- users - lists.freelock.com

A newbie question
by Mufit Eribol 06 Apr '24

06 Apr '24

I have been using SL for years. Now, installed ledgersmb through docker and testing, trying to understand. I am stumped at the very beginning. Must be very easy, but can't see. How can I delete a freshly created contact (customer)? No any transaction associated with this customer. Sorry, as this is pretty dumb question. Thanks

2 1

Can't connect to port 5762 (starman) to ledgersmb
by fherman＠inferential.com 01 Apr '24

01 Apr '24

I am a new user. This installation is on a local machine running linuxmint. I installed the latest ledgersmb image for docker via a pull. I have been able to get the PostgreSQL and the ledgersmb containers running. The container name for ledgersmb is myledger. The ps command shows both PostgreSQL and starman running. When I try to browse to http://localhost:5762/setup.pl, I get connection refused. I also tried to telnet to the port but got refused error. When I look for listening ports, port 5762 doesn't show. Apparently I am missing something in my installation. TIA

1 1

LedgerSMB 1.11.10 released
by Erik Huelsmann 28 Mar '24

28 Mar '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.11.10 * Fix upgrades from older Pg versions with the 'cash_impact' view (#7987) * Fix missing locale parameter creating GL Search report (#7997) * Fix setup.pl CSRF regressions (#8007, #8000) * Fix date filters on Cash > Receipt/Payment (#8015) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.11.10/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.11.10 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.11.10 Docker images have been published for ARMv7 (32-bit), ARM64 (also known as ARMv8, e.g. RPi 3+) and AMD64. These can be pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.11.10 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.11.10 These are the sha256 checksums of the uploaded files: 5c08194e794a81c81cae4f747860a09457e14331dcd1e48dc8bab991a589ab4d ledgersmb-1.11.10.tar.gz 47578b10d626b81f0dbbdf9c2cc34d2ed839586959a5c33fd8062a05e93e24cf ledgersmb-1.11.10.tar.gz.asc

1 0

LedgerSMB 1.11.7 released
by Erik Huelsmann 28 Mar '24

28 Mar '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.11.7 * Fix creating an invoice from an order (#7855) * Retain partsgroup selection on Update in parts screen (#7848) * Fix missing columns on trial balance 'Ending' report type (#7870) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.11.7/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.11.7 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.11.7 Docker images have been published for ARMv7 (32-bit, e.g. Raspberry Pi (RPi) 3 and 400), ARM64 (e.g. RPi 4) and AMD64. These can be pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.11.7 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.11.7 These are the sha256 checksums of the uploaded files: d8086fff0340440ff022f455af8ee9486590a6c0b3db2262c4752bd1cc0384c0 ledgersmb-1.11.7.tar.gz df75cb6e6eb80843bf7c933581e72f28db86343817de743be62b4651b4c6227e ledgersmb-1.11.7.tar.gz.asc

1 0

LedgerSMB 1.11.9 released
by Erik Huelsmann 28 Mar '24

28 Mar '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the fix for CVE-2024-23831, a CSRF attack on setup.pl. Changelog for 1.11.9 * Add missing batch and entity sequences to the Defaults screen (#7965) * Stop warning during startup without configuration file (#7928) * CVE-2024-23831: CSRF attack on 'setup.pl' For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.11.9/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.11.9 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.11.9 Docker images have been published for ARMv7 (32-bit), ARM64 (also known as ARMv8, e.g. RPi 3+) and AMD64. These can be pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.11.9 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.11.9 These are the sha256 checksums of the uploaded files: 5c4ae06702dadd0de3f4e26727fe10ed2086cb932029714a0fdae49553025cab ledgersmb-1.11.9.tar.gz 182f21f0a2f720f2d17e812619b4109f929e3a1d5d88e4b2e459a053472c6237 ledgersmb-1.11.9.tar.gz.asc

