server_release/1.4/1.4.7

Release Notes

Introduction

The BOINC development community is pleased to announce a new server release.
These release notes provide an overview of the new features, bugs fixed and any known issues.
The new features included in this release are:

• None

Bugs Fixed

• Fixed various vulnerabilities

Please see the git comparison with v1.4.5 for the details.

Known issues

• None

Download

The server release can be obtained with the following commands.

git clone https://github.com/BOINC/boinc.git
cd boinc
git checkout tags/server_release/1.4/1.4.7 -b server_release/1.4.7

The code can then be built as described in the documentation.

./_autosetup
./configure --disable-client --disable-manager
make

Install

To setup a new BOINC server, please follow the guide. If you are new to BOINC please ensure to review the Technical Documentation first.

Upgrade

An existing BOINC server can be upgraded with the upgrade tool.

Change Log

#5967: Web: fix various vulnerabilities
#5968: Web: fix various XSS vulnerabilities

Server Release v1.4.5

Release Notes

Introduction

The BOINC development community is pleased to announce a new server release.
These release notes provide an overview of the new features, bugs fixed and any known issues.
The new features included in this release are:

• None

Bugs Fixed

• Remove vulnerabilities in tree_threader and in unused badge function

Please see the git comparison with v1.4.4 for the details.

Known issues

• None

Download

The server release can be obtained with the following commands.

git clone https://github.com/BOINC/boinc.git
cd boinc
git checkout tags/server_release/1.4/1.4.5 -b server_release/1.4.5

The code can then be built as described in the documentation.

./_autosetup
./configure --disable-client --disable-manager
make

Install

To setup a new BOINC server, please follow the guide. If you are new to BOINC please ensure to review the Technical Documentation first.

Upgrade

An existing BOINC server can be upgraded with the upgrade tool.

Change Log

#5964: Web: remove vulnerabilities in tree_threader and in unused badge function

Server Release v1.4.4

Release Notes

Introduction

The BOINC development community is pleased to announce a new server release.
These release notes provide an overview of the new features, bugs fixed and any known issues.
The new features included in this release are:

• None

Bugs Fixed

• Sanitize user URLs to prevent XSS attacks
• Don't allow special chars in user names.
• Fixed SQL injection vulnerability.

Please see the git comparison with v1.4.3 for the details.

Known issues

• None

Download

The server release can be obtained with the following commands.

git clone https://github.com/BOINC/boinc.git
cd boinc
git checkout tags/server_release/1.4/1.4.4 -b server_release/1.4.4

The code can then be built as described in the documentation.

./_autosetup
./configure --disable-client --disable-manager
make

Install

To setup a new BOINC server, please follow the guide. If you are new to BOINC please ensure to review the Technical Documentation first.

Upgrade

An existing BOINC server can be upgraded with the upgrade tool.

Change Log

#54950: Web: sanitize user URLs to prevent XSS attacks
#5846: web: don't allow special chars in user names.
#5962: fix vulnerability in yucky consent code

Server Release v1.4.3

Release Notes

Introduction

The BOINC development community is pleased to announce a new server release.
These release notes provide an overview of the new features, bugs fixed and any known issues.
The new features included in this release are:

• None

Bugs Fixed

• CSRF vulnerability

Please see the git comparison with v1.4.2 for the details.

Known issues

• None

Download

The server release can be obtained with the following commands.

git clone https://github.com/BOINC/boinc.git
cd boinc
git checkout tags/server_release/1.4/1.4.3 -b server_release/1.4.3

The code can then be built as described in the documentation.

./_autosetup
./configure --disable-client --disable-manager
make

Install

To setup a new BOINC server, please follow the guide. If you are new to BOINC please ensure to review the Technical Documentation first.

Upgrade

An existing BOINC server can be upgraded with the upgrade tool.

Change Log

#5950: web: fix CSRF vulnerability in edit passwd function

VBoxWrapper Release 26208

Fixes

• fix bug that caused VB version detection to fail via #5556 by @davidpanderson
• handling of outdated vboxmanage command options via #5587 by @computezrmle
• Report TIMEOUT from vbm_popen via #5585 by @computezrmle
• Add race mitigation lock to vboxwrapper via #5571 by @computezrmle
• Fix possible endless loop via #5598 by @computezrmle
• Fix 'File name too long' on Darwinvia #5608 by @computezrmle
• vboxwrapper: don't create projects/virtualbox via #5658 by @davidpanderson
• Set virtualbox vrde-property via #5823 by @computezrmle
• Revised heartbeat check via #5864 by @computezrmle
• Heartbeat checks deal with time leaps via #5866 by @computezrmle

