Server Release v1.4.4

Release Notes

Introduction

The BOINC development community is pleased to announce a new server release.
These release notes provide an overview of the new features, bugs fixed and any known issues.
The new features included in this release are:

• None

Bugs Fixed

• Sanitize user URLs to prevent XSS attacks
• Don't allow special chars in user names.
• Fixed SQL injection vulnerability.

Please see the git comparison with v1.4.3 for the details.

Known issues

• None

Download

The server release can be obtained with the following commands.

git clone https://github.com/BOINC/boinc.git
cd boinc
git checkout tags/server_release/1.4/1.4.4 -b server_release/1.4.4

The code can then be built as described in the documentation.

./_autosetup
./configure --disable-client --disable-manager
make

Install

To setup a new BOINC server, please follow the guide. If you are new to BOINC please ensure to review the Technical Documentation first.

Upgrade

An existing BOINC server can be upgraded with the upgrade tool.

Change Log

#54950: Web: sanitize user URLs to prevent XSS attacks
#5846: web: don't allow special chars in user names.
#5962: fix vulnerability in yucky consent code

Server Release v1.4.3

Release Notes

Introduction

The BOINC development community is pleased to announce a new server release.
These release notes provide an overview of the new features, bugs fixed and any known issues.
The new features included in this release are:

• None

Bugs Fixed

• CSRF vulnerability

Please see the git comparison with v1.4.2 for the details.

Known issues

• None

Download

The server release can be obtained with the following commands.

git clone https://github.com/BOINC/boinc.git
cd boinc
git checkout tags/server_release/1.4/1.4.3 -b server_release/1.4.3

The code can then be built as described in the documentation.

./_autosetup
./configure --disable-client --disable-manager
make

Install

To setup a new BOINC server, please follow the guide. If you are new to BOINC please ensure to review the Technical Documentation first.

Upgrade

An existing BOINC server can be upgraded with the upgrade tool.

Change Log

#5950: web: fix CSRF vulnerability in edit passwd function

VBoxWrapper Release 26208

Fixes

• fix bug that caused VB version detection to fail via #5556 by @davidpanderson
• handling of outdated vboxmanage command options via #5587 by @computezrmle
• Report TIMEOUT from vbm_popen via #5585 by @computezrmle
• Add race mitigation lock to vboxwrapper via #5571 by @computezrmle
• Fix possible endless loop via #5598 by @computezrmle
• Fix 'File name too long' on Darwinvia #5608 by @computezrmle
• vboxwrapper: don't create projects/virtualbox via #5658 by @davidpanderson
• Set virtualbox vrde-property via #5823 by @computezrmle
• Revised heartbeat check via #5864 by @computezrmle
• Heartbeat checks deal with time leaps via #5866 by @computezrmle

Enhancements

• Replace deprecated VBoxManage command via #5542 by @computezrmle
• Avoid compiler warning in vboxwrapper.cpp via #5547 by @computezrmle
• Update is_extpack_installed via #5820 by @computezrmle
• Remove unused launch_vboxvm() via #5842 by @computezrmle

Client/Manager Release 8.0.4

Bugs fixed:

• #5667 boinc 8.0.3 (x64) Waiting for memory via #5669 by @davidpanderson
• #5676 Make the download link active (hyperlink) when checking the availability of new versions via #5687 by @AenBleidd

Full Changelog: client_release/8.0/8.0.3...client_release/8.0/8.0.4

Client/Manager Release 8.0.3

Bugs fixed:

• #5641: Client starts set of jobs too large for system memory via #5642 by @davidpanderson

Full Changelog: client_release/8.0/8.0.2...client_release/8.0/8.0.3

Client/Manager Release 8.0.2

What's changed:

• client: if GPU is missing, discard app versions and results that refer to it. via #5577
• [Windows] Fix client crash via #5591
• [CI] Add linux packages for Fedora 40 via #5600
• [CI] Build linux packages for Ubuntu 24.04 via #5603
• Fix screensaver on MacOS 14 via #5611
• [linux] fix install scripts to handle upgrade cases. via #5630
• Correct typo in hostinfo_win.cpp via #5631
• [linux][client] Fix check whether the client is configured to run as a daemon. via #5632
• [linux][Manager] Allow shutting down local client when run outside of BOINC Manager but not as a daemon via #5634
• [linux] add 'all_projects_list.xml' to the linux installation package via #5636

