[SECURITY] Fedora 21 Update: zarafa-7.1.11-1.fc21

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2014-12926
2014-10-16 16:50:09
--------------------------------------------------------------------------------

Name        : zarafa
Product     : Fedora 21
Version     : 7.1.11
Release     : 1.fc21
URL         : http://www.zarafa.com/
Summary     : Open Source Edition of the Zarafa Collaboration Platform
Description :
The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The
Open Source Collaboration provides an integration with your existing Linux
mail server, native mobile phone support by ActiveSync compatibility and a
webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an
IMAP and a POP3 gateway as well as an iCal/CalDAV gateway, the Zarafa Open
Source Collaboration can combine the usability with the stability and the
flexibility of a Linux server.

The proven Zarafa groupware solution is using MAPI objects, provides a MAPI
client library as well as programming interfaces for C++, PHP and Python.
The other Zarafa related packages need to be installed to gain all features
and benefits of the Zarafa Collaboration Platform (ZCP).

--------------------------------------------------------------------------------
Update Information:

Zarafa Collaboration Platform 7.1.11 final R1 [46050]
=====================================================


General
-------

This R1 release of the 7.1.11 final release addresses the WebAccess install problem on RPM-based systems and resolves the dependencies problems under Ubuntu 14.04.


Downstream changes
------------------

  * Removed bundled PHP PEAR files/libraries
  * Added patch to allow mitigation of SSLv3/POODLE vulnerability
  * Added patch to implement ECDHE support (depending on OpenSSL)
  * Added patch to allow plaintext authentication from 127.0.0.1


Backend
-------

  * ZCP-12472: zarafa-search crashes on ubuntu 14.0.4 LTS
  * ZCP-12405: zarafa-search do not start on Ubuntu 14.04
  * ZCP-12581: config files are being saved as config.cfg.dpkg-new on ubuntu 14.04
  * ZCP-12570: install.sh for Ubuntu 14.04
  * ZCP-12582: installing webaccess on rhel based systems result in scriptlet failed, exit status 1



Zarafa Collaboration Platform 7.1.11 final [45875]
==================================================


General
-------

This release brings a few new features while maintaining stability. With this release we address a few segfaults in zarafa-search to match this final release.


Backend
-------

  * ZCP-11809: zarafa-gateway is unable to create RTF text stream
  * ZCP-11862: zarafa-backup zarafa-restore breaks textfiles
  * ZCP-11934: Enhance MariaDB support by modifying sql_mode
  * ZCP-12012: zarafa-server segfaults when running zarafa-stats --system
  * ZCP-12097: Disposition-Notification-To double colons in middle of line. dagent crashes
  * ZCP-12110: Segfault zarafa-server 7.1.8 R1
  * ZCP-12127: Support for Apache 2.4
  * ZCP-12134: Randomly lost e-mail attachments in e-mails
  * ZCP-12266: [BIG5] Customer requires an option to set the default character encoding of incoming mail when no encoding is set.
  * ZCP-12269: public folder shows MAPI_E_STORE_FULL when creating new element
  * ZCP-12272: WebAccess: .htaccess is not marked as a configuration file in rpm
  * ZCP-12436: jpegPhoto included twice in ldap.propmap.cfg
  * ZCP-12500: Zarafa stores rfc enforced linebreaks as actual line breaks
  * ZCP-12511: zarafa-gateway is unable to create RTF text stream
  * ZCP-12537: ical issue when password contains a colon
  * ZCP-12547: As a hoster I need a way to reduce the performance impact on LDAP caused by zarafa-licensed.
  * ZCP-12563: Create configuration setting to indicate if folder owners automatically get full access rights or not
  * ZCP-12548: zarafa-search segfault
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update zarafa' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------