / PGObject::Util::DBAdmin
by Erik Huelsmann 06 Jun '18

06 Jun '18

This mail is sent to this mailing list because PGObject::Util::DBAdmin itself doesn't have a mailing list to send the disclosure to. We'll update its repository to reflect the announcement below. Please take note of the security advisory below, known as CVE-2018-9246 Nick Prater discovered that the PGObject::Util::DBAdmin insufficiently sanitizes or escapes variable values used as part of shell command execution, resulting in shell code injection. The vulnerability allows an attacker to execute arbitrary code with the same privileges as the running application through the create(), run_file(), backup() and restore() functions. Affected versions: PGObject::Util::DBAdmin versions 0.110.0 and lower. Vulnerability type: Insufficiently sanitized arguments in external program invocation Discoverer: Nick Prater (NP Broadcast LTD) Resolution: Upgrade to PGObject::Util::DBAdmin 0.120.0 or newer. (0.130.0 available on CPAN). Kind regards, -- Bye, Erik. http://efficito.com -- Hosted accounting and ERP. Robust and Flexible. No vendor lock-in.

1 1

[ledgersmb-announce] LedgerSMB 1.6.0-rc2 released
by Erik Huelsmann 06 Jun '18

06 Jun '18

Hi, After the LedgerSMB 1.6.0-rc1 release of two weeks ago, work has continued and we've found and solved several issues. We're now releasing 1.6.0-rc2 with the fixes listed below for your testing. Please send feedback to devel(a)lists.ledgersmb.org or file your issues through GitHub ( https://github.com/ledgersmb/LedgerSMB/issues) Fixes in LedgerSMB 1.6.0-rc2 (over 1.6.0-rc1): - Add more scripts to help resolve schema migration problems - Fix mailing of invoices, orders, etc. - Fix UTF-8 encoding issue with schema migration check output - Fix CSV import code not processing uploaded input correctly - Correctly detect UTF-8 (due to BOM) on uploaded form content (files) - Fix e-mail attachments - Fix and clean up LedgerSMB::File module and children (with tests) Please note that we're releasing 1.6.0-rc2; this means we think this code is production ready and that the database schema is stable. You're highly encouraged to try this version, however, if you run it in production (even though some of the developers are), you should consider yourself an early adopter. We'd highly appreciate your testing and feedback. For an overview of the changes in version 1.6, please check our release notes: https://ledgersmb.org/content/16-release-notes; for an in-depth listing of the changes since 1.5, see our Changelog: https://github.com/ledgersmb/LedgerSMB/blob/master/Changelog#L2-L60 As always, the release can be downloaded from the download site: https://download.ledgersmb.org/f/Beta%20Releases/1.6.0-rc2/ Or Docker images can be pulled through: $ docker pull ledgersmb/ledgersmb:1.6 With our Docker Compose file ( https://github.com/ledgersmb/ledgersmb-docker/blob/1.6/docker-compose.yml) you can set up a full evaluation environment with a single command: $ docker-compose up -d from the directory where the docker-compose.yml file is stored. -- Bye, Erik. http://efficito.com -- Hosted accounting and ERP. Robust and Flexible. No vendor lock-in.

1 2