- devel - lists.freelock.com

LedgerSMB 1.10.38 released End-of-Life 1.10 release branch
by Erik Huelsmann 13 Oct '24

13 Oct '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.10.38 * Fix PDF generation error for the outstanding AR/AP summary report (#8377) * Fix hostname with hyphen breaks ledgersmb-admin database URI (#8415) * Allow ledgersmb-admin to use pre-created databases, e.g. DigitalOcean (#8422) Please note that the 1.10 series is End-of-Life (EOL) as of October 8 2024, meaning that this is the last release in the series. For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.10.38/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.10.38 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.10.38 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.10.38 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.10.38 These are the sha256 checksums of the uploaded files: d8c679917a28ab8d052da6619f00cd20e7ede163ac59fbbfcaf5c35f52dfd843 ledgersmb-1.10.38.tar.gz fda36ee99cc99d6275e3b78b498f6e8b0547dfb40052741738bf3e74e75bd6ee ledgersmb-1.10.38.tar.gz.asc

1 0

Bug#1082804: ledgersmb: FTBFS (test failure) if building as root
by наб 27 Sep '24

27 Sep '24

Source: ledgersmb Version: 1.6.33+ds-2.2 Severity: serious Tags: ftbfs Justification: fails to build from source Dear Maintainer, During a ratt run for src:ossp-uuid I got 2024/09/26 17:23:23 Building package 71 of 123: ledgersmb 2024/09/26 17:26:55 building ledgersmb failed: exit status 2 Full log attached, but the interesting bit is make[1]: Leaving directory '/<<PKGBUILDDIR>>' dh_auto_test make -j24 test make[1]: Entering directory '/<<PKGBUILDDIR>>' make[1]: git: No such file or directory /bin/sh: 1: lsb_release: not found prove t/ # Failed test 'use LedgerSMB::PSGI;' # at t/01-load.t line 231. # Tried to use 'LedgerSMB::PSGI'. # Error: Running a Web Service as root is a security problem. # If you are starting LedgerSMB as a system service, # please make sure that you drop privileges as per README.md # and the example files in conf/. # The method of passing a --user argument to starman cannot # be used as starman drops privileges too late, starting us as root. at /<<PKGBUILDDIR>>/lib/LedgerSMB/PSGI.pm line 42. # Compilation failed in require at t/01-load.t line 231. # BEGIN failed--compilation aborted at t/01-load.t line 231. # Looks like you failed 1 test of 209. t/01-load.t ..................... Dubious, test returned 1 (wstat 256, 0x100) Failed 1/209 subtests (less 5 skipped subtests: 203 okay) Name "Config::IniFiles::ledgersmb.conf" used only once: possible typo at /usr/lib/x86_64-linux-gnu/perl-base/Symbol.pm line 60. t/02-number-handling.t .......... ok Per my reading of the policy, each d/rules target may be run as root? Best, -- System Information: Debian Release: 12.4 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'stable') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 6.1.0-12-amd64 (SMP w/24 CPU threads; PREEMPT) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_FIRMWARE_WORKAROUND, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled

3 3

LedgerSMB 1.11.17 released
by Erik Huelsmann 06 Sep '24

06 Sep '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.11.17 * Fix negative COGS for assemblies [*only* assemblies affected] (#8351) for more info see https://ledgersmb.org/content/cogs-assembly-fix * Fix saved orders and quotes showing as read-only [Part 2] (#8348) Important! Only users of assemblies are affected by the COGS bug fixed in this release. This fix - due to its extent - will **not** be released for 1.10, as there's only one month of community support left until end-of-life. Those using assemblies are urged to upgrade to 1.11.17 to benefit from the fix. For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.11.17/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.11.17 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.11.17 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.11.17 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.11.17 These are the sha256 checksums of the uploaded files: f0da3f804e5d32c33dbc307c3a9fed9a0a25f16716d64a569e53cd4ed8af65d9 ledgersmb-1.11.17.tar.gz 289551a802ca18cd8cd0744de80e208f3b19617883872bfe549001067e47257a ledgersmb-1.11.17.tar.gz.asc

1 0

LedgerSMB 1.11.16 released
by Erik Huelsmann 21 Aug '24

21 Aug '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.11.16 * Restore 'Save Template' on GL transations, regressed from 1.10 (#8340) * Fix saved orders and quotes showing as read-only (#8348) * Fix AR/AP Outstanding Summary report generation (#8378) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.11.16/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.11.16 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.11.16 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.11.16 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.11.16 These are the sha256 checksums of the uploaded files: 5e583ee9ef3172fcf10d316d00be50cfa7cf10e2a22abcbb7cef57c1f3beeaa9 ledgersmb-1.11.16.tar.gz 667e9abe5570800e037808e5151d993a2c3d814674e4e951a2942edbba61e7f7 ledgersmb-1.11.16.tar.gz.asc

