v15.1 Appliance Updates and Bugfixes - 70+ Rebuilt and Updated Apps

In the wake of the "mini-nightmare" (to quote a user) that was the Debian MariaDB auto removal fiasco; we're back with ~70 updated appliances (all the ones with MySQL/MariaDB). They include all the latest Debian packages. Additionally, those that also install 3rd party software, such as Redmine, Observium and WordPress (plus many more) also include the latest versions of that particular software.

As per usual, you can download them in all of the supported formats from their respective appliance pages (links for all those updated, below) or launch them direct from the Hub without leaving your browser! :) AWS Marketplace images will also be updated shortly.

The Updated and Rebuilt Appliances

Most of the library is now on v15.1 (or higher) and the updated apps can be downloaded from their respective appliance pages. Each of the icons below link through to the relevant page.

ASP.NET (Apache with ModMono)	B2evolution	Bugzilla	CakePHP
Canvas	CodeIgniter	Collabtive	Concrete5
Django	Drupal7	Drupal8	e107
Elgg	EspoCRM	eZplatform	Foodsoft
Foswiki	Gallery	Ghost	Gitea
GitLab	GNUsocial	iceScrum	Jenkins
Joomla3	LAMPStack	Laravel	LighttpdPHPFastCGIServer
LimeSurvey	Magento	Mambo	Mantis
Matomo	MediaWiki	Mibew	Moodle
MySQL	Nextcloud	NginxPHPFastCGIServer	Observium
Omeka	OrangeHRM	osCommerce	OTRS
ownCloud	phpBB	phpList	Prestashop
ProcessMaker	PunBB	Rails	Redmine
Roundup	SahanaEden	SilverStripe	SimpleInvoices
SimpleMachines	SiT!SupportIncidentTracker	SuiteCRM	Symfony
Tomcat	Tomcat-apache	Tracks	Typo3
Ushahidi	Vanilla	web2py	WordPress
XOOPS	YiiFramework	YouPHPTube	ZenCart
ZoneMinder	Zurmo

So What Happened?

It has now become clear that the issue was that one of the MariaDB security packages had a new dependency added ('libconfig-inifiles-perl') as part of the update. Unfortunately, that new dependency was not hosted in the Debian Security archive, which forced the auto-updates to remove MariaDB! It seems highly likely that this was a breach of Debian policy, so I hope to work with Debian to ensure that measures are put in place so this doesn't happen again.

If nothing else it is a good reminder to ensure that you are signed up to our (extremely) low traffic newsletter. We promise to send no more than one "news" item per month, and no more security/critical info items than we have to! If you don't already have a website user account, please register for one today. By default you will be signed up to the newsletter (unless you uncheck the box). If you're already a user and didn't get the email I sent out last week (re the MariaDB incident) please browse to your user account page and click on the subscriptions tab to double check that you are subscribed. If you are, please get in touch and I can assist you to troubleshoot what might have gone wrong.

New users can be assured that security updates uninstalling important software is certainly not the norm! Thankfully it is an extremely rare occurrence, and I'm hoping that we can put in place processes to ensure it doesn't happen again in the future.

Outstanding Items

As I mentioned, the AWS Marketplace builds have still not yet been published, but should be live extremely soon hopefully. I also still need to upload the updated changelogs to the website. That should be done by early next week.

Feedback Welcome

As per usual we always welcome feedback. So please test them out and let us know how they go. Please post below in the comments or open a new thread on the forums (website account required). Bugs and feature requests can be lodged on our issue tracker (free GitHub user account required).