community.aegirproject.org

The Aegir team is happy to release the fifth stable release in the 1.x branch.

This release fixes the security vulnerability as announced by the Drupal Security Team

This release contains no other fixes or changes: this is simply a hotfix release to fix the security vulnerability.

We strongly recommend you upgrade your Aegir system.

Note that this security issue affects the Eldir theme only. The security issue does not affect your hosted sites that are managed by Aegir, and no re-verification of sites or platforms is necessary.

1. Installing and upgrading

NOTE: The Automated Debian Packaging currently installs the 1.3 release. If you use the manual installation method instead, it may be more difficult to switch to the Debian packages for future releases.

The canonical source of installation documentation is on the community site at:

http://community.aegirproject.org/installing

In a similar fashion, the upgrade documentation is:

http://community.aegirproject.org/upgrading

Within those sections you'll find step-by-step instructions for performing both manual and automatic upgrade processes.

It is still imperative that you read the the upgrade path and version-specific information and follow all version-specific upgrade instructions before trying to run the upgrade script or manual upgrade. This especially applies to users upgrading from releases prior to 0.4-alpha8, including 0.3.

For users coming from the 0.4 betas or recent rc releases, there are unlikely to be any version-specific manual steps required to upgrade, but you should make a habit of reading them anyway just to make sure. No-one likes a nasty surprise!

2. Need help?

If you struggle to install or upgrade your Aegir system, you have a number of options available to you for getting help.

Consult this page for more information: http://community.aegirproject.org/help

Thanks to our awesome community for their help, support and encouragement as always! Enjoy the new release :)

3. Bugfixes

• #1286536: DRUPAL-SA-CONTRIB-2011-041 - Hostmaster (Aegir) - Cross Site Scripting

4. Known issues

• #1266484: Cannot verify Drupal 7.8 with PHP 5.2
• #1309080: Drush make refuses to install, breaking the install - workaround:
  su - aegir
drush dl drush_make-6.x-2.3 --destination=~/.drush
• #1128844: invalid FQDN can provoke memory exhaustion during install - workaround: make sure your FQDN has a domain part to it (ie. hostname -f should return foo.example.com, not just foo)

See also the 1.0 release notes for known issues in the 1.x serie.