Open source upgrade day. (adrian's home)

Spent the better part of the day today upgrading production software.

I finally got around to upgrading Geeklog to 1.3.5sr2 which closes a few security holes. Waited so long that I missed the boat on 1.3.5sr1 which also fixed some holes. Functionally, there's not much difference.

Upgraded Gallery to 1.3, which adds some new features, including viewing all comments, slideshows, and a few other goodies.

Horde, IMP and Turba all got upgraded as part of the move to a release version of webmail, rather than RC3. There's not much difference there either, except that the configuration files all changed, just to make life difficult.

BIND was updated to close a denial-of-service hole, and I also added proper DNS firewalling rules, and configured BIND to use both processors, rather than one. Soon I'm going to have to bite the bullet and set djbdns up, like I've got here. I'm getting sick of upgrading software to fix security holes. :)

Upgraded mod_ssl to 2.8.10 to fix the off-by-one error that was reported a while back.

During the process, I also managed to reorganize and cleanup my web tree so that it's much more manageable now.

Open source upgrade day.

TrackBack

Post a comment

Search

About