D-Bus 1.8.14 (2015-01-05)
==
The “40lb of roofing nails” release.
Security hardening:
• Do not allow calls to UpdateActivationEnvironment from uids other than
the uid of the dbus-daemon. If a system service installs unsafe
security policy rules that allow arbitrary method calls
(such as CVE-2014-8148) then this prevents memory consumption and
possible privilege escalation via UpdateActivationEnvironment.
We believe that in practice, privilege escalation here is avoided
by dbus-daemon-launch-helper sanitizing its environment; but
it seems better to be safe.
• Do not allow calls to UpdateActivationEnvironment or the Stats interface
on object paths other than /org/freedesktop/DBus. Some system services
install unsafe security policy rules that allow arbitrary method calls
to any destination, method and interface with a specified object path;
while less bad than allowing arbitrary method calls, these security
policies are still harmful, since dbus-daemon normally offers the
same API on all object paths and other system services might behave
similarly.
Other fixes:
• Add missing initialization so GetExtendedTcpTable doesn't crash on
Windows Vista SP0 (fd.o #77008, Илья А. Ткаченко)
Changes:
- the "moa redraw 8-bit british vintage colour management" release.
- NOTICE: this release updates terminfo.
- fix pixel droppings on overdraw when a secondary core font has the
same height but different ascent.
- implement cvvis in terminfo as blinking cursor, to distinguish it
from cnorm (emacs uses cvvis which is commonly a blinking cursor).
- when xft support was compiled in, colour queries erroneously returned
premultiplied values, this also affected internal queries, for example
when calculating faded colour. alpha is now divided out when possible,
which is more correct but loses colour resolution.
- add DECSCUSR xterm extension to set the cursor to a vertical bar.
- add 'extension:string' action, and associated on_action perl
hook, for keysym resources that invokes actions provided by
perl extensions. The 'perl:string' action and
on_user_command hook are deprecated but still supported.
- add 'builtin-string' action for keysym resources that restores string
mappings for keys that have predefined actions in urxvt.
- add -k option to urxvtc for killing the daemon process.
- document urxvtd's -e/--eval option that was implemented in 9.16,
but not documented.
- add -dockapp option to make the wm treat urxvt as a dockapp.
- add -mc option and multiClickTime resource to set the maximum time
between multi-click select events (patch by Joe Peterson).
- new 'eval' extension to evaluate arbitrary perl code with keysym
bindings. The extension also provides methods that implement basic
actions, such as pasting selections and scrolling.
- the macosx-clipboard and macosx-clipboard-native extensions have been removed.
- kuake extension now uses the kuake.hotkey resource to specify the hotkey.
- new 'matcher:select' mode of matcher to iterate over the matches with the keyboard.
- the 'matcher:list' feature of matcher now honours the launcher
associated to a matched pattern.
- speed-up matcher underlining on very long lines (reported by Edward Z. Yang).
- fix up/down commands of searchable-scrollback so that they always move
to the previous/next logical line with a match, if any.
- searchable-scrollback resource has been deprecated (use keysym instead).
- extension parameter passing is deprecated (use resource mechanism instead).
- upgrade to GPLv3 (see COPYING).
- compile out of the box on Solaris 10, again.
- fix height and position of the stippled area in next scrollbar (patch
by Thomas Otto).
- fix off-by-one bug causing the iso14755 window not to jump out of the
way properly.
- fix crash that may happen if a lib to which urxvt is linked to calls setenv.
- fix memory leak in special_{encode,decode} perl methods.
- fix refresh bug that occurs when reverse video is set on a cell
containing a space and with the same bg and fg colour, red hat bug
#830236.
- fix crash that may happen if an x error is received after a terminal
window/popup has been destroyed already.
- removed superfluous 0 digit from sgr terminfo sequence.
- greatly improve colour allocation on colour-starved pseudocolour
displays to avoid read-write cells instead of simply failing
(this is only relevant for antique 8bpp frame buffers).
- do not free fade colours when not doing fading (this is likely
only relevant for antique 8bpp frame buffers).
- do not specialcase 2 or 4 colour visuals, leading to
simpler and actually more correct code.
- hopefully no longer leak colours on !truecolour visuals.
- use consistent method names (scr_recolour => scr_recolor).
- use simpler (but slightly less bogus) formula for nearest
colour choice (this is likely only relevant for antique 8bpp
frame buffers).
