June 2018 - announce - lists.freelock.com

[ledgersmb-announce] LedgerSMB 1.6.2 released
by Erik Huelsmann 23 Jun '18

23 Jun '18

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains fixes for two regressions in 1.6 over 1.5: Changelog for 1.6.2 * Print button (to screen) doesn't work more than once (Erik H, #3705) * Menu links ignore clicks long after first click (Erik H, #3704) Erik H is Erik Huelsmann For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.6.2/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.6.2 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.6.2 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.6.2 These are the sha256 checksums of the uploaded files: e24c9f03d5fc306a10e0b759be7b65c44d75f47e19449cd6cefda83ff2d05c62 ledgersmb-1.6.2.tar.gz 60ec07555dc77a96eb590e1ae7792103021fc353ce98207468906926e0505018 ledgersmb-1.6.2.tar.gz.asc

1 0

[ledgersmb-announce] LedgerSMB 1.6.1 released
by Erik Huelsmann 17 Jun '18

17 Jun '18

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.6.1 * Menu fails to show sometimes (Erik H, #3684) * Error when managing user permissions through HR screen (Erik H, #3686) * Reconciliation reports sometimes can't be submitted (Nick P) Erik H is Erik Huelsmann Nick P is Nick Prater For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.6.1/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.6.1 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.6.1 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.6.1 These are the sha256 checksums of the uploaded files: badf997073eea49f8fd81a9db6c6d6ae7c91f13fa6f778d06677d9e9b00ffc18 ledgersmb-1.6.1.tar.gz d493654ec13433dec7ee6201c39b7dec4e9947d6afb8454369ba723954056d7c ledgersmb-1.6.1.tar.gz.asc

1 0

[ledgersmb-announce] LedgerSMB 1.6.0 released
by Erik Huelsmann 10 Jun '18

10 Jun '18

The LedgerSMB development team is happy to announce the start of a new series of stable releases: 1.6.0. Over the past 18 months (since the release of 1.5.0) the team has worked on a multitude of aspects of the system with the primary focus to build a solid foundation for future development as well as reducing system complexity -- both at the code and installation levels. User Interface * Reports and search results exportable to XLS(X) (Yves L) * Left menu replaced by a (faster) Dojo-based version (Yves L/Erik H) Installation & Administration * Added 'System Information' page to setup.pl for problem diagnosis (Erik H) * Numerous improvements for the migrations and infrastructure (Yves L/Erik H) * Better detection of incorrect @INC paths (David G) * Automatic date format selection using browser locale (Yves L/Erik H) * No more warnings from database creation and upgrade (Erik H) * Improved logging: various logs correlated using unique request IDs (Erik H) * Functions 'warn()' and 'die()' logged to debug logs (Erik H) * Removed need for 'tempdir' and associated configuration option (Nick P) * Removed numerous unused configuration options (Nick P) * Specific output formats can be disabled in configuration (Yves L) * Respect smtpuser and smtppass configuration options (Nick P) * Add smtpport configuration option (Nick P) * Database upgrades now ask for user input on (expected) faulty data (Erik H) Performance * PSGI responses no longer written to file but kept in memory (Erik H/Yves L) Rewritten inventory tracking and adjustments * Removed the need for the ill-understood 'Inventory Entity' (Erik H) * Inventory adjustments GL transactions instead of dummy invoices (Erik H) * SQL & in-browser(BDD) tests (Erik H) Code cleanup * Removed code duplication in - Template handling framework (Yves L) * Remove unused variables and unreachable code (Nick P) * Remove fragments of REST framework never fully implemented (Erik H) * Authentication handling centralized in request dispatch code (Erik H) * Cleaned up handling of uploaded files in request handling (Erik H) * Moved to Plack::Request (from CGI::Simple & LedgerSMB) (Erik H) * Template format plugin cleanup and refactoring (Erik H/Nick P) * Template handling code cleanup (Erik H/Nick P) * Unreferenced UI templates deleted (Erik H) * Centralized and more robust entry point for code in old/ (Erik H) * Merge of SQL-Ledger 2.8 and 3.0 migration code; improved consistency (Yves L) * Improved cleanup of temp files and dirs after use (Erik H) * Improved HTML structure (balanced closing/opening tags, etc) (Yves L) * Factored HTTP response responsibility out of LedgerSMB::Template (Erik H) * Moved request pre- and post-processing into custom Plack Middlewares (Erik H) Quality assurance * Port testing of database routines to pgTAP (and Perl's 'prove') (Yves L) * Enforce numerous Perl::Critic policies with code cleanup (Nick P/Rob R) * Add tests for all template output formats (Nick P) * Constrain password_duration setting to valid values (Nick P) Erik H is Erik Huelsmann Yves L is Yves Lavoie Nick P is Nick Prater Rob R is Rob Ransbottom David G is David Godfrey For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.6.0/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.6.0 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.6.0 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.6.0 These are the sha256 checksums of the uploaded files: 97de4d0749b0789bf2f1e4fac1fa91e5fe936cd0889697b225f94b5255491484 ledgersmb-1.6.0.tar.gz 1a619c49b6c8a225c25bff74c4101a3d0ef988e37a8d0b7b2152784102419793 ledgersmb-1.6.0.tar.gz.asc