Thanks:

• @KenSharp

Full Changelog: client_release/8.0/8.0.1...client_release/8.0/8.0.2

Client/Manager Release 8.0.1

Change log:

• Fix permissions of the files installed by DEB package via #5562
• [CI] Add custom liblzma port via #5566

Full Changelog: client_release/8.0/8.0.0...client_release/8.0/8.0.1

Client/Manager Release 8.0.0

What's Changed

• Fix Mac crash bug introduced by commit e0ffbf1 by @CharlieFenton in #5322
• Scheduler: add <min_libc_version> option to plan_class_spec.xml by @davidpanderson in #5323
• [Android][ci] Separate Android client build from the Android Manager build to speed-up CI by @AenBleidd in #5326
• Update translations by @AenBleidd in #5327
• [Android] Show Battery Optimization settings when: by @AenBleidd in #5333
• Mac: Fix Automatic language detection by @CharlieFenton in #5337
• [Android] Revert back to target API 21 by @AenBleidd in #5338
• Update all_projects_list.xml by @github-actions in #5339
• [Android][CI] Split Android Manager builds to decrease total build time. by @AenBleidd in #5340
• server (all components that use DB): don't use MYSQL_OPT_RECONNECT if deprecated by @davidpanderson in #5342
• [Android] Increase Target SDK Version API to 28. by @AenBleidd in #5344
• [Android] Fix GPU detection by @AenBleidd in #5345
• Update all_projects_list.xml by @github-actions in #5346
• Update all_projects_list.xml by @github-actions in #5348
• Use 'enum' instead of int/#define for PREEMPT_TYPE and SCHEDULER_STATE. by @davidpanderson in #5363
• Update all_projects_list.xml by @github-actions in #5364
• client: add app testing feature by @davidpanderson in #5365
• Mac: Fix build break introduced by commit 8ea2aba by @CharlieFenton in #5370
• Mac: Use higher resolution menubar icon. by @CharlieFenton in #5371
• Update all_projects_list.xml by @github-actions in #5375
• Web: when delete a user, delete team_admin entries for that user. by @davidpanderson in #5377
• [CI] Fix failing linux and mingw vcpkg builds due to the change in the brotli library name (now without '-static' suffix) by @AenBleidd in #5381
• Correctly detect CPU cores when cpuset cgroup is used by @CallMeFoxie in #5373
• Update all_projects_list.xml by @github-actions in #5383
• Client: add sporadic app feature by @davidpanderson in #5385
• Update all_projects_list.xml by @github-actions in #5391
• Change doc URLs from trac wiki to github wiki in source code and project files by @davidpanderson in #5393
• Add Biometric authentication for GUI Authentication Key by @pAkalpa in #5390
• Update all_projects_list.xml by @github-actions in #5396
• complete #5123: client and server: increase p_features size from 1024 to 8192 by @bema-aei in #5397
• Improve text related to weak auth (account key) by @davidpanderson in #5400
• Update all_projects_list.xml by @github-actions in #5405
• wxWidgets 3.2 now depends on libxkbcommon by @AenBleidd in #5406
• make_project: fix bug in creation of schedulers.txt by @davidpanderson in #5408
• Make wrappers work with sporadic apps by @davidpanderson in #5410
• Mac screensaver: update for MacOS 14.0 Sonoma by @CharlieFenton in #5411
• web: forum rules tweak by @davidpanderson in #5413
• web: if bad data in GPU description field, don't show it. by @davidpanderson in #5415
• Update all_projects_list.xml by @github-actions in #5416
• Build linux packages nightly by @AenBleidd in #5418
• [CI] Run all actions nightly instead of weekly except coverity by @AenBleidd in #5419
• web: fix bug in team search by @davidpanderson in #5421
• Update all_projects_list.xml by @github-actions in #5422
