Released: May 2016

What has been improved?

  • Performance improvements in logging daemon.

  • Applied security patch updates to various packages including OpenSSH, OpenSSL, PostgreSQL and PHP.

What has been fixed?

  • Security issues using Flash for file uploading that may have allowed unauthenticated access to some parts of the UI.

  • An unauthenticated user allowed to run commands as the 'www' user.

  • The UI inaccessible if the UI port is set to a port that is already in use.

  • Resolved issue with inconsistent handling of entries on SSL exclusion lists (in particular sub-domains of existing entries).

  • Issue viewing logs using Internet Explorer.

  • UI showing configuration of LDAP server with multi-domain option as always enabled.

  • The dashboard displaying legacy data for blocked users and domains.

  • Failure when sending email messages not reporting properly.

  • Google SafeSearch not working when visiting a Google site with a country code second-level domain, for example, google.co.uk or google.co.jp.

  • Resolved an issue handling WebSockets.

  • IO errors in the URL categorization engine.