October 2023 - devel - lists.freelock.com

Bug#1029045: ledgersmb: login page Perl error in default config
by JB 18 Jan '26

18 Jan '26

Package: ledgersmb Version: 1.6.9+ds-2+deb11u3 Severity: important X-Debbugs-Cc: j-dbug.666.114.1101(a)x.firehead.org Dear Maintainer, I installed LedgerSMB with defaults on Debian-11 with systemd. It starts fine with Starman, but when I go to http://localhost:5762/login.pl it shows only this message: ----- Error! Can't locate object method "new" via package "Template" at /usr/share/ledgersmb/bin/../lib/LedgerSMB/Template.pm line 599. dbversion: , company: 1.6.9 ----- Thus leaving the package in an unusable state. -- System Information: Debian Release: 11.6 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-20-amd64 (SMP w/2 CPU threads) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages ledgersmb depends on: ii adduser 3.118 ii debconf [debconf-2.0] 1.5.77 ii dpkg 1.20.12 ii libcarp-always-perl 0.16-1 ii libcgi-emulate-psgi-perl 0.23-1 ii libcgi-simple-perl 1.115-2 ii libclass-c3-xs-perl 0.15-1+b1 ii libconfig-inifiles-perl 3.000003-1 ii libdata-uuid-perl 1.226-1+b1 ii libdatetime-format-strptime-perl 1.7800-1 ii libdatetime-perl 2:1.54-1 ii libdbd-pg-perl 3.14.2-1+b1 ii libdbi-perl 1.643-3+b1 ii libhtml-escape-perl 1.10-1+b3 ii libhttp-exception-perl 0.04007-1 ii libio-stringy-perl 2.111-3 ii libjs-dojo-dijit 1.15.4+dfsg1-1+deb11u1 ii libjson-perl 4.03000-1 ii liblocale-codes-perl 3.66-1 ii liblocale-maketext-lexicon-perl 1.00-1.1 ii liblog-log4perl-perl 1.54-1 ii libmime-lite-perl 3.031-1 ii libmime-types-perl 2.18-1 ii libmoose-perl 2.2014-2 ii libmoosex-nonmoose-perl 0.26-1.1 ii libnamespace-autoclean-perl 0.29-1 ii libnumber-format-perl 1.75-1.1 ii libpgobject-perl 2.2.0-1 ii libpgobject-simple-perl 3.000002-1.1 ii libpgobject-simple-role-perl 2.000002-1.1 ii libpgobject-type-bigfloat-perl 2.001-1 ii libpgobject-type-bytestring-perl 1.2.3-1 ii libpgobject-type-datetime-perl 2.000002-1 ii libpgobject-util-dbadmin-perl 1.4.0-1 ii libpgobject-util-dbmethod-perl 1.00.003-1 ii libplack-builder-conditionals-perl 0.05-1.1 ii libplack-middleware-reverseproxy-perl 0.16-1 ii libplack-perl 1.0048-1 ii libplack-request-withencoding-perl 0.14-1 ii libtemplate-perl 2.27-1+b3 ii libtext-markdown-perl 1.000031-3 ii libtry-tiny-perl 0.30-1 ii libversion-compare-perl 0.14-1.1 ii libxml-simple-perl 2.25-1 ii perl 5.32.1-4+deb11u2 ii postgresql-client 13+225 ii postgresql-client-13 [postgresql-client] 13.9-0+deb11u1 ii postgresql-contrib 13+225 ii starman 0.4015-1 ii ucf 3.0043 Versions of packages ledgersmb recommends: pn libjson-xs-perl <none> pn liblatex-driver-perl <none> pn libmath-bigint-gmp-perl <none> pn libtemplate-plugin-latex-perl <none> pn libtex-encode-perl <none> ii lighttpd 1.4.59-1+deb11u2 pn texlive-latex-recommended <none> Versions of packages ledgersmb suggests: pn default-mta | mail-transport-agent <none> pn latex-cjk-all <none> pn libimage-size-perl <none> pn libopenoffice-oodoc-perl <none> pn libx12-parser-perl <none> pn lpr <none> ii postgresql 13+225 pn texlive-xetex <none> -- debconf information: * ledgersmb/lsmb_proxy: Lighttpd * ledgersmb/admin_login: lsmb_dbadmin