Enhancements

• Replace deprecated VBoxManage command via #5542 by @computezrmle
• Avoid compiler warning in vboxwrapper.cpp via #5547 by @computezrmle
• Update is_extpack_installed via #5820 by @computezrmle
• Remove unused launch_vboxvm() via #5842 by @computezrmle

Client/Manager Release 8.0.4

Bugs fixed:

• #5667 boinc 8.0.3 (x64) Waiting for memory via #5669 by @davidpanderson
• #5676 Make the download link active (hyperlink) when checking the availability of new versions via #5687 by @AenBleidd

Full Changelog: client_release/8.0/8.0.3...client_release/8.0/8.0.4

Client/Manager Release 8.0.3

Bugs fixed:

• #5641: Client starts set of jobs too large for system memory via #5642 by @davidpanderson

Full Changelog: client_release/8.0/8.0.2...client_release/8.0/8.0.3

Client/Manager Release 8.0.2

What's changed:

• client: if GPU is missing, discard app versions and results that refer to it. via #5577
• [Windows] Fix client crash via #5591
• [CI] Add linux packages for Fedora 40 via #5600
• [CI] Build linux packages for Ubuntu 24.04 via #5603
• Fix screensaver on MacOS 14 via #5611
• [linux] fix install scripts to handle upgrade cases. via #5630
• Correct typo in hostinfo_win.cpp via #5631
• [linux][client] Fix check whether the client is configured to run as a daemon. via #5632
• [linux][Manager] Allow shutting down local client when run outside of BOINC Manager but not as a daemon via #5634
• [linux] add 'all_projects_list.xml' to the linux installation package via #5636

Thanks:

• @KenSharp

Full Changelog: client_release/8.0/8.0.1...client_release/8.0/8.0.2

Client/Manager Release 8.0.1

Change log:

• Fix permissions of the files installed by DEB package via #5562
• [CI] Add custom liblzma port via #5566