1 0

LedgerSMB 1.11.15 released
by Erik Huelsmann 01 Aug '24

01 Aug '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.11.15 * Fix order of comparisons with over 9 columns (#8246) * Remove spurious column from PNL and B/S CSV template (#8247) * Fix values in wrong columns in balance sheet CSV output (#8247) * Fix reconciliation between B/S and AR Aging report (#8300) * Show auto-generated invoice number after posting (#8322) * Prevent some actions on voided invoices and reversed transactions (#8324) * Fix migration failure when renamed role already exists (#8325) * Fix Save and Post buttons not appearing on Update of GL entry (#8327) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.11.15/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.11.15 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.11.15 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.11.15 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.11.15 These are the sha256 checksums of the uploaded files: ce886100dbc1a4a336e6e5e818202fdc5f3ca9d78c8e4d0485e25f1a88b6d912 ledgersmb-1.11.15.tar.gz 005ba063072eaa024794fdee5b53865a1cf66e6f70bb4280ead0030d9bb49fef ledgersmb-1.11.15.tar.gz.asc

1 0

LedgerSMB 1.10.37 released
by Erik Huelsmann 01 Aug '24

01 Aug '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.10.37 * Fix reconciliation between B/S and AR Aging report (#8300) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.10.37/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.10.37 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.10.37 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.10.37 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.10.37 These are the sha256 checksums of the uploaded files: 70431ad2e1732f8d278ab7b05373ee066424aa8a7a1b7c5e92facfa6682114a9 ledgersmb-1.10.37.tar.gz bcadbf25f21ff2648680c5002d72bf5fd067f3b73dc599c1055021f862c7487b ledgersmb-1.10.37.tar.gz.asc

1 0

Bug#1062845: ledgersmb: CVE-2024-23831
by Salvatore Bonaccorso 25 Jul '24

25 Jul '24

Source: ledgersmb Version: 1.6.33+ds-2.1 Severity: important Tags: security upstream X-Debbugs-Cc: carnil(a)debian.org, Debian Security Team <team(a)security.debian.org> Control: found -1 1.6.9+ds-2+deb11u3 Hi, The following vulnerability was published for ledgersmb. CVE-2024-23831[0]: | LedgerSMB is a free web-based double-entry accounting system. When a | LedgerSMB database administrator has an active session in /setup.pl, | an attacker can trick the admin into clicking on a link which | automatically submits a request to setup.pl without the admin's | consent. This request can be used to create a new user account with | full application (/login.pl) privileges, leading to privilege | escalation. The vulnerability is patched in versions 1.10.30 and | 1.11.9. If you fix the vulnerability please also make sure to include the CVE (Common Vulnerabilities & Exposures) id in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2024-23831 https://www.cve.org/CVERecord?id=CVE-2024-23831 [1] https://github.com/ledgersmb/LedgerSMB/security/advisories/GHSA-98ff-f638-q… [2] https://github.com/ledgersmb/LedgerSMB/commit/8c2ae5be68a782d62cb9c0e17c012… Regards, Salvatore

2 1

LedgerSMB 1.9.28 released
by Erik Huelsmann 09 Jul '24

09 Jul '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.9.28 * Fix deletion of parts groups (#7363) * Align invoice/order entry between databases with and without parts (#7374) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.9.28/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.9.28 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.9.28 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.9.28 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.9.28 These are the sha256 checksums of the uploaded files: 4b2c0c53de2d80f5fc5ec3f8ee3bea61e5624684ebb1c2d55b2c2472c904a5b4 ledgersmb-1.9.28.tar.gz ccad27a8f22c25bbea0c5fdef564df325e9c202bd95af5713c4f8c14038b0f49 ledgersmb-1.9.28.tar.gz.asc

1 0

LedgerSMB 1.9.29 released
by Erik Huelsmann 09 Jul '24

09 Jul '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.9.29 * Fix regression since 1.9.27 upgrading old companies while renaming setting * Fix selection of default AR/AP accounts while importing databases (#7419) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.9.29/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.9.29 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.9.29 Or pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.9.29 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.9.29 These are the sha256 checksums of the uploaded files: feaf830ea206b8a0a20a0efab93a5c70ccf29f028bc28f7156b0484ec2f99609 ledgersmb-1.9.29.tar.gz b49c86e9a6d37f528c4a884357bd9c4954fbdd6b7c27b41ea34c34c348d67d66 ledgersmb-1.9.29.tar.gz.asc

1 0

ledgersmb 1.6.33+ds-2.2 MIGRATED to testing
by Debian testing watch 09 Jul '24

09 Jul '24

FYI: The status of the ledgersmb source package in Debian's testing distribution has changed. Previous version: 1.6.33+ds-2.1 Current version: 1.6.33+ds-2.2 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive later changes on the next day. See https://release.debian.org/testing-watch/ for more information.

1 0