- remove fallback behaviour when initialising colours - the
behaviour was inconsistent between startup vs. later and
was only effective when valid colours couldn't be allocated.
ver 0.19.7 (2014/12/17)
* input
- nfs: fix crash while canceling a failing file open operation
- nfs: fix memory leak on connection failure
- nfs: fix reconnect after mount failure
- nfs: implement mount timeout (60 seconds)
* storage
- nfs: implement I/O timeout (60 seconds)
* playlist
- embcue: fix filename suffix detection
- don't skip non-existent songs in "listplaylist"
* decoder
- ffmpeg: fix time stamp underflow
* fix memory allocator bug on Windows
ver 0.19.6 (2014/12/08)
* decoder
- ffmpeg: support FFmpeg 2.5
* fix build failure with musl
* android
- update libFLAC to 1.3.1
- update FFmpeg to 2.5
ver 0.19.5 (2014/11/26)
* input
- nfs: fix crash on connection failure
* archive
- zzip: fix crash after seeking
* decoder
- dsdiff, dsf, opus: fix deadlock while seeking
- mp4v2: remove because of incompatible license
ver 0.19.4 (2014/11/18)
* protocol
- workaround for buggy clients that send "add /"
* decoder
- ffmpeg: support opus
- opus: add MIME types audio/ogg and application/ogg
* fix crash on failed filename charset conversion
* fix local socket detection from uid=0 (root)
ver 0.19.3 (2014/11/11)
* protocol
- fix "(null)" result string to "list" when AlbumArtist is disabled
* database
- upnp: fix breakage due to malformed URIs
* input
- curl: another fix for redirected streams
* decoder
- audiofile: fix crash while playing streams
- audiofile: fix bit rate calculation
- ffmpeg: support opus
- opus: fix bogus duration on streams
- opus: support chained streams
- opus: improved error logging
* fix distorted audio with soxr resampler
* fix build failure on Mac OS X with non-Apple compilers
ver 0.19.2 (2014/11/02)
* input
- curl: fix redirected streams
* playlist
- don't allow empty playlist name
- m3u: don't ignore unterminated last line
- m3u: recognize the file suffix ".m3u8"
* decoder
- ignore URI query string for plugin detection
- faad: remove workaround for ancient libfaad2 ABI bug
- ffmpeg: recognize MIME type audio/aacp
- mad: fix negative replay gain values
* output
- fix memory leak after filter initialization error
- fall back to PCM if given DSD sample rate is not supported
* fix assertion failure on unsupported PCM conversion
* auto-disable plugins that require GLib when --disable-glib is used
ver 0.19.1 (2014/10/19)
* input
- mms: fix deadlock bug
* playlist
- extm3u: fix Extended M3U detection
- m3u, extm3u, cue: fix truncated lines
* fix build failure on Mac OS X
* add missing file systemd/mpd.socket to tarball
ver 0.19 (2014/10/10)
* protocol
- new commands "addtagid", "cleartagid", "listfiles", "listmounts",
"listneighbors", "mount", "rangeid", "unmount"
- "lsinfo" and "readcomments" allowed for remote files
- "listneighbors" lists file servers on the local network
- "playlistadd" supports file:///
- "idle" with unrecognized event name fails
- "list" on album artist falls back to the artist tag
- "list" and "count" allow grouping
- new "search"/"find" filter "modified-since"
- "seek*" allows fractional position
- close connection after syntax error
* database
- proxy: forward "idle" events
- proxy: forward the "update" command
- proxy: copy "Last-Modified" from remote directories
- simple: compress the database file using gzip
- upnp: new plugin
- cancel the update on shutdown
* storage
- music_directory can point to a remote file server
- nfs: new plugin
- smbclient: new plugin
* playlist
- cue: fix bogus duration of the last track
- cue: restore CUE tracks from state file
- soundcloud: use https instead of http
- soundcloud: add default API key
* archive
- read tags from songs in an archive
* input
- alsa: new input plugin
- curl: options "verify_peer" and "verify_host"
- ffmpeg: update offset after seeking
- ffmpeg: improved error messages
- mms: non-blocking I/O
- nfs: new input plugin
- smbclient: new input plugin
* filter
- volume: improved software volume dithering
* decoder:
- vorbis, flac, opus: honor DESCRIPTION= tag in Xiph-based files as a comment to the song
- audiofile: support scanning remote files
- audiofile: log libaudiofile errors
- dsdiff, dsf: report bit rate
- dsdiff, dsf: implement seeking
- dsf: support DSD512
- dsf: support multi-channel files
- dsf: fix big-endian bugs
- dsf: fix noise at end of malformed file
- mpg123: support ID3v2, ReplayGain and MixRamp
- sndfile: support scanning remote files
- sndfile: support tags "comment", "album", "track", "genre"
- sndfile: native floating point playback
- sndfile: optimized 16 bit playback
- mp4v2: support playback of MP4 files.
