i-MSCP 1.1.15 released

  • Dear community ;


    We are pleased to announce the immediate availability of i-MSCP version 1.1.15 which is a maintenance release.
    This new release addresses the following issues:


    CONFIGS

    • Added: cram-md5 authentication mechanism (Dovecot)
    • Added: PLUGINS_DIR configuration parameter in imscp.conf file
    • Changed: Lowered log level for TLS (Postfix)
    • Fixed: Apache user (www-data) must not be able to access to the entire file system (security)
    • Fixed: Symlinks must be followed by Apache only if the owner match with the target owner (security)
    • Fixed: SSLv2 and SSLv3 must be disabled to prevent POODLE attacks ( Dovecot )
    • Fixed: Virtual mail directory must not be hardcoded in dovecot configuration file

    ENGINE

    • Added: Support for alternative cron files ( Servers::cron::cron )
    • Changed: Ignore errors regarding the move of home directory ( Modules::User )
    • Fixed: main::run: Argument "yes" isn't numeric in addition (+) at /var/www/imscp/engine/imscp-sw-mngr line 111
    • Fixed: Wrong IP added in DNS zone files when the BASE_SERVER_IP and BASE_SERVER_PUBLIC_IP parameters are referring to the same IP (private IP)

    GUI

    • Added: l10n_addTranslations() core function to allow plugins to add their translations
    • Added: New parameter in the translate_dmn_status() core function which allow to disable escaping
    • Added: Support for plural translations
    • Changed: Translation is now processed using Zend_Translate (which is thread-safe) and Zend_Cache
    • Fixed: Depending on event manager in use, some listeners will never be triggered (Events aggregator)
    • Fixed: Literal percent sign must be escaped with another percent sign in translation strings
    • Fixed: pTemplate events must be triggered in main application context
    • Fixed: SQL user hosts must be separated from SQL users to avoid any customer confusion
    • Fixed: Security issue - Input data for software instances are not validated correctly (Software Installer)
    • Fixed: Unable to activate domain alias (Undefined $reselleId variable causing SQL invalid parameter number error)
    • Fixed: Wrong regexps (admin/admin_log.php)
    • Removed: iMSCP autoloader classes (usage of Zend loader in place)

    INSTALLER

    • Fixed: Error about unknown IP when attempting to add new IP
    • Fixed: lo must not be used as default device when adding new IP (installer)
    • Fixed: Unable to upgrade to 1.1.14 (packages file is corrupted - Ubuntu Precise)

    PLUGINS

    • Fixed: Configuration change not processed when a plugin is being updated
    • Fixed: Errors not catched on change when the __need_change__ flag is set
    • Fixed: Plugins must be translatable using the tr() core translation function
    • Updated: Plugin API to version 0.2.12

    VENDOR

    • Removed: php-gettext library
    • Updated: Zend Framework components to version 1.12.9

    TICKETS

    • Fixed #1143: Bug - Domain deactivation - Hard/Soft mail accounts suspension
    • Fixed #1151: Bug - Undefined variable $resellerId in reseller/alias.php


    Furthermore, all languages files were synchronized with the last available versions on Transifex.
    We would like to remind you that any bugs found should be reported on our issues tracker.


    Download
    https://github.com/i-MSCP/imscp/releases/latest


    Thank you for choosing i-MSCP.

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206

  • Re;


    Just for the record


    Don't forget to disable the DEBUG mode from the /etc/imscp/imscp.conf file for production because otherwise, the translation files will be reloaded (parsed) on each request and this is very slow. Indeed, since version 1.1.15 i-MSCP (FrontEnd) is using Zend_Translate and Zend_Cache but when the DEBUG mode is enabled, translations files are not cached.


    You're warned ;)

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206

  • Re ;


    For those which are using Dovecot


    The new parameter which has been added to prevent POODLE attack is not compatible with dovecot versions older than 2.1. If you are using dovecot 2.0.x, you must remove this parameter from the /etc/dovecot/dovecot.conf file and restart dovecot.


    This doesn't affect dovecot 1.x.


    Refs:

    badge.php?id=1239063037&bid=2518&key=1747635596&format=png&z=547451206