Changes:

  • Upgraded to latest version of Ushahidi from "platform-release" git repo - v4.6.0. (Previous releases were installing legacy version from archived repo).
  • Include Redis (for caching) as per production recommendation.
  • Explcitly disable TLS<1.2 (i.e. SSLv3, TLSv1, TLSv1.1). (v15.x TurnKey releases supported TLS 1.2, but could fallback as low as TLSv1).
  • Update SSL/TLS cyphers to provide "Intermediate" browser/client support (suitable for "General-purpose servers with a variety of clients, recommended for almost all systems"). As provided by Mozilla via https://ssl-config.mozilla.org/.
  • Updated all relevant Debian packages to Buster/10 versions; including PHP 7.3.
  • Updated version of mysqltuner script - now installed as per upstream recommendation.
  • Note: Please refer to turnkey-core's changelog for changes common to all appliances. Here we only describe changes specific to this appliance.

Links