* encoder:
- shine: new encoder plugin
* output
- alsa: support native DSD playback
- alsa: rename "DSD over USB" to "DoP"
- osx: fix hang after (un)plugging headphones
* threads:
- the update thread runs at "idle" priority
- the output thread runs at "real-time" priority
- increase kernel timer slack on Linux
- name each thread (for debugging)
* configuration
- allow playlist directory without music directory
- use XDG to auto-detect "music_directory" and "db_file"
* add tags "AlbumSort", "MUSICBRAINZ_RELEASETRACKID"
* disable global Latin-1 fallback for tag values
* new resampler option using libsoxr
* ARM NEON optimizations
* install systemd unit for socket activation
* Android port
Update 1.7 to 1.8
(pkgsrc)
- Remove post-build: target in Makefile
(not necessary now)
(upstream)
- No immediate ChangeLog, Release note found other than
1.8 is released on 2014-12-03
1.9.0
-----
- Issue #106: Support the `flush` parameter to `six.print_`.
- Pull request #48 and issue #15: Add the `python_2_unicode_compatible`
decorator.
- Pull request #57 and issue #50: Add several compatibility methods for unittest
assertions that were renamed between Python 2 and 3.
- Issue #105 and pull request #58: Ensure `six.wraps` respects the *updated* and
*assigned* arguments.
- Issue #102: Add `raise_from` to abstract out Python 3's raise from syntax.
- Issue #97: Optimize `six.iterbytes` on Python 2.
- Issue #98: Fix `six.moves` race condition in multi-threaded code.
- Pull request #51: Add `six.view(keys|values|itmes)`, which provide dictionary
views on Python 2.7+.
----
11.0
----
* Interop #3: Upgrade to Packaging 15.0; updates to PEP 440 so that >1.7 does
not exclude 1.7.1 but does exclude 1.7.0 and 1.7.0.post1.
------
10.2.1
------
* Issue #323: Fix regression in entry point name parsing.
----
10.2
----
* Deprecated use of EntryPoint.load(require=False).
* Substantial refactoring of all unit tests. Tests are now much leaner and
re-use a lot of fixtures and contexts for better clarity of purpose.
----
10.1
----
* Issue #320: Added a compatibility implementation of
``sdist._default_revctrl``
so that systems relying on that interface do not fail (namely, Ubuntu 12.04
and similar Debian releases).
------
10.0.1
------
* Issue #319: Fixed issue installing pure distutils packages.
----
10.0
----
* Issue #313: Removed built-in support for subversion. Projects wishing to
retain support for subversion will need to use a third party library. The
extant implementation is being ported to `setuptools_svn
<https://pypi.python.org/pypi/setuptools_svn>`_.
* Issue #315: Updated setuptools to hide its own loaded modules during
installation of another package. This change will enable setuptools to
upgrade (or downgrade) itself even when its own metadata and implementation
change.
---
9.1
---
* Prefer vendored packaging library `as recommended
<170657b68f (commitcomment-9109448)>`_.
-----
9.0.1
-----
* Issue #312: Restored presence of pkg_resources API tests (doctest) to sdist.
---
9.0
---
* Issue #314: Disabled support for ``setup_requires`` metadata to avoid issue
where Setuptools was unable to upgrade over earlier versions.
---
8.4
---
* Pull Request #106: Now write ``setup_requires`` metadata.
Bugfix maintenance release. Fixes to hash table expansion now
completely hang all threads very briefly while the hash table
pointers are swapped. Once swapped, it unlocks and uses locks as
normal.
In previous versions, the hash table was switched to a global lock
instead of a map of bucket-locks during expansion. This should be
faster overall with a small latency penalty. It's possible to
presize the hash table with -o hashpower
libvisio 0.1.1
- Fix a minor issue reported by Coverity.
