New TurnKey phpList version (16.0)

Changes:

  • Updated phpList to v3.5.3.
  • Explcitly disable TLS<1.2 (i.e. SSLv3, TLSv1, TLSv1.1). (v15.x TurnKey releases supported TLS 1.2, but could fallback as low as TLSv1).
  • Update SSL/TLS cyphers to provide "Intermediate" browser/client support (suitable for "General-purpose servers with a variety of clients, recommended for almost all systems"). As provided by Mozilla via https://ssl-config.mozilla.org/.
  • Updated all relevant Debian packages to Buster/10 versions; including PHP 7.3.
  • Updated version of mysqltuner script - now installed as per upstream recommendation.
  • Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance.

Links

New TurnKey phpList version (15.2)

Changes:

  • Updated phpList to v3.3.7.
  • Configure conf scripts to always download and install latest version of phpList.
  • Bugfix/improvements - especially for CKEditor plugin, but plugins in general - closes #1278:
    • fix default kcfinder_path so CKEditor plugin works properly.
    • install additional dependencies (php-gd & php-zip) to support use of plugins.
    • set ownership of phplist-plugin directory to webserver (www-data).
    • create symlinks to default/example plugins so they work OOTB.
    • update Apache conf to included phplist-plugins dir.
    • disable Apache indexes (in Apache conf).

Links

New TurnKey phpList version (15.1)

Changes:

  • Updated phpList to v3.3.6.
  • Rebuild to resolve inadvertent removal of mariadb during sec-updates

Links