Security remark, opsi on UCS member, new packages for 4.0.7

Benutzeravatar
d.oertel
Beiträge: 3136
Registriert: 04 Jun 2008, 14:27

Security remark, opsi on UCS member, new packages for 4.0.7

Beitragvon d.oertel » 06 Jun 2017, 18:05

Dear opsi users,

Security remark:
==============

In the last few weeks a serious security problem has been found in Samba.
All of the opsi supported distributions have now the Appropriate security updates for your Samba packages.
We strongly suggest that you make sure that the Samba packages on your Opsi servers are up to date.

In the case that you need support (and have a support contract)
You can also contact the support hotline.

Further information:
https://www.tecmint.com/fix-sambacry-vulnerability-cve-2017-7494-in-linux/


opsi on UCS 4.1 Member as stable:
=============================

With this release we announce the official support for the
Operation of the opsi server on the UCS 4.1 Member role as stable.

An opsi installation on a UCS member server via UCS appstore is not supported (!).

It is possible to install on a UCS member according to the getting-started manual.
Please refer to the opsi-getting-started chapter:
"Notes on opsi installation on a UCS server in the Member role"
http://download.uib.de/opsi_stable/doc/html/opsi-getting-started/opsi-getting-started.html#opsi-getting-started-installation-base-ucs-member

The automated installation on a UCS member with the opsi-linux-client-agent is possible
over the Linux opsi product: l-opsi-server.
Please refer to the opsi-manual chapter: "l-opsi-server"
http://download.uib.de/opsi_stable/doc/html/opsi-manual/opsi-manual.html#opsi-manual-linux-localboot-l-opsi-server


For this release, updated opsi manuals where made as PDF, ePub and HTML under the following links:

https://download.uib.de/opsi4.0/doc/
or
http://www.opsi.org/en/documentation-info

---------------------------------------

New packages for opsi 4.0.7:
=========================

As stable we publish:
====================

===== Server packages =====

* python-opsi (4.0.7.40-1)
* opsi-linux-bootimage (20170508-1)

===== Localboot packages =====

* config-win10 (4.0.7-6)
* opsi-client-agent (4.0.7.15-1)

===== Netboot packages =====

N/A

===== opsi-linux Netboot-Pakete =====

N/A

===== opsi-linux Localboot packages =====

* l-hwaudit 4.0.7-3
* l-system-update 4.0.7.1-4
* l-opsi-server 4.0.7.1-10


===== opsi-local-image packages =====

* opsi-local-image-restore (4.0.7.1-5)


The following packages are publish as Testing:
==============================================

===== Server packages =====

* opsi-depotserver 4.0.7.3-1
* opsipxeconfd 4.0.7.6-1
* python-opsi 4.0.7.41-1

===== Localboot packages =====

* opsi-configed 4.0.7.6.2-1

===== Netboot packages =====

N/A

===== opsi-linux Netboot packages =====

N/A

===== opsi-linux Localboot packages =====

N/A

===== opsi-local-image packages =====

N/A

-------------------------------------------------
with kindly regards

detlef oertel

-------------------------------------------------
Changelogs:
==========
------------------------------

opsi-depotserver (4.0.7.3-1) experimental; urgency=medium

* depends on opsi-tftpd

-- Mathias Radtke <m.radtke@uib.de> Tue, 09 May 2017 16:17:27 +0200

opsi-depotserver (4.0.7.2-1) testing; urgency=medium

* opsi-setup: it is now possible to use --unattended with
--register-depot.
Please refer to the manual for further details.

-- Niko Wenselowski <n.wenselowski@uib.de> Thu, 04 May 2017 10:31:54 +0200

------------------------------

opsipxeconfd (4.0.7.6-1) experimental; urgency=medium
* depends: opsi-tftpd
-- Mathias Radtke <m.radtke@uib.de> Tue, 09 May 2017 16:21:21 +0200

------------------------------

python-opsi (4.0.7.41-1) stable; urgency=medium

* 30_kiosk.conf: Improved speed of getKioskProductInfosForClient.