- Check arguments of public functions. Passing NULL no longer causes
a crash.
- Set a minimal thickness for arrow markers to ensure they are visible.
- Fix a crash when reading a broken file, found with the help of
american-fuzzy-lop.
- Use symbol visibility on Linux. The library only exports the two public
functions now.
- Import document metadata (fdo#86664).
libmspub 0.1.2
- Check arguments of public functions. Passing NULL no longer causes
a crash.
- Use symbol visibility on Linux. The library only exports the two public
functions now.
- Fix several crashes and hangs when reading broken files, found with the help
of american-fuzzy-lop.
- Add support for embedded fonts.
- Add initial support for tables.
- Parse document metadata.
2015-01-04 Moritz Bunkus <moritz@bunkus.org>
* Released v1.4.2.
2014-12-21 Moritz Bunkus <moritz@bunkus.org>
* build system: switched the build system from hand-crafted
Makefiles to an autoconf/automake-based system. A pkg-config file
will be installed as well; its name is »libmatroska«. Based on a
similar patch for libEBML by Jan Engelhardt <jengelh@inai.de>.
2014-12-20 Moritz Bunkus <moritz@bunkus.org>
* KaxBlock::ReadData(): fixed several instances of unchecked
memory access leading to invalid memory access/segmentation faults
with invalid or broken data inside block groups/simple blocks.
2014-12-19 Moritz Bunkus <moritz@bunkus.org>
* KaxBlock::ReadInternalHead(): fixed a off-by-one buffer overflow
if with EBML lacing and exactly one frame in the lace.
2015-01-04 Moritz Bunkus <moritz@bunkus.org>
* Released v1.3.1.
* EbmlElement::Render(): doesn't catch exceptions anymore. Instead
exceptions generated from the IOCallback class (e.g. if a write
failed) are propagated to the caller.
2014-12-21 Moritz Bunkus <moritz@bunkus.org>
* build system: switched the build system from hand-crafted
Makefiles to an autoconf/automake-based system. A pkg-config file
will be installed as well; its name is »libebml«. Patch by Jan
Engelhardt <jengelh@inai.de>.
2014-12-20 Moritz Bunkus <moritz@bunkus.org>
* EbmlMaster::Read(): when reading with SCOPE_ALL_DATA only those
elements that could successfully be read will be kept
(e.g. defective block groups will be dropped).
2014-12-19 Moritz Bunkus <moritz@bunkus.org>
* EbmlMemoryStream: add a new class for safe memory access that
throws exception on failures.
2014-12-18 Moritz Bunkus <moritz@bunkus.org>
* EbmlMaster: Fixed read() trying to calculate the end position of
elements with an unknown size. This avoids endless loops and
assertions in certain cases. See https://trac.bunkus.org/ticket/1089
--------------
Version 1.06b:
--------------
- Switched to slightly more accurate (if still not very helpful) reporting
of short read and short write errors. These theoretically shouldn't happen
unless you kill the forkserver or run out of disk space. Suggested by
Jakub Wilk.
- Revamped some of the allocator and debug code, adding comments and
cleaning up other mess.
- Tweaked the odds of fuzzing non-favored test cases to make sure that
baseline coverage of all inputs is reached sooner.
Fix bug #177: Plug leaking "result" structures when OpenLDAP is in use.
Truncate configuration file lines at carriage return.
Replace overlapping strlcpy() with memmove() in dkim_get_key_file().
Patch #32: Re-arrange the execution logic to drop privileges in
proper order.
LIBOPENDKIM: dkim_header() is now a lot more strict about the input
it will accept (see RFC5322 Section 2.2).
LIBOPENDKIM: Tighten relaxed modes to break on only DKIM-defined
whitespace characters.
LIBOPENDKIM: Fix bug #208: If a signature fails to verify for either
reason (header hash mismatched or body hash mismatched), set
DKIM_SIGERROR_BADSIG so that Authentication-Results doesn't
report a failure with "no signature error".
TOOLS: Feature request #178: Add "-F" flag to opendkim-genzone so
records are created with the FQDN.
REPUTATION: Handle parameters safely in repute.php.