1 0

LedgerSMB 1.6.33 released
by Erik Huelsmann 24 Mar '24

24 Mar '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.6.33 * Follow-up (fix) to upgrades blocked by files attached to transactions (Erik H) Erik H is Erik Huelsmann For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.6.33/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.6.33 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.6.33 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.6.33 These are the sha256 checksums of the uploaded files: ece4c7f63e725eea5dc2cbebbef0622b8426e24e1742daf98b1bc95fa292f6a9 ledgersmb-1.6.33.tar.gz 16d22e4c2a06a63d90ee5aca2a4e132f8e94b2eef252608da52ae0da7401c69e ledgersmb-1.6.33.tar.gz.asc

1 0

LedgerSMB 1.11.11 released
by Erik Huelsmann 15 Mar '24

15 Mar '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.11.11 * Fix 'not set up for hierarchy reporting' on Entity Account screen (#8065) * Fix date format presentation misalignment with placeholder (#7983) * Fix order of comparison periods in PNL and B/S (#7800) * Fix handling of discounts in invoice API (#8030) * Restore Hebrew 'nplurals' setting back to 4 * Enable scroll bars on setup(upgrade) data fix screens (#8071) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.11.11/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.11.11 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.11.11 Docker images have been published for ARMv7 (32-bit), ARM64 (also known as ARMv8, e.g. RPi 3+) and AMD64. These can be pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.11.11 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.11.11 These are the sha256 checksums of the uploaded files: 90d27fcff2815476a5c1c2e890f9f71c902c44d7279d7f30eee80ce1bfc4c47b ledgersmb-1.11.11.tar.gz 92f4a019079c97e0b679e0147cb9bf07ba5e776535a8dff262a32811e76048db ledgersmb-1.11.11.tar.gz.asc

1 0

LedgerSMB 1.10.33 released
by Erik Huelsmann 15 Mar '24

15 Mar '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.10.33 * Enable scroll bars on setup(upgrade) data fix screens (#8071) * Fix 'not set up for hierarchy reporting' on Entity Account screen (#8056) * Fix order of period comparisons in PNL and B/S (#7800) * Fix recurring transactions after setup.pl CSRF mitigation (#8042) * Revert Hebrew 'nplurals' back to 4 For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.10.33/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.10.33 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.10.33 Docker images have been published for ARMv7 (32-bit), ARM64 (also known as ARMv8, e.g. RPi 3+) and AMD64. These can be pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.10.33 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.10.33 These are the sha256 checksums of the uploaded files: 20ab27d7f8e55c60cd956cb2366428f74e7c7a3cd2d7fd96b2eefe3f72fe11b2 ledgersmb-1.10.33.tar.gz c75769b050619102ad965233259ba0d525222736a35be55331e74297a32837ed ledgersmb-1.10.33.tar.gz.asc

1 0

LedgerSMB 1.10.32 released
by Erik Huelsmann 15 Feb '24

15 Feb '24

The LedgerSMB development team is happy to announce yet another new version of its open source ERP and accounting application. This release contains the following fixes and improvements: Changelog for 1.10.32 * Fix upgrades from older Pg versions with the 'cash_impact' view (#7987) * Fix missing locale parameter creating GL Search report (#7997) * Fix setup.pl CSRF regressions (#8007, #8000) * Fix date filters on Cash > Receipt/Payment (#8015) For installation instructions and system requirements, see https://github.com/ledgersmb/LedgerSMB/blob/1.10.32/README.md The release can be downloaded from our download site at https://download.ledgersmb.org/f/Releases/1.10.32 The release can be downloaded from GitHub at https://github.com/ledgersmb/LedgerSMB/releases/tag/1.10.32 Docker images have been published for ARMv7 (32-bit), ARM64 (also known as ARMv8, e.g. RPi 3+) and AMD64. These can be pulled from the GitHub Container Registry $ docker pull ghcr.io/ledgersmb/ledgersmb:1.10.32 Or pulled from Docker Hub using the command $ docker pull ledgersmb/ledgersmb:1.10.32 These are the sha256 checksums of the uploaded files: 3695a892e6c9c4257106a03ac287fdf9af94d8d55b6036bf7acf1aa340a1cd18 ledgersmb-1.10.32.tar.gz 45cee80848ff757e885208940eb996bbaa91aa7ab6d05cd5e8cef6491d19a733 ledgersmb-1.10.32.tar.gz.asc