2 1

Bug#1028924: ledgersmb: Init script calls start-stop-daemon incorrectly, fails to start
by JB 18 Jan '26

18 Jan '26

Package: ledgersmb Version: 1.6.9+ds-2+deb11u3 Severity: important X-Debbugs-Cc: j-dbug.666.114.1101(a)x.firehead.org Dear Maintainer, I installed LedgerSMB with defaults on Debian-11 with sysvinit (instead of systemd). When I try to start the daemon, it produces the following output: # /etc/init.d/ledgersmb start $Starting ledgersmb: start-stop-daemon: unrecognized option '--interval=5' Try 'start-stop-daemon --help' for more information. # I am not an expert on start-stop-daemon, but looking at the init script, it seems start-stop-daemon is invoked with /usr/bin/start_server as the intended program to run, which then has further arguments for that to start /usr/bin/starman. However the start-stop-daemon invocation lacks a "--start" argument prior to the /usr/bin/start_server, and the "--start" seems to be the norm among other uses of start-stop-daemon in the system's /etc/init.d/* files. So maybe the init script is for some completely different version of start-stop-daemon, or the arguments are really for a different program, or something. I'm not quite sure. -- System Information: Debian Release: 11.6 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'oldstable-updates'), (500, 'stable'), (500, 'oldstable') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-20-amd64 (SMP w/2 CPU threads) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: sysvinit (via /sbin/init) LSM: AppArmor: enabled Versions of packages ledgersmb depends on: ii adduser 3.118 ii debconf [debconf-2.0] 1.5.77 ii dpkg 1.20.12 ii libcarp-always-perl 0.16-1 ii libcgi-emulate-psgi-perl 0.23-1 ii libcgi-simple-perl 1.115-2 ii libclass-c3-xs-perl 0.15-1+b1 ii libconfig-inifiles-perl 3.000003-1 ii libdata-uuid-perl 1.226-1+b1 ii libdatetime-format-strptime-perl 1.7800-1 ii libdatetime-perl 2:1.54-1 ii libdbd-pg-perl 3.14.2-1+b1 ii libdbi-perl 1.643-3+b1 ii libhtml-escape-perl 1.10-1+b3 ii libhttp-exception-perl 0.04007-1 ii libio-stringy-perl 2.111-3 ii libjs-dojo-dijit 1.15.4+dfsg1-1+deb11u1 ii libjson-perl 4.03000-1 ii liblocale-codes-perl 3.66-1 ii liblocale-maketext-lexicon-perl 1.00-1.1 ii liblog-log4perl-perl 1.54-1 ii libmime-lite-perl 3.031-1 ii libmime-types-perl 2.18-1 ii libmoose-perl 2.2014-2 ii libmoosex-nonmoose-perl 0.26-1.1 ii libnamespace-autoclean-perl 0.29-1 ii libnumber-format-perl 1.75-1.1 ii libpgobject-perl 2.2.0-1 ii libpgobject-simple-perl 3.000002-1.1 ii libpgobject-simple-role-perl 2.000002-1.1 ii libpgobject-type-bigfloat-perl 2.001-1 ii libpgobject-type-bytestring-perl 1.2.3-1 ii libpgobject-type-datetime-perl 2.000002-1 ii libpgobject-util-dbadmin-perl 1.4.0-1 ii libpgobject-util-dbmethod-perl 1.00.003-1 ii libplack-builder-conditionals-perl 0.05-1.1 ii libplack-middleware-reverseproxy-perl 0.16-1 ii libplack-perl 1.0048-1 ii libplack-request-withencoding-perl 0.14-1 ii libtemplate-perl 2.27-1+b3 ii libtext-markdown-perl 1.000031-3 ii libtry-tiny-perl 0.30-1 ii libversion-compare-perl 0.14-1.1 ii libxml-simple-perl 2.25-1 ii perl 5.32.1-4+deb11u2 ii postgresql-client-13 [postgresql-client] 13.9-0+deb11u1 ii postgresql-contrib 13+225 ii starman 0.4015-1 ii ucf 3.0043 Versions of packages ledgersmb recommends: ii apache2 2.4.54-1~deb11u1 pn libjson-xs-perl <none> pn liblatex-driver-perl <none> pn libmath-bigint-gmp-perl <none> pn libtemplate-plugin-latex-perl <none> pn libtex-encode-perl <none> pn texlive-latex-recommended <none> Versions of packages ledgersmb suggests: ii exim4-daemon-light [mail-transport-agent] 4.94.2-7 pn latex-cjk-all <none> pn libimage-size-perl <none> pn libopenoffice-oodoc-perl <none> pn libx12-parser-perl <none> pn lpr <none> ii postgresql 13+225 pn texlive-xetex <none> -- debconf information: * ledgersmb/lsmb_proxy: None * ledgersmb/admin_login: lsmb_dbadmin