- Allow spaces and arguments in one line block-func
- Fix to allow single char bold and italic phrases
- Refactor into OO classes
- Swim.pm is a converter class
- Swim::Command has all the bin/swim guts
- Add block-func support
NEWS for Mercury 14.01.1
------------------------
This is a bug-fix release.
* The function string.string/1 and related functions now handle version
arrays properly.
* Fix resource leaks in dir fold predicates.
* The mfilterjavac program is now generated with the correct file extension
on Windows.
* A problem that caused compilation of the Boehm GC to fail on 64-bit
openSUSE 13.1 systems has been fixed. (Github issue #14)
* The documentation now builds correctly on Cygwin systems.
* The script configure_mingw_cross now supports 64-bit Windows targets.
* We have added workarounds for problems with (arguably broken)
system headers on MinGW and MinGW64 systems.
* The MinGW port now builds in the absence of POSIX threads library.
* Low-level C parallel grades now work on Windows instead of crashing
at startup. (Bug #338)
* We now use thread-safe alternatives to strerror(). (Bug #340)
* We have added the configure option --enable-gc-mmap.
* We configure Boehm GC to use mmap in threaded grades on Linux to avoid
conflicts with glibc malloc leading to memory corruption.
* A problem that caused string.format/[23] to sometimes return incorrect
results when formatting floats with the 'g' conversion specifier has
been fixed. This bug only affected the non-C backends. (Bug #342)
* string.format now handles special float values (i.e. nan, inf, and -inf)
correctly with the non-C backends.
* A bug that caused io.write_float/[34] to append ".0" to float special values
has been fixed. This bug affected the C and C# backends.
* In the C# and Java grades, the predicate string.from_char_list now
implements the documented behaviour for input lists containing null
characters (i.e. it throws an exception).
Likewise, for string.from_reverse_char_list in the C# grade.
* We have fixed a problem that caused `mmc --make' to attempt to install
libraries in non-existent grades.
Changes to the Mercury compiler:
* The compiler now supports stripping of executables in a separate
post-link step. The new options, --strip-executable-command,
--strip-executable-shared-flags and --strip-executable-static-flags
are used to control this.
(This is now the default on Mac OS X systems.)
NEWS for Mercury 14.01
----------------------
Changes to the Mercury language:
* Repeated type variables may now occur in the heads of type class instances.
For example, instance declarations like the following are now allowed:
:- instance foo(list(T), map(T, T)).
Changes to the Mercury standard library:
* We have added the function cord.condense/1.
* The following functions in the standard library's cord module now use
constant stack space: foldl/3, foldl_pred/4.
* We have added the following predicates to the array and version_array
modules: is_empty/1, all_true/2 and all_false/2.
* We have added the following predicates and functions to the map module:
det_min_key/1, det_max_key/1, foldl2_values/6 and foldl3_values/8.
* We have added the following predicates to the list module: foldr2/6,
foldr3/8, det_take/3 and map_foldr/5.
* We have added the following predicates to the bag module: foldl/4 and
foldl2/6.
* We have added the following predicates to the assoc_list module:
foldl2_values/6 and foldl3_values/8.
* We have added the following predicates and functions to the pqueue module:
is_empty/1, peek/3, peek_key/2, peek_value/2, det_peek/3, merge/3,
det_peek_key/1 and det_peek_value/1.
* We have added the predicate bimap.equal/2.
* We have added the following predicates to the int module: fold_up3/9 and
fold_down3/9.
Changes to the Mercury compiler:
* On Mac OS X systems the compiler is now configured use the version of the
host system as the default value for the deployment target.
A new configuration option, `--with-macosx-deployment-target', allows
an alternative value to be selected at configuration time.
Portability improvements:
* We have made the implementation compatible with GCC 4.8 and Visual Studio
2013.
* We have made the implementation compatible with OS X 10.9.
Changes to the extras distribution:
* We've added a library that provides support for accessing the function
trail from Mercury code.
Upstream changes:
0.020 2015-01-03 20:32:21Z
- re-release to fix problematic $VERSION declaration (RT#101239)
0.019 2014-12-18 20:07:02Z
- fix test to allow for special characters (e.g. MSWin32 file
separators) in filenames (A. Sinan Unur)
0.018 2014-12-17 18:17:30Z
- fix test to not depend on message formatting changes in newer Carp
0.017 2014-12-16 20:17:22Z
- handle other warning handlers passing us partial warning messages
by re-adding the source file and line number