-- Niko Wenselowski <n.wenselowski@uib.de> Wed, 24 May 2017 16:02:20 +0200

python-opsi (4.0.7.40-1) stable; urgency=medium

* 30_kiosk.conf: getKioskProductInfosForClient does only return a product
once even if they are in multiple groups.

-- Niko Wenselowski <n.wenselowski@uib.de> Wed, 03 May 2017 14:18:09 +0200

----------------------------------

l-hwaudit 4.0.7-5; stable; irgency=low

* added LEAP 42.2 support

-- Mathias Radtke <m.radtke@uib.de> Wed, 04 Apr 2017 10:42:00 +0200

l-hwaudit 4.0.7-4; stable; urgency=low

* debian: using echo method instead of add-apt-repository

-- Mathias Radtke <m.ratdke@uib.de> Tue,07 Mar 2017 10:16:00 +0100

l-hwaudit 4.0.7-3; stable; urgency=low

* added univention ucs support

-- Mathias Radtke <m.ratdke@uib.de> Tue, 27 Sep 2016 10:00:00 +0200

l-hwaudit 4.0.7-2; stable; urgency=low

* debian based systems work
* added rpm support
* added sles/suse support - installs fine on all supported distributions

-- Mathias Radtke <m.ratdke@uib.de> Fri, 23 Sep 2016 10:00:00 +0200

l-hwaudit 4.0.7-1; experimental; urgency=low

* using static binary instead of installing official version

-- Mathias Radtke <m.ratdke@uib.de> Thu, 14 June 2016 14:31:00 +0200

----------------------------------

opsi-local-image-restore (4.0.7.1-5) experimental; urgency=low

* opsisetuplib.py: added additional 15 seconds of sleep prior mounting restore partition

-- Mathias Radtke <m.radtke@uib.de> Tue Mar 14 10:47:00 2017 +0100

opsi-local-image-restore (4.0.7.1-4) stable; urgency=low

* opsisetuplib.py: added additional 10 seconds of sleep when mounting partition

-- Mathias Radtke <m.radtke@uib.de> Fri Jan 27 15:00:00 2017 +0100

opsi-local-image-restore (4.0.7.1-3) stable; urgency=low

* opsisetuplib.py: syncing disks before use
* opsisetuplib.py: added eMMC compatability & EFI partitioning fix when not running on sda device

-- Mathias Radtke <m.radtke@uib.de> Mon Jan 23 10:31:36 2017 +0200

----------------------------------

config-win10 (4.0.7-6); stable; urgency=low

* fixed various bugs in the script flow
* removed ProfileAction section
* removed force_login_script property -> actually did nothing
* removed boot_to_desktop property -> win81 legacy property

-- Mathias Radtke <m.radtke@uib.de> Tue, 09 May 2017 14:00:00 +0200

config-win10 (4.0.7-5); stable; urgency=low

* deactivate adobe flash autorun
* disable location and sensors
* disable online search
* disable share of handwriting telemetry
* disable settings sync

-- Mathias Radtke <m.radtke@uib.de> Wed, 22 Feb 2017 10:42:00 +0100

----------------------------------

opsi-linux-bootimage (20170508-1) testing; urgency=medium

* Serial driver 8250 built-in
* enabled serial-getty@ttyS0 on boot

-- Mathias Radtke <m.radtke@uib.de> Mon, 08 May 2017 14:38:22 +0200

opsi-linux-bootimage (20170502-1) experimental; urgency=medium

* fixed false positive when using nodhcp in cmdline

-- Mathias Radtke <m.radtke@uib.de> Tue, 02 May 2017 14:24:25 +0200

opsi-linux-bootimage (20170405-1) stable; urgency=medium

* removed user user
* CD ISO has sshd disabled by default
* kernel 4.10.8

-- Mathias Radtke <m.radtke@uib.de> Wed, 05 Apr 2017 14:27:19 +0200

opsi-linux-bootimage (20170310-1) experimental; urgency=medium

* removed module x2apic

-- Mathias Radtke <m.radtke@uib.de> Fri, 10 Mar 2017 09:50:52 +0100

opsi-linux-bootimage (20170307-1) experimental; urgency=medium

* kernel 4.10.1

-- Mathias Radtke <@m.radtke@uib.de> Tue, 07 Mar 2017 12:16:57 +010

----------------------------------

opsi-client-agent (4.0.7.15-1) stable; urgency=low

* updated opsi-deploy-client-agent to 4.0.7.4.
* sub_restore_productOnClient: also backup and restore once action requests