• Update all_projects_list.xml by @github-actions in #5430
• Updates and bug fixes for project creation by @davidpanderson in #5432
• Update all_projects_list.xml by @github-actions in #5440
• web: fix PHP warning in login action. by @davidpanderson in #5442
• Eliminate some PHP warnings. by @davidpanderson in #5443
• Fix bad data in Diskwhen client disconnects by @FTang21 in #5439
• web: remove defunct stats sites by @davidpanderson in #5446
• Code reorganization and cleanup. No functional changes. by @davidpanderson in #5449
• Windows: add AVX512 support by @ahorek in #5448
• [CI] Build wrapper and vboxwrapper on CI for release by @AenBleidd in #5450
• Updated hostinfo_win.cpp - missing Windows SKUs (IoT Enterprise, Azure..) by @borg17 in #5455
• Fix CI by @AenBleidd in #5460
• fix PHP8 deprecations in admin web by @davidpanderson in #5459
• Update all_projects_list.xml by @github-actions in #5461
• [CI] Build linux packages for PRs and on master branch without publishing, publishing is available for schedules builds from master (nightly) and builds on client_release tag created by @AenBleidd in #5462
• Remove custom libsystemd vcpkg port that was updated on upstream by @AenBleidd in #5464
• vboxwrapper: add the ability to share project and slot directories by @davidpanderson in #5458
• Fix source code check by excluding ODP file extension by @AenBleidd in #5466
• Add linux packaging testing CI by @AenBleidd in #5465
• Add some files (in samples/) that are needed to run the example apps as VM apps. by @davidpanderson in #5469
• fix some spurious server warning messages by @davidpanderson in #5468
• web: fix some PHP8 warnings by @davidpanderson in #5470
• demo_submit, demo_query: allow > 1 input and output files by @davidpanderson in #5472
• Fix android build by @AenBleidd in #5471
• [CI] Optimize vcpkg openssl build fix by @AenBleidd in #5473
• [CI] Simplify build, remove custom openssl vcpkg port by @AenBleidd in #5474
• Fix some PHP8 warnings by @davidpanderson in #5475
• Update copyright year by @github-actions in #5477
• [CI] Remove custom vcpkg openssl port by @AenBleidd in #5478
• Change 'eMail' to 'email address' by @Delizald in #5479
• [CI][OSX] Upload build artifacts by @AenBleidd in #5481
• client: fix non-CPU-intensive logic by @davidpanderson in #5483
• client: handle changes to project master URLs by @davidpanderson in #5482
• client: when not requesting work for a resource, show correct message by @davidpanderson in #5484
• [GUI] When another instance of the BOINC Manager is already running - show the corresponding message to the user by @AenBleidd in #5485
• Wrapper (Unix): use SIGSTOP instead of SIGTSTP to suspend subprocesses by @davidpanderson in #5486
• web: add option to use Unix 'mail' command to send emails by @davidpanderson in #5487
• vbox app demo: fix some filenames. Shouldn't affect anything else. by @davidpanderson in #5488
• [worker] Add missed WORKER_RELEASE entry to the version.h.in file by @AenBleidd in #5489
• changes to support job-processing cookbook by @davidpanderson in #5490
• web: showing PHP errors on web pages is optional by @davidpanderson in #5493
• Web: sanitize user URLs to prevent XSS attacks by @davidpanderson in #5495
• [ci][linux][arm] update openssl to 3.2.0 and curl to 8.5.0 by @AenBleidd in #5496
• Mac: fix Apple Silicon GPU errors after MacOS update by @CharlieFenton in #5502
• Update all_projects_list.xml by @github-actions in #5503
• fix: make sure sleep completes before killing descendants by @piedar in #5504
• [CI] Fix ...