2 1

Bug#1027472: ledgersmb: upstram says 1.6 is unsupported and insecure. Newer upstream version 1.10 available
by Tobias Frost 18 Jan '26

18 Jan '26

Source: ledgersmb Severity: normal Tags: security Please consider updating ledgersmb. Filing as RC critical due to secrutiy issues in the old version. Upstream says: "The current stable release line is 1.10. For more information about older versions, see the FAQ item about supported releases. Versions 1.6 and older should no longer be used due to known security issues that cannot be resolved in that code base." [1] Upstream had declared 1.6 end of life 2021-06-10 [2] [1] https://ledgersmb.org/content/download [2] https://ledgersmb.org/faq/which-versions-do-you-support -- tobi

3 2

Adding to OpenBSD. Is this a good time now?
by chris＠bennettconstruction.us 19 Nov '24

19 Nov '24

A lot of Perl modules need to be imported into OpenBSD in order for it to be installable. I plan on asking for help to do this from OpenBSD users. It seems like LedgerSMB would now be a good import with all of the development of testing, etc. Are there any big changes on the immediate horizon for 1.5? I'm not running LedgerSMB because of the work that needs to be done first. As a side note, I am working on getting the forums back up, but $$ are a bit of a problem right now. Trying to find a baremetal server outside of the USA that I can afford hasn't been successful so far. I found one, but they charge $30 for remote access for 24 hours. I can't afford $90 a month, which is most of what I am finding. Thanks, Chris Bennett

3 2

LedgerSMB 1.9.28 released
by Erik Huelsmann 10 Jul '24

10 Jul '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.9.28 * Fix deletion of parts groups (#7363) * Align invoice/order entry between databases with and without parts (#7374) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.9.28/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.9.28 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.9.28 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.9.28 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.9.28 These are the sha256 checksums of the uploaded files: 4b2c0c53de2d80f5fc5ec3f8ee3bea61e5624684ebb1c2d55b2c2472c904a5b4 ledgersmb-1.9.28.tar.gz ccad27a8f22c25bbea0c5fdef564df325e9c202bd95af5713c4f8c14038b0f49 ledgersmb-1.9.28.tar.gz.asc

1 0

LedgerSMB 1.9.29 released
by Erik Huelsmann 10 Jul '24

10 Jul '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.9.29 * Fix regression since 1.9.27 upgrading old companies while renaming setting * Fix selection of default AR/AP accounts while importing databases (#7419) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.9.29/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.9.29 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.9.29 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.9.29 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.9.29 These are the sha256 checksums of the uploaded files: feaf830ea206b8a0a20a0efab93a5c70ccf29f028bc28f7156b0484ec2f99609 ledgersmb-1.9.29.tar.gz b49c86e9a6d37f528c4a884357bd9c4954fbdd6b7c27b41ea34c34c348d67d66 ledgersmb-1.9.29.tar.gz.asc

