GitLab

refs #17928

Currently translated at 17.7% (11 of 62 strings)

Translation: Tails/wiki/src/news/version_3.14.1.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcnewsversion_3141po/pt/

Currently translated at 39.0% (16 of 41 strings)

Translation: Tails/wiki/src/news/version_3.11.*.po
Translate-URL: http://translate.tails.boum.org/projects/tails/wikisrcnewsversion_311po/it/

This fixes dialog width and height on Buster:
https://gitlab.gnome.org/GNOME/zenity/commit/3b64d05e8a1aae1581d2bec7288d80ac4699e1b1

This is needed to pin Let's Encrypt _intermediate_ CA, which is not supported by
IO::Socket::SSL and Net::SSLeay. For details, see:
https://labs.riseup.net/code/issues/11810#note-1.

Besides, it's much cleaner and easier to maintain to have one single (somewhat
hardened) HTTPS download implementation, that's covered quite a bit by
tails-iuk's test suite, instead of having to maintain a second one just for
tails-security-check.

refs: #11810

We've stopped using this "version file" a while ago.

It's important enough to be worth being noisy about, and providing
clickable links (which we can't easily do with desktop notifications
these days).

Refs: #7989

Will-fix: #7989 (yet another step)

Unfortunately, the underlying HTTPS stack we use here fails open in those case,
so we have to check it ourselves. Currently, we check that the file exists, is
readable, is a plain file and is not empty.

This will ease development and bug-fixing quite a bit.

... instead of hardcoding the path to the CA who signed the current certificate.
This will allow us to handle future CA transitions in a nicer way, and without
modifying this program anymore.

Without this fix: the condition clause always returns true; so, as long as an
entry in the Atom feed has at least one category assigned, the is_not_fixed
function returns false, and no notification for this entry is displayed.

tails-security-check: Only report unfixed security issues. Tails Upgrader takes care of the ones that were fixed.

Note that Tails ships lib-carp-{,assert-}perl already, as dependencies of other
packages, so this does not bloat the ISO.

There's little point in manually enabling "say" these days.

Fixes
https://tails.boum.org/bugs/didn__39__t_received_a_warning___39__you_are_using_an_old_version__39__/

LWP::UserAgent can easily get proper support for a SOCKS proxy, let's use it.