Released: May 2016
What has been improved?
Performance improvements in logging daemon.
Applied security patch updates to various packages including OpenSSH, OpenSSL, PostgreSQL and PHP.
What has been fixed?
Security issues using Flash for file uploading that may have allowed unauthenticated access to some parts of the UI.
An unauthenticated user allowed to run commands as the 'www' user.
The UI inaccessible if the UI port is set to a port that is already in use.
Resolved issue with inconsistent handling of entries on SSL exclusion lists (in particular sub-domains of existing entries).
Issue viewing logs using Internet Explorer.
UI showing configuration of LDAP server with multi-domain option as always enabled.
The dashboard displaying legacy data for blocked users and domains.
Failure when sending email messages not reporting properly.
Google SafeSearch not working when visiting a Google site with a country code second-level domain, for example, google.co.uk or google.co.jp.
Resolved an issue handling WebSockets.
IO errors in the URL categorization engine.