Software Update: EnGarde Secure Linux 3.0.17

EnGarde Secure Linux is a Linux distribution aimed at servers that need a high level of security. It contains a number of standard applications with which various server tasks can be performed without any problems, such as serving dynamic websites, mail and performing network intrusion detection. For more information, we refer you to this page† Version 3.0.17 has recently become available and has the following announcement text:

Guardian Digital is happy to announce the release of EnGarde Secure Community 3.0.17 (Version 3.0, Release 17). This release includes many updated packages and bug fixes, some feature enhancements to Guardian Digital WebTool and the SELinux policy, and a few new features.

The following reported bugs from bugs.engardelinux.org are fixed in this release:

• #0000117 Unable to receive email from a domain
• #0000159 Change in cipher type
• #0000162 Would like to see mailing-list package such as “mailman…
• #0000169 Package MaraDNS
• #0000171 Firewall Restart Button
• #0000172 Registration for activation impossible
• #0000173 web tool error snort.pm
• #0000174 Unable to install openLDAP
• #0000176 Registration for activation error
• #0000177 Webtool Main Page, Index not localised
• #0000180 Error when loading apache module mod_fcgid
• #0000181 would like to see git added to list of packages

Several other bugs are fixed in this release as well.

New features include:

• We have included a very alpha version of Samba 4 for our users to evaluate. More information on this very ambitious, and very alpha, release of the Samba suite may be found at the Samba home page† In order to install this package (samba4) you must first remove any samba, samba-client, or samba-common packages you may have installed. Do _not_ use this on a production machine!
• Support for tcb, an alternative password shadowing scheme, was added to EnGarde Secure Linux. The tcb scheme allows most system utilities to work with the least amount of privilege possible and, once properly configured, can allow you to run a system with zero setuid binaries.
• A bug was fixed in glibc which was preventing localedef(1) from generating locales. With this fix you can now better use EnGarde Secure Linux in non-English environments.
• balance, a very simple and effective load balancing application, is now available for installation. Simple to set up, balance can provide round-robin TCP load balancing for just about any daemon.
• powernowd, a daemon to control the CPU speed and voltage of your server, is also now available for installation. Once properly configured powernowd can dynamically adjust the speed and voltage of your CPU, via the kernel CPUFreq and sysfs interfaces, to preserve power when it’s idle.
• Several new packages such as balance (3.35), git (1.5.3.3), mailman (2.1.9), maradns (1.2.12.08), powernowd (0.97), samba4 (4.0.0alpha1), and tcb (1.0.2) .
• The latest stable versions of ImageMagick (6.3.6), apache (2.2.6), asterisk (1.4.12), awstats (6.7), bacula (2.2.4), clamav (0.91.2), curl (7.17.0 ), device-mapper (1.02.22), dovecot (1.0.5), libapache-mod_fcgid (2.2), libpng (1.2.20), lvm2 (2.02.28), nagios plugins (1.4.10), net- snmp (5.4.1), openssh (4.7p1), php5 (5.2.4), postfix (2.4.5), ruby ​​(1.8.6), samba (3.0.26a), spamassassin (3.2.3), sudo ( 1.6.9p5), webtool (3.17), and zaptel (1.4.5.1).

All new users downloading EnGarde Secure Linux for the first time or users who use the LiveCD environment should download this release.

Users who are currently using EnGarde Secure Linux do not need to download this release — they can update their machines via the Guardian Digital Secure Network WebTool module.