1 0

Fwd: [CRITICAL ALERT: ACT NOW] Critical vulnerabilities in GitLab Products
by Howard Lowndes 12 Feb '24

12 Feb '24

Is this security alert of any interest. ---------- Forwarded message --------- From: ACSC Alerts <alerts.acsc(a)contact.cyber.gov.au> Date: Mon, 15 Jan 2024, 18:16 Subject: [CRITICAL ALERT: ACT NOW] Critical vulnerabilities in GitLab Products To: <howard.lowndes(a)gmail.com> [image: High Alert - Act Quickly] 15 January 2024 Dear ASD's ACSC Alert Service subscriber This Alert is relevant to Australians who use GitLab on any platform. These vulnerabilities impact the versions listed below: - 16.1 to 16.1.5 - 16.2 to 16.2.8 - 16.3 to 16.3.6 - 16.4 to 16.4.4 - 16.5 to 16.5.5 - 16.6 to 16.6.3 - 16.7 to 16.7.1 This alert is intended to be understood by all users. Customers are encouraged to patch to the latest version using the GitLab upgrade path and to enforce multi-factor authentication for all GitLab accounts*.* *Background / What’s happened?* - GitLab has posted a security advisory and patch to address several vulnerabilities, the most severe of which is CVE-2023-7028. - CVE-2023-7028 allows an account take over via the ability to have password reset emails delivered to an unauthenticated email address. - Multi-factor authentication should be enabled immediately for all GitLabs users, and self-managed instances should be upgraded to the latest version as soon as possible. - Users with multi-factor authentication already enabled may be impacted by a password reset, however an attacker would not be able to take over their account using this vulnerability. - GitLab is not aware of any active exploitation of this vulnerability which was discovered via their Bug Bounty program. *Affected versions / applications:* - CVE-2023-7028: This vulnerability impacts all versions of GitLab CC/EE from 16.1 to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 - The security release also addresses CVE-2023-5356, CVE-2023-4812, CVE2023-6955 and CVE-2023-2030. *Mitigation / How do I stay secure?* - Multi-factor authentication should be enabled immediately for all GitLabs users. - Self-managed instances should be upgraded to the latest version as soon as possible. GitLab advises managed instances have now all had the patch applied. - Further information and details to investigate potential compromise can be found in the GitLab Security release linked below: https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitl… *Assistance / Where can I go for help?* Organisations or individuals that have been impacted or require assistance can contact us via 1300 CYBER1 (1300 292 371) <%201300%20292%20371>. *Read this alert on the website: https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/cr… <https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/cr…> <https://www.cyber.gov.au/about-us/view-all-content/alerts-and-advisories/ci…>* *Are you a victim of cybercrime? Visit ReportCyber <https://www.cyber.gov.au/report-and-recover/report> to take your next steps.* *We use hyperlinks to give you more information. If you don't want to click hyperlinks, you can search for the information on ASD's ACSC Website.* *CONTACT US* Web: https://www.cyber.gov.au <https://www.cyber.gov.au/about-us/about-acsc/contact-us> X (Twitter): https://twitter.com/CyberGovAU Facebook: https://www.facebook.com/cybergovau LinkedIn: https://www.linkedin.com/company/australian-cyber-security-centre [image: Facebook] <https://www.facebook.com/cybergovau> [image: Twitter] <https://twitter.com/cybergovau> [image: YouTube] <https://www.youtube.com/channel/UChO_bPg4QOWxSOzH4OYw3Tg/featured> [image: LinkedIn] <https://www.linkedin.com/company/australian-cyber-security-centre> Was this alert helpful? * Yes <https://www.cyber.gov.au/asf?alert_subject=Critical%20vulnerabilities%20in%…>* | *No <https://www.cyber.gov.au/asf?alert_subject=Critical%20vulnerabilities%20in%…>* You are receiving this message at the address howard.lowndes(a)gmail.com If you no longer wish to receive this information, you can unsubscribe <https://p-2581519.secure.force.com/dc/t/gobal-email-opt-out/cgndc6moogvrzyn…>

2 2