De ontwikkelaars achter IPCop hebben versie 1.4.4 uitgebracht van het gelijknamige programma. IPCop is een Linux-firewalldistributie, die zich voornamelijk richt op thuisgebruikers en de SoHo-omgeving. Het versienummer heeft een sprong gemaakt van 1.4.2 naar 1.4.4 omdat deze update is gesplitst in twee delen. Dit om te voorkomen dat mensen met een kleine rootpartitie de foutmelding 'This is not an authorised update.' krijgen. Meer informatie hierover is in de release notes op deze pagina terug te vinden. De belangrijkste veranderingen in deze uitgave kunnen hieronder gelezen worden:
InterfaceUpgraded packages
- sound checkbox option for ip-up/ip-down
- optional refresh for index.cgi
- fix a bug that caused a fixed lease to always be Enabled after being edited in dhcp.cgi
- improve reload in the standard rc.local.firewall : it is at the user charge to report a change after upgrade
- add remark field in dhcp.cgi
- fix external Access page for port ranges and include a remark field
- fix a typo on rc.red with GATEWAY when stopping connection with RFC1483 and atm adsl modem
- lock rc.updatered usage by the first call until the script end to continue the second. Sometime down was ending after new
- add an option to Dyndns behind IPCop. It must not be used with dial on demand for obvious reasons.
- VPN fix with ESP group selection
- VPN fix with .p12 certificate import
- split header.pl in two parts: better speed for non cgi scripts, allow easier upgrade without breaking add-ons on futur releases
- fix setup with DNS gateway
- fix stack smashing attack with lspci -vv
- fix shaping ceiling
- restart VPN after doing a reset in the GUI
- fix eagle-usb and isdn (remove CRLF for cmv files)
- add no-ip group and empty domain in ddns.cgi
- fix substring match for a VPN interface number with 2 digits
- fix 2 perl security issues
- add a option with 'dma' in syslinux menu during install (SiS chipset workaround)
- support D-link DGE-528T ID as a r8169 clone
- fix recent change in setddns.pl with no-ip
- revert to gd-2.0.20 to make trafic graph work again
Compilation
- bewan unicorn driver to 0.9.0 : better synch
- dhcp to 3.0.2 (bugfix for rules parsing)
- dnsmasq to 2.20
- eagle-usb 2.1.1 (eagle III support)
- eciadsl-nortek 0.10 new package
- kernel 2.4.29 : many local security issues fixed
- libpng to 1.2.8 (crash risk with 1.2.7)
- openswan 1.0.9
- squid to v2.5 STABLE9. Solve some security issues or failures
- tar 1.13.25 Fix for CAN-2002-0399
- Replace zlib 1.2.1 patched version with V1.2.2
- add md5sum checking during source files loading and compilation
- remove gcc-2.95.3 to build the kernel and use gcc-3.3.4 for both userspace and kernel
- better bash detection during compilation
- strip should not follow symlink resolving in building machine files
- suppress strip error for non stripable files
- silent Openssl warnings with deprecated -m486 option