This release fixes some bugs, update glibc , Net::DNS and capi for security
reasons. Upgraded packages are squid, snort, e100, r1000 and pulsar
glibc is a disputed issue CVE-2007-3508 concerning possibility to exploit the
bug.(glibc fix miss on our update information).
If you use a custom kernel with same 2.4.34 name than official kernel and no subversion, update will replace NIC drivers and those modules may not work on your custom kernel.
In the futur, we should provide a way to differentiate a custom kernel from official kernels.
As usual, this version can be installed as an update from previous v1.4.x
versions or with a ready-to-go ISO or usb bootable images or pxe for a fresh
install.
Files are available on 'IPCop' package at Sourceforge
fcdls package is unchanged from 1.4.15
md5sums
for i386 machines
8802707d7663f32436de78d67bec9d63 ipcop-1.4.16-fcdsl.i386.tgz
c0d326c9e7502d46adfd438ecef6e3ce ipcop-1.4.16-install-cd.i386.iso
eeb21587413d43f3b444b53c9dd1eac3 ipcop-1.4.16-install-pxe.i386.tgz
b503194f3f30f5fa26579a69354e6e7c ipcop-1.4.16-install-usb-fdd.i386.img.gz
5f57ac7d80170555c229285ccf9e879e ipcop-1.4.16-install-usb-hdd.i386.img.gz
116cb6f111a079e97ec50975b335f85b ipcop-1.4.16-install-usb-zip.i386.img.gz
ed0d15d14dc0facab0a5a427b3a8f1fd ipcop-1.4.16-update.i386.tgz.gpg
for alpha machines
438fc8c70e32c45d6622bc9b5c49a792 ipcop-1.4.16-update.alpha.tgz.gpg
7f5f8c41b436f89a6610d072ee99ed19 ipcop-1.4.16-install-cd.alpha.iso
Three different usb images are available to boot from usb as some bios may boot
with one format and not others:
- fdd is an unpartionned usb key
- hdd is partionned like an hard disk
- zip is partionned like a zip (work with real usb zip device too)
- pxe is a package ready to use for pxe boot on install (instructions inside)
To copy an usb image to an usb key (minimal size 64 MB), under linux, read
what letter the system give to that key ( cat /proc/partitions | grep sd )
and copy to that device with zcat (the-file) >/dev/sd(letter) without a
partition number. Don't forget the '>' or the output will go to the console.
To copy under Windows, you could uncompress the file and use winimage
(shareware).
- othersrc package contain all packages out of ipcop sources and is
interesting only for those who want to compile IPCop
You don't need to load directly that file on sourceforge as it is more
convenient to do that from ipcop sources with './make.sh getothersrc'.
It will load, control file md5 and install packages include on cache directory.
There has been small changes from 1.4.16rc1:
- bug with name resolution has been fixed,
- new sflogo is include in update,
- glibc is patched against a disputed issue CVE-2007-3508
- Net:DNS is upgraded to 0.60 CVE-2007-3377 CVE-2007-3409
- a few package URL download addresses have been updated for people building
- some unneeded wanpipe samples files are removed
If you install rc1 update or a fresh rc1 installation, you could simply take
all changes from final version with a few commands.
Princip is to revert version to 1.4.15 to be able to apply the 1.4.16 final
update without needing other changes
- revert the version to 1.4.15 on web interface
/bin/sed -i -e "s+= '1.4.*$+= '1.4.15';+" /var/ipcop/general-functions.pl
- copy the update .gpg file in /tmp
cd /tmp
gpg -o /tmp/patch.tar.gz --decrypt ipcop-1.4.*.tgz.gpg
tar zxf /tmp/patch.tar.gz
./setup
- remove the files in /tmp
Please report any problems in bug tracking system or on devel list.
You have to subscribe on all ipcop lists to be able send messages.
We were forced on this restriction because of the numerous spam attempts.
Gilles
Posted by: Gesp on Tuesday, July 17, 2007 - 04:26 PM
All logos and trademarks in this site are property of their respective owner. The comments are property of their posters, all the rest (c) 2003 by me. This web site was made with PostNuke, a web portal system written in PHP. PostNuke is Free Software released under the GNU/GPL license.