Full Changelog: client_release/8.0/8.0.0...client_release/8.0/8.0.1

Client/Manager Release 8.0.0

What's Changed

• Fix Mac crash bug introduced by commit e0ffbf1 by @CharlieFenton in #5322
• Scheduler: add <min_libc_version> option to plan_class_spec.xml by @davidpanderson in #5323
• [Android][ci] Separate Android client build from the Android Manager build to speed-up CI by @AenBleidd in #5326
• Update translations by @AenBleidd in #5327
• [Android] Show Battery Optimization settings when: by @AenBleidd in #5333
• Mac: Fix Automatic language detection by @CharlieFenton in #5337
• [Android] Revert back to target API 21 by @AenBleidd in #5338
• Update all_projects_list.xml by @github-actions in #5339
• [Android][CI] Split Android Manager builds to decrease total build time. by @AenBleidd in #5340
• server (all components that use DB): don't use MYSQL_OPT_RECONNECT if deprecated by @davidpanderson in #5342
• [Android] Increase Target SDK Version API to 28. by @AenBleidd in #5344
• [Android] Fix GPU detection by @AenBleidd in #5345
• Update all_projects_list.xml by @github-actions in #5346
• Update all_projects_list.xml by @github-actions in #5348
• Use 'enum' instead of int/#define for PREEMPT_TYPE and SCHEDULER_STATE. by @davidpanderson in #5363
• Update all_projects_list.xml by @github-actions in #5364
• client: add app testing feature by @davidpanderson in #5365
• Mac: Fix build break introduced by commit 8ea2aba by @CharlieFenton in #5370
• Mac: Use higher resolution menubar icon. by @CharlieFenton in #5371
• Update all_projects_list.xml by @github-actions in #5375
• Web: when delete a user, delete team_admin entries for that user. by @davidpanderson in #5377
• [CI] Fix failing linux and mingw vcpkg builds due to the change in the brotli library name (now without '-static' suffix) by @AenBleidd in #5381
• Correctly detect CPU cores when cpuset cgroup is used by @CallMeFoxie in #5373
• Update all_projects_list.xml by @github-actions in #5383
• Client: add sporadic app feature by @davidpanderson in #5385
• Update all_projects_list.xml by @github-actions in #5391
• Change doc URLs from trac wiki to github wiki in source code and project files by @davidpanderson in #5393
• Add Biometric authentication for GUI Authentication Key by @pAkalpa in #5390
• Update all_projects_list.xml by @github-actions in #5396
• complete #5123: client and server: increase p_features size from 1024 to 8192 by @bema-aei in #5397
• Improve text related to weak auth (account key) by @davidpanderson in #5400
• Update all_projects_list.xml by @github-actions in #5405
• wxWidgets 3.2 now depends on libxkbcommon by @AenBleidd in #5406
• make_project: fix bug in creation of schedulers.txt by @davidpanderson in #5408
• Make wrappers work with sporadic apps by @davidpanderson in #5410
• Mac screensaver: update for MacOS 14.0 Sonoma by @CharlieFenton in #5411
• web: forum rules tweak by @davidpanderson in #5413
• web: if bad data in GPU description field, don't show it. by @davidpanderson in #5415
• Update all_projects_list.xml by @github-actions in #5416
• Build linux packages nightly by @AenBleidd in #5418
• [CI] Run all actions nightly instead of weekly except coverity by @AenBleidd in #5419
• web: fix bug in team search by @davidpanderson in #5421
• Update all_projects_list.xml by @github-actions in #5422
• Update all_projects_list.xml by @github-actions in #5430
• Updates and bug fixes for project creation by @davidpanderson in #5432
• Update all_projects_list.xml by @github-actions in #5440
• web: fix PHP warning in login action. by @davidpanderson in #5442
• Eliminate some PHP warnings. by @davidpanderson in #5443
• Fix bad data in Diskwhen client disconnects by @FTang21 in #5439
• web: remove defunct stats sites by @davidpanderson in #5446
• Code reorganization and cleanup. No functional changes. by @davidpanderson in #5449
• Windows: add AVX512 support by @ahorek in #5448
• [CI] Build wrapper and vboxwrapper on CI for release by @AenBleidd in #5450
• Updated hostinfo_win.cpp - missing Windows SKUs (IoT Enterprise, Azure..) by @borg17 in #5455
• Fix CI by @AenBleidd in #5460
• fix PHP8 deprecations in admin web by @davidpanderson in #5459
• Update all_projects_list.xml by @github-actions in #5461
• [CI] Build linux packages for PRs and on master branch without publishing, publishing is available for schedules builds from master (nightly) and builds on client_release tag created by @AenBleidd in #5462
• Remove custom libsystemd vcpkg port that was updated on upstream by @AenBleidd in #5464
• vboxwrapper: add the ability to share project and slot directories by @davidpanderson in #5458
• Fix source code check by excluding ODP file extension by @AenBleidd in #5466
• Add linux packaging testing CI by @AenBleidd in #5465
• Add some files (in samples/) that are needed to run the example apps as VM apps. by @davidpanderson in #5469
• fix some spurious server warning messages by @davidpanderson in #5468
• web: fix some PHP8 warnings by @davidpanderson in #5470
• demo_submit, demo_query: allow > 1 input and output files by @davidpanderson in #5472
• Fix android build by @AenBleidd in #5471
• [CI] Optimize vcpkg openssl build fix by @AenBleidd in #5473
• [CI] Simplify build, remove custom openssl vcpkg port by @AenBleidd in #5474
• Fix some PHP8 warnings by @davidpanderson in #5475
• Update copyright year by @github-actions in #5477
• [CI] Remove custom vcpkg openssl port by @AenBleidd in #5478
• Change 'eMail' to 'email address' by @Delizald in #5479
• [CI][OSX] Upload build artifacts by @AenBleidd in #5481
• client: fix non-CPU-intensive logic by @davidpanderson in #5483
• client: handle changes to project master URLs by @davidpanderson in #5482
• client: when not requesting work for a resource, show correct message by @davidpanderson in #5484
• [GUI] When another instance of the BOINC Manager is already running - show the corresponding message to the user by @AenBleidd in #5485
• Wrapper (Unix): use SIGSTOP instead of SIGTSTP to suspend subprocesses by @davidpanderson in #5486
• web: add option to use Unix 'mail' command to send emails by @davidpanderson in #5487
• vbox app demo: fix some filenames. Shouldn't affect anything else. by @davidpanderson in #5488
• [worker] Add missed WORKER_RELEASE entry to the version.h.in file by @AenBleidd in #5489
• changes to support job-processing cookbook by @davidpanderson in #5490
• web: showing PHP errors on web pages is optional by @davidpanderson in #5493
• Web: sanitize user URLs to prevent XSS attacks by @davidpanderson in #5495
• [ci][linux][arm] update openssl to 3.2.0 and curl to 8.5.0 by @AenBleidd in #5496
• Mac: fix Apple Silicon GPU errors after MacOS update by @CharlieFenton in #5502
• Update all_projects_list.xml by @github-actions in #5503
• fix: make sure sleep completes before killing descendants by @piedar in #5504
• [CI] Fix ...