1 0

[ledgersmb-announce] Security announcement for CVE-2018-9246 / PGObject::Util::DBAdmin
by Erik Huelsmann 06 Jun '18

06 Jun '18

This mail is sent to this mailing list because PGObject::Util::DBAdmin itself doesn't have a mailing list to send the disclosure to. We'll update its repository to reflect the announcement below. Please take note of the security advisory below, known as CVE-2018-9246 Nick Prater discovered that the PGObject::Util::DBAdmin insufficiently sanitizes or escapes variable values used as part of shell command execution, resulting in shell code injection. The vulnerability allows an attacker to execute arbitrary code with the same privileges as the running application through the create(), run_file(), backup() and restore() functions. Affected versions: PGObject::Util::DBAdmin versions 0.110.0 and lower. Vulnerability type: Insufficiently sanitized arguments in external program invocation Discoverer: Nick Prater (NP Broadcast LTD) Resolution: Upgrade to PGObject::Util::DBAdmin 0.120.0 or newer. (0.130.0 available on CPAN). Kind regards, -- Bye, Erik. http://efficito.com -- Hosted accounting and ERP. Robust and Flexible. No vendor lock-in.

1 1

[ledgersmb-announce] LedgerSMB 1.6.0-rc2 released
by Erik Huelsmann 06 Jun '18

06 Jun '18

Hi, After the LedgerSMB 1.6.0-rc1 release of two weeks ago, work has continued and we've found and solved several issues. We're now releasing 1.6.0-rc2 with the fixes listed below for your testing. Please send feedback to devel(a)lists.ledgersmb.org or file your issues through GitHub ( https://github.com/ledgersmb/LedgerSMB/issues). Fixes in LedgerSMB 1.6.0-rc2 (over 1.6.0-rc1): - Add more scripts to help resolve schema migration problems - Fix mailing of invoices, orders, etc. - Fix UTF-8 encoding issue with schema migration check output - Fix CSV import code not processing uploaded input correctly - Correctly detect UTF-8 (due to BOM) on uploaded form content (files) - Fix e-mail attachments - Fix and clean up LedgerSMB::File module and children (with tests) Please note that we're releasing 1.6.0-rc2; this means we think this code is production ready and that the database schema is stable. You're highly encouraged to try this version, however, if you run it in production (even though some of the developers are), you should consider yourself an early adopter. We'd highly appreciate your testing and feedback. For an overview of the changes in version 1.6, please check our release notes: https://ledgersmb.org/content/16-release-notes; for an in-depth listing of the changes since 1.5, see our Changelog: https://github.com/ledgersmb/LedgerSMB/blob/master/Changelog#L2-L60 As always, the release can be downloaded from the download site: https://download.ledgersmb.org/f/Beta%20Releases/1.6.0-rc2/ Or Docker images can be pulled through: $ docker pull ledgersmb/ledgersmb:1.6 With our Docker Compose file ( https://github.com/ledgersmb/ledgersmb-docker/blob/1.6/docker-compose.yml), you can set up a full evaluation environment with a single command: $ docker-compose up -d from the directory where the docker-compose.yml file is stored. -- Bye, Erik. http://efficito.com -- Hosted accounting and ERP. Robust and Flexible. No vendor lock-in.

1 2

[ledgersmb-announce] Release of ledgersmb-1.5 v1.5.21-1
by Robert J. Clay 02 Jun '18

02 Jun '18

An initial version of the debian ledgersmb-1.5 package for version 1.5.21-1 has been released and uploaded to our apt package repository for 'main' in stretch[1]. It has also been uploaded to our PPA[2], for 'artful' (v17.10) as well as 'xenial (v16.04 LTS) and 'bionic (v18.04 LTS). (The Debian source packages are available as well.) (Note also that this is likely the last time that a build for 'artful' will be done as it hits End of Life next month.) The packages at both our apt package repository and our PPA: ledgersmb-1.5 ledgersmb-1.5-apache ledgersmb-1.5-lighttpd ledgersmb-1.5-nginx ledgersmb-1.5-varnish Only the main 'ledgersmb-1.5' package is required; the others are related to which web proxy you might want to use and you only need one of them. -- Robert James Clay rjclay(a)gmail.com, jame(a)rocasa.us GPG ID: 2448 3AE0 874D 8696 6DCD ECF4 198C AB6F 43B7 EA9A. [1] https://apt.ledgersmb.org/ [2] https://launchpad.net/~ledgersmb/+archive/ubuntu/main/+packages -- Robert J. Clay rjclay(a)gmail.com

1 0