Client/Manager Release 7.24.1

Changelog:

• Fix Mac crash bug introduced by commit e0ffbf1 via #5322 by @CharlieFenton

Client/Manager Release 7.24.0

What's Changed

• Apparently ftok() is missing in the wasm C library. Fix this the right way. by @davidpanderson in #5229
• Add missing header file to the lib/CMakeLists.txt file by @AenBleidd in #5230
• [libboinc] fix build when integrator tries to link app with libboinc by @AenBleidd in #5232
• client: improve implementation of CPU throttling by @davidpanderson in #5233
• Update all_projects_list.xml by @github-actions in #5236
• Add action to create automatically PR if all_projects_list.xml file was updated on the server by @AenBleidd in #5235
• Mac: add script to notarize BOINC executables by @CharlieFenton in #5238
• Automake: use $(libexecdir) instead of $(libdir) by @CyberTailor in #5239
• Add cron job to create PR automatically every 1st of January with the updated copyright year by @AenBleidd in #5240
• Run flows with auto PRs from the mainstream repo only by @AenBleidd in #5241
• Fix screensaver crash bug introduced in PR #5197 commit 689a6ea by @CharlieFenton in #5244
• Mac: update backtrace for MacOS 13.4 by @CharlieFenton in #5245
• Run CI on tag push by @AenBleidd in #5248
• [Android] Update gradle and several dependencies by @AenBleidd in #5250
• File sandbox fixes by @davidpanderson in #5252
• client: the default value for the "suspend_if_no_recent_input" pref should to 0, not 60 by @davidpanderson in #5251
• Change wiki links from Trac to Github by @davidpanderson in #5253
• [Manager] Improve consistency of control labels and accelerators by @BrianNixon in #5202
• [Manager] Show native names for language options, and only those for which translations are available by @BrianNixon in #5176
• Update all_projects_list.xml by @github-actions in #5259
• web: job-submission tweaks by @davidpanderson in #5260
• client: if sched request fails, show the scheduler URL (that might be the problem) by @davidpanderson in #5261
• [Client] Add alert if idle time to resume computing is greater than idle time to suspend computing by @Vulpine05 in #5270
• client: ignore old prefs sent by projects or AM by @davidpanderson in #5258
• client: avoid overscheduling CPUs in presence of MT jobs by @davidpanderson in #5257
• Manager, computing prefs dialog: Fix bug where the "In use means..." value mysteriously showed up in the "suspend when non-BOINC..." field. by @davidpanderson in #5269
• Mac: Support Dark Mode in Advanced View by @CharlieFenton in #5267
• Mac: Use strtod_l() only in Manager. Use strtod() in client, etc. by @CharlieFenton in #5279
• web-based remote job submission: improve interface for getting output files by @davidpanderson in #5284
• web: show batch output file size correctly by @davidpanderson in #5283
• Web: add "download as PNG" button to certificates. by @davidpanderson in #5282
• DEB repository workflow by @parvit in #5264
• RPM workflow by @parvit in #5280
• web, job submission: show progress bar on batch page by @davidpanderson in #5286
• Update all_projects_list.xml by @github-actions in #5287
• Mac: Simplify builds by @CharlieFenton in #5285
• [CI][linux] Create separate flow to build proper linux binaries for packaging by @AenBleidd in #5288
• Mac: Add standard command-comma shortcut for Preferences menu item by @CharlieFenton in #5293
• Update required wxWidgets to 3.1.3 (first with wxSystemAppearance) by @Russ741 in #5292
• Make delimiters argument const so it can (legally) be a string literal. by @Russ741 in #5294
• client: set Content-type of POST requests to text/xml. by @davidpanderson in #5299
• Update all_projects_list.xml by @github-actions in #5300
• [CI][linux] Build DEB package flow by @AenBleidd in #5291
• Correction for issue #5297 by @LLyaudet in #5302
• Update all_projects_list.xml by @github-actions in #5307
• web: add "Share on Facebook" and "Share on Twitter" buttons to certificates by @davidpanderson in #5308
• crypt_prog: add -verify_string command (to verify a string signature) by @davidpanderson in #5309
• client, Android: if suspend because of battery heat or charge, don't resume for at least 5 minutes. by @davidpanderson in #5311
• [mingw] Fix build of the cmake project by @AenBleidd in #5312
• [Manager] Add button in event log to display only alerts (errors) by @Vulpine05 in #5313
• Locale: Update localization template files by @AenBleidd in #5314
• [CI] Fix paths for renamed vcpkg triplet files by @AenBleidd in #5316
• Update translations by @AenBleidd in #5320

New Contributors

• @github-actions made their first contribution in #5236
• @parvit made their first contribution in #5264
• @Russ741 made their first contribution in #5292
• @LLyaudet made their first contribution in #5302

Full Changelog: client_release/7.22/7.22.2...client_release/7.24/7.24.0