1 0

LedgerSMB 1.11.2 released
by Erik Huelsmann 22 Oct '23

22 Oct '23

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. Many thanks to John Imrie (@ThePilgrim on GitHub.com) for fixing Locale::CLDR not to depend on the 'bignum' module! We now depend on this latest release of Locale::CLDR. This release contains the following fixes and improvements: Changelog for 1.11.2 * Fix trial balance drill down showing partial results (#7657) * Specify Locale::CLDR minimum version to fix numbers shown as 'HASH()' (#7671) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.11.2/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.11.2 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.11.2 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.11.2 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.11.2 These are the sha256 checksums of the uploaded files: 953501490b76166ac368dfc9b24c82ab518d3cf0f152b03215987b4c7cdace90 ledgersmb-1.11.2.tar.gz 62d50e94e262e49d9ec0a5bdf76d834bb081b7263c2c48ca08feb52032a5c16a ledgersmb-1.11.2.tar.gz.asc

1 0

LedgerSMB 1.10.24 released
by Erik Huelsmann 22 Oct '23

22 Oct '23

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.10.24 * Specify Locale::CLDR minimum version to fix numbers shown as 'HASH()' (#7671) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.10.24/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.10.24 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.10.24 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.10.24 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.10.24 These are the sha256 checksums of the uploaded files: 75b711bec6f5ea337f8cf9f373167b9832ee83a7bab27230d00a1c5316f8e64f ledgersmb-1.10.24.tar.gz 211fb0aff798dd7c149ebdb3aeb5ac7d2130a0d94f6e82524c30d7e6866f2561 ledgersmb-1.10.24.tar.gz.asc

1 0

LedgerSMB 1.11.1 released
by Erik Huelsmann 10 Oct '23

10 Oct '23

The LedgerSMB development team is happy to announce a new line of releases of its open source ERP and accounting application: 1.11. This mail announces both 1.11.1 as well as 1.11.0. Due to bad interaction with one of the Perl dependencies shipped with Perl 5.36+ and the fact that the Docker images are based on Debian Bookworm (shipping 5.36), the general announcement of the new release series was held back after the release of 1.11.0. 1.11.1 should fix this issue. Highlights of changelog for 1.11.0 Added functionalities * Reclassification of negative assets to liabilities and vice versa (#7389) * AR/AP invoice history shows more actions, user and timestamp (#5873) * Total paid and Remaining balance summaries added to invoices (#7130) * Barcode support added on invoices (regressed since 1.5) (#1584) * Cross-referencing reversed and reversing transactions (#6715) Changed functionalities * Fresh new application logo and login page layout (#7317, #7319) * Posted transactions show as read-only to differentiate from saved ones Bugs fixed * Performance fixes for stored procedures being slow on huge databases (#7072) * Multiple fixes on AR/AP template transactions * Broken SQL-Ledger 2.8 and Ledger123 migration Changelog for 1.11.1 * API documentation lists incorrect version in cookie name (#7640) * Further Math::BigFloat fixes (combined with Locale::CLDR) (#7646) * Order/Quote can't be deleted due to unconfirmed prior deletion (#7654) * Fix syntax error in consistency check and add two new ones (#7650) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.11.1/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.11.1 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.11.1 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.11.1 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.11.1 These are the sha256 checksums of the uploaded files: 83512a18752de5bc966e842f4c3593b59517ec759c6b38a88386bfee2ef3c03d ledgersmb-1.11.1.tar.gz 2ea31388bae2598d51077ec69e6747a3c0d72e6738c183f0e5aa79aa1db99479 ledgersmb-1.11.1.tar.gz.asc

1 0

LedgerSMB 1.10.23 released
by Erik Huelsmann 10 Oct '23

10 Oct '23

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.10.23 * Further Math::BigFloat fixes (combined with Locale::CLDR) (#7647) * Order/Quote can't be deleted due to unconfirmed prior deletion (#7655) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.10.23/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.10.23 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.10.23 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.10.23 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.10.23 These are the sha256 checksums of the uploaded files: dac76d26746050bdfc331f51c0e511b7fa1a687eab7892e79dbcc5ace8cfbb85 ledgersmb-1.10.23.tar.gz 81c14f973dd6a67e912bd8749a00b11514e35d131a0ff490a458c3aa11ebd76f ledgersmb-1.10.23.tar.gz.asc

1 0