-- Niko Wenselowski <n.wenselowski@uib.de> Mon, 3 Apr 2017 13:45:49 +0200

opsi-client-agent (4.0.7.14-1) stable; urgency=low

* opsiclientkiosk ... (at work)
* new properties: kiosk_startmenue_entry, kiosk_desktop_icon uib#2016112110000071
* kiosk-client will use custom icon file if existing ("$INST_BaseDir$\custom\opsiclientkioskskin\kiosk.ico")
* remove experimental opsiclientd.zip fix

-- Detlef Oertel <d.oertel@uib.de> Thu, 23 Feb 2017:15:00:00 +0200

opsi-client-agent (4.0.7.13-1) stable; urgency=low

* Handle configstate: clientconfig.capture.do_not_change_setup_requests:
* means nothing if clientconfig.capture.switch_installed_products_to_setup=false
* all setup actionrequests will remain, even if they part of the restored meta data

* opsiclientkiosk 4.0.7.6: fix (thread) for progressbar on button 'store actions' ; fixes #2586

-- Detlef Oertel <d.oertel@uib.de> Mon, 20 Feb 2017:15:00:00 +0200

----------------------------------

l-system-update 4.0.7.1-4 stable urgency=low

* univention-upgrade --noninteractive --ignoreterm --updateto=$version_version-99
now stays on Release and does no Release upgrade
https://help.univention.com/t/univentio ... lease/5877

-- d.oertel <d.oertel@uib.de> Wed, 02 June 2017 15:00:00 + 0100

l-system-update 4.0.7.1-3 stable urgency=low

* use: EXITCODETEMP=$?; if [ $EXITCODETEMP -ne 0 ]; then EXITCODE=$EXITCODETEMP; fi

-- d.oertel <d.oertel@uib.de> Mon, 05 Dec 2016 15:00:00 + 0100

l-system-update 4.0.7.1-2 stable urgency=low

* use: if [ $? -ne 0 ]; then EXITCODE=$?; fi waitForPackageLock
* new property apt_get_autoremove to remove old auto installed kernels from debian familiy systems (default=false)

-- d.oertel <d.oertel@uib.de> Tue, 27 Sep 2016 15:00:00 + 0100

----------------------------------

opsi-configed (4.0.7.6.2-1) TESTING; urgency=medium

* discriminate search for membership in a group including memberships in its subgroup or not

-- roeder <roeder@uib.de> Wed, 31 May 2017 13:46:02 +0100

opsi-configed (4.0.7.6.1-1) TESTING; urgency=medium

* new context menu options for setting client host properties/ client product property values to server defaults

-- roeder <roeder@uib.de> Wed, 24 May 2017 13:46:02 +0100

----------------------------------

l-opsi-server 4.0.7.1-10; stable; urgency=low

* new property for ucs master password

-- Mathias Radtke <m.radtke@uib.de> Tue, 06 Jun 2017 12:32:00 +0100

l-opsi-server 4.0.7.1-9; stable; urgency=low

* Debian/Ubuntu: using opsi.list instead of sources.list

-- M.Radtke <m.radtke@uib.de> Mon, 06 Mar 2017 14:52:00 +0100

l-opsi-server 4.0.7.1-8; stable; urgency=low

* added wimtools to installed packages

-- M.Radtke <m.radtke@uib.de> Wed, 01 Mar 2017 08:26:00 +0100
opsi support - uib gmbh

For productive opsi installations we recommend support contracts.
http://www.uib.de
http://www.opsi.org

Zurück zu „News“

Wer ist online?

Mitglieder in diesem Forum: 0 Mitglieder und 1 Gast