Hi!

I've just uploaded Kolab Server 2.1 release candidate 2, which fixes
more than 20 problems found in RC 1 and contains updated translations.

Some security issues were fixed in clamav, spamassassin and file.

Documentation and OpenPKG source packages will be available in the
directory server/beta/kolab-server-2.1-rc-2/ of the mirrors listed
on http://kolab.org/mirrors.html soon. Included is a gpg signed
MD5SUMS file to verify if your download is correct:

  $ gpg --verify MD5SUMS
  $ md5sum -c MD5SUMS

We had to remove the old binary packages for previous releases and
snapshots due to licensing issues between gdbm and php. New binaries
for the Debian GNU/Linux (sarge/oldstable) on x86 platforms can be
found in the ix86-debian3.1 directory next to the sources.

Please look at 1st.README and release-notes.txt for more information
about this release. The changes since server 2.1 rc 1 are listed
below for your convenience.

UPGRADING.20-21 contains instructions for upgrading from Kolab
server 2.0 to 2.1, with new details since 2.1rc1.
Please report failed and successful upgrades to the mailing list.

Regards,
Thomas Arendsen Hein


Changes since 2.1 rc 1:

    - apache-1.3.33-2.5.6_kolab2

	kolab/issue1607 (need to replace gdbm for pfbcache, because of license clash gdbm vs php)

    - clamav-0.90.2-20070413_kolab

	New upstream version, fixes various security issues.

    - file-4.15-2.5.0_kolab2

	Fix for security issue described in CVE-2007-1536:
	buffer overflow, remotely exploitable due to the usage of file in amavisd-new

    - fsl-1.7.0-20070303

	New upstream version.

	kolab/issue1172 (Cyrus Imapd dies when logfile exceeds 2 GiB)

    - php-4.4.0-2.5.2_kolab2

	kolab/issue1607 (need to replace gdbm for pfbcache, because of license clash gdbm vs php)

    - spamassassin-3.1.0-2.5.1_kolab

	Fix for security issue described in CVE-2007-0451:
	possible DoS due to incredibly long URIs found in the message content

	Disabled external DNS and URI blacklists, because some of these
	services require payment if used for many mailboxes.

	Ignore headers inserted on the receiving side for bayes filtering.

    - perl-kolab-5.8.7-20070420

	Added debug option for verbose logging to stderr.

    - kolabd-2.1.0-20070420

	Fix the path to the freebusy directory for non-OpenPKG installations.

	Fix usage of tar and modification of rc.conf during slave setup for
	non-OpenPKG installations.

	Don't pass notifications and quarantined mails through amavisd-new.

	Updated configuration templates for ClamAV 0.90

	Updated openldap monitor configuration.

	Updated cyrus imapd configuration to use cyr_expire.

	kolab/issue954 (kolab server rejects mails that should be marked untrusted)
	kolab/issue1607 (need to replace gdbm for pfbcache, because of license clash gdbm vs php)
	kolab/issue1609 ("kolab --help" tries to execute *all* commands)
	kolab/issue1638 (kolabconf generates broken resmgr.conf)
	kolab/issue1680 (/kolab/bin/kolab fix)

    - kolab-horde-fbview-2.1.0-20070420

	Updated version number, no other changes since 2.1rc1

    - kolab-resource-handlers-2.1.0-20070420

	Improved logging for opening pfbcache.db

	kolab/issue954 (kolab server rejects mails that should be marked untrusted)
	kolab/issue1607 (need to replace gdbm for pfbcache, because of license clash gdbm vs php)
	kolab/issue1659 (Freebusy assumes that all day events last exactly one day)

    - kolab-webadmin-2.1.0-20070420

	Updated Dutch and German translations.

	kolab/issue1457 (updated French translation)
	kolab/issue1612 (modify user ignores account type)
	kolab/issue1614 (ldap_add() - Constraint violation on change user account type)
	kolab/issue1630 (Domain maintainer can see distribution lists from other domains)
	kolab/issue1652 (Import users from ldif and LDAP Constraint violation)
	kolab/issue1654 (New LDAP overlay prevents modification of distribution lists)
	kolab/issue1663 (It is possible to create domain maintainers without domains)
	kolab/issue1670 (Renaming a domain maintainer twice within the same form fails)

-- 
thomas@intevation.de - http://intevation.de/~thomas/ - OpenPGP key: 0x5816791A
Intevation GmbH, Osnabrück - Registereintrag: Amtsgericht Osnabrück, HR B 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner