TortoiseHg 4.2
TortoiseHg 4.2 is a regularly scheduled (quarterly) feature release, coinciding with Mercurial 4.2
Bug Fixes
customtools: do not crash by tool name containing dot (fixes#4740)
revdetails: convert issue patterns to unicode (fixes#4737)
win32: fix XLS hack in docdiff (refs #4540)
Improvements
archive: allow to archive "all files touched since X"
merge: respect 'merge-pattern' config when merging (fixes#1928)
status, repo: remove unnecessary invalidation (fsmonitor compatibility)
Installer
packaged with Mercurial 4.2 + 3 stable commits and one WIX fix commit
updated keyring and evolution
Mercurial 4.2 release
1. Features
Pager has moved from a bundled extension and into core.
The in-core pager is on by default for any command that can produce long output.
The pager extension is now deprecated. Please migrate off of it by removing extensions.pager from your configuration.
If you have the pager extension enabled, it will override the in-core pager and will work as before.
Unlike the pager extension, the in-core pager is disabled per underlying command, not per alias. This means that if you configure it to be off for log, it will be off for all aliases that use log. If you want paging e.g. for one log-alias but not for another, please keep the pager extension enabled for now.
The in-core pager does not yet support attending commands that were not designed for it, so third-party extensions will not be paged until they have been updated to use the in-core pager. If you want paging for a command from a third-party command, please keep the pager extension enabled for now.
See hg help pager for details.
Color is now a core feature on by default. See hg help color for details.
Set ui.color=never in your configuration to disable it.
The color extension is now deprecated. Please migrate off of it by removing extensions.color from your configuration.
The file content view on hgweb now allows you to select a range of lines and follow history of those lines over time.
hg update and hg rebase can now be configured to abort if no destination was explicitly given. This can be useful if your workflow is such that the destination is hard to predict. Set configuration option commands.update.requiredest=1 and commands.rebase.requiredest=1 to enable them.
hg status can now be configured to display the paths relative to the working directory. Set configuration option commands.status.relative=1 to enable that.
hg update learned to update across branches with a dirty working directory with --merge.
A new rev fileset has been introduced to evaluate a fileset in the context of specific revision.
A new status fileset has been introduced to simulate hg status between revisions and select files with desired properties. For example, to find files not modified between revisions 3.0 and .: hg files 'set:status("3.0", ., clean())'
A bundlespec help topic has been added. It documents the syntax used to define what is in a bundle file.
Clients can now define the path to a file containing cookies that should be sent in HTTP requests. See hg help config.auth.cookiefile.
2. Bug fixes
Aborts from an HTTP server are now properly reported back to the client instead of resulting in a 500 return code (f3807a135e43)
lock: remove possible confusion between pid from different namespace (1f151a33af8e)
color: fix handling of nested color (issue5413)
template: cleanly reject invalid argument passed to pad()
template: make pad() strip color codes before computing width (issue5416)
graphlog: properly display multiple edges towards null node (issue5440)
addremove: significant speedup on large repository (d3e2af4e0128, 985a98c6bad0)
fileset: significant speed up on large repository (992882cef7e1)
curses: fix the interactive hunk selection user interface on windows (issue5512)
hgwebdir: allow a repository to be hosted at "/"
bundle2: ignore errors seeking a bundle after an exception (issue4784)
templatefilters: fix crash by string formatting of '{x|splitlines}'
3. Improvements
merge: print message before launching external merge tool (4d019d0e1b3b),
profiling: add statprof support for Chrome trace viewer rendering (517bc1cd7033),
hg: allow usage of $XDG_CONFIG_HOME/hg/hgrc (354020079723),
matcher: adds a new rootfilesin: matcher type. It matches files inside a directory, but not any subdirectories.
sslutil: issue warning when [hostfingerprint] is used. The [hostsecurity] is better in everyway.
pager: improve error reporting when calling out to page (issue5491)
documentation: various improvements
hgweb: use monospace font for commit messages in gitweb theme
template: provide loop counter as "index" keyword
template: add support for keyword arguments
template: introduce new hybridlist and hybriddict function and the ability to define a dict in a template
hg: hardlink is enabled more widely on some filesystems, to speed up certain operations.
4. Extensions
bugzilla: add a REST API backend (usable with Bugzilla 5.0+) (78de43ab585f),
blackbox: allow to log time spent blocked (eg: waiting on user input) using the ui.logblockedtimes = on config option,
shelve: add -n/--name option to unshelve (issue5475)
patchbomb: add config knob to generate flags by template (issue5354)
rebase: fix a bug where public changeset could still be rebase in if the rebase set had multiple roots,
rebase: fix rebase possible rebase crash when working directory parent is obsolete (issue5219) (<1> not sure if we should include stuff touching experimental feature)
patchbomb: use a single pager to display all output from -n/--test (BC)
mq: reject new patch name containing leading/trailing whitespace
convert: fix the handling of empty changlist descriptions in P4
largefiles: set the extension as enabled locally after a share requiring it
Tor 0.3.0.7 fixes a medium-severity security bug in earlier versions
of Tor 0.3.0.x, where an attacker could cause a Tor relay process to
exit. Relays running earlier versions of Tor 0.3.0.x should upgrade;
clients are not affected.
o Major bugfixes (hidden service directory, security):
- Fix an assertion failure in the hidden service directory code,
which could be used by an attacker to remotely cause a Tor relay
process to exit. Relays running earlier versions of Tor 0.3.0.x
should upgrade. This security issue is tracked as TROVE-2017-002.
Fixes bug 22246; bugfix on 0.3.0.1-alpha.
o Minor features:
- Update geoip and geoip6 to the May 2 2017 Maxmind GeoLite2
Country database.
o Minor features (future-proofing):
- Tor no longer refuses to download microdescriptors or descriptors
if they are listed as "published in the future". This change will
eventually allow us to stop listing meaningful "published" dates
in microdescriptor consensuses, and thereby allow us to reduce the
resources required to download consensus diffs by over 50%.
Implements part of ticket 21642; implements part of proposal 275.
o Minor bugfixes (Linux seccomp2 sandbox):
- The getpid() system call is now permitted under the Linux seccomp2
sandbox, to avoid crashing with versions of OpenSSL (and other
libraries) that attempt to learn the process's PID by using the
syscall rather than the VDSO code. Fixes bug 21943; bugfix
on 0.2.5.1-alpha.
2016.74 - 21 July 2016
- Security: Message printout was vulnerable to format string injection.
If specific usernames including "%" symbols can be created on a system
(validated by getpwnam()) then an attacker could run arbitrary code as root
when connecting to Dropbear server.
A dbclient user who can control username or host arguments could potentially
run arbitrary code as the dbclient user. This could be a problem if scripts
or webpages pass untrusted input to the dbclient program.
CVE-2016-7406
https://secure.ucc.asn.au/hg/dropbear/rev/b66a483f3dcb
- Security: dropbearconvert import of OpenSSH keys could run arbitrary code as
the local dropbearconvert user when parsing malicious key files
CVE-2016-7407
https://secure.ucc.asn.au/hg/dropbear/rev/34e6127ef02e
- Security: dbclient could run arbitrary code as the local dbclient user if
particular -m or -c arguments are provided. This could be an issue where
dbclient is used in scripts.
CVE-2016-7408
https://secure.ucc.asn.au/hg/dropbear/rev/eed9376a4ad6
- Security: dbclient or dropbear server could expose process memory to the
running user if compiled with DEBUG_TRACE and running with -v
CVE-2016-7409
https://secure.ucc.asn.au/hg/dropbear/rev/6a14b1f6dc04
The security issues were reported by an anonymous researcher working with
Beyond Security's SecuriTeam Secure Disclosure www.beyondsecurity.com/ssd.html
- Fix port forwarding failure when connecting to domains that have both
IPv4 and IPv6 addresses. The bug was introduced in 2015.68
- Fix 100% CPU use while waiting for rekey to complete. Thanks to Zhang Hui P
for the patch
2016.73 - 18 March 2016
- Support syslog in dbclient, option -o usesyslog=yes. Patch from Konstantin Tokarev
- Kill a proxycommand when dbclient exits, patch from Konstantin Tokarev
- Option to exit when a TCP forward fails, patch from Konstantin Tokarev
- New "-o" option parsing from Konstantin Tokarev. This allows handling some extra options
in the style of OpenSSH, though implementing all OpenSSH options is not planned.
- Fix crash when fallback initshells() is used, reported by Michael Nowak and Mike Tzou
- Allow specifying commands eg "dropbearmulti dbclient ..." instead of symlinks
- Various cleanups for issues found by a lint tool, patch from Francois Perrad
- Fix tab indent consistency, patch from Francois Perrad
- Fix issues found by cppcheck, reported by Mike Tzou
- Use system memset_s() or explicit_bzero() if available to clear memory. Also make
libtomcrypt/libtommath routines use that (or Dropbear's own m_burn()).
- Prevent scp failing when the local user doesn't exist. Based on patch from Michael Witten.
- Improved Travis CI test running, thanks to Mike Tzou
- Improve some code that was flagged by Coverity and Fortify Static Code Analyzer
2016.72 - 9 March 2016
- Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions,
found by github.com/tintinweb. Thanks for Damien Miller for a patch. CVE-2016-3116
https://secure.ucc.asn.au/hg/dropbear/rev/a3e8389e01ff
2015.71 - 3 December 2015
- Fix "bad buf_incrpos" when data is transferred, broke in 2015.69
- Fix crash on exit when -p address:port is used, broke in 2015.68, thanks to
Frank Stollenwerk for reporting and investigation
- Fix building with only ENABLE_CLI_REMOTETCPFWD given, patch from Konstantin Tokarev
- Fix bad configure script test which didn't work with dash shell, patch from Juergen Daubert,
broke in 2015.70
- Fix server race condition that could cause sessions to hang on exit,
https://github.com/robotframework/SSHLibrary/issues/128
2015.70 - 26 November 2015
- Fix server password authentication on Linux, broke in 2015.69
2015.69 - 25 November 2015
- Fix crash when forwarded TCP connections fail to connect (bug introduced in 2015.68)
- Avoid hang on session close when multiple sessions are started, affects Qt Creator
Patch from Andrzej Szombierski
- Reduce per-channel memory consumption in common case, increase default
channel limit from 100 to 1000 which should improve SOCKS forwarding for modern
webpages
- Handle multiple command line arguments in a single flag, thanks to Guilhem Moulin
- Manpage improvements from Guilhem Moulin
- Build fixes for Android from Mike Frysinger
- Don't display the MOTD when an explicit command is run from Guilhem Moulin
- Check curve25519 shared secret isn't zero
2015.68 - Saturday 8 August 2015
- Reduce local data copying for improved efficiency. Measured 30%
increase in throughput for connections to localhost
- Forwarded TCP ports connect asynchronously and try all available addresses
(IPv4, IPv6, round robin DNS)
- Fix all compile warnings, many patches from Gaël Portay
Note that configure with -Werror may not be successful on some platforms (OS X)
and some configuration options may still result in unused variable
warnings.
- Use TCP Fast Open on Linux if available. Saves a round trip at connection
to hosts that have previously been connected.
Needs a recent Linux kernel and possibly "sysctl -w net.ipv4.tcp_fastopen=3"
Client side is disabled by default pending further compatibility testing
with networks and systems.
- Increase maximum command length to 9000 bytes
- Free memory before exiting, patch from Thorsten Horstmann. Useful for
Dropbear ports to embedded systems and for checking memory leaks
with valgrind. Only partially implemented for dbclient.
This is disabled by default, enable with DROPBEAR_CLEANUP in sysoptions.h
- DROPBEAR_DEFAULT_CLI_AUTHKEY setting now always prepends home directory unless
there is a leading slash (~ isn't treated specially)
- Fix small ECC memory leaks
- Tighten validation of Diffie-Hellman parameters, from Florent Daigniere of
Matta Consulting. Odds of bad values are around 2**-512 -- improbable.
- Twofish-ctr cipher is supported though disabled by default
- Fix pre-authentication timeout when waiting for client SSH-2.0 banner, thanks
to CL Ouyang
- Fix null pointer crash with restrictions in authorized_keys without a command, patch from
Guilhem Moulin
- Ensure authentication timeout is handled while reading the initial banner,
thanks to CL Ouyang for finding it.
- Fix null pointer crash when handling bad ECC keys. Found by afl-fuzz
2015.67 - Wednesday 28 January 2015
- Call fsync() after generating private keys to ensure they aren't lost if a
reboot occurs. Thanks to Peter Korsgaard
- Disable non-delayed zlib compression by default on the server. Can be
enabled if required for old clients with DROPBEAR_SERVER_DELAY_ZLIB
- Default client key path ~/.ssh/id_dropbear
- Prefer stronger algorithms by default, from Fedor Brunner.
AES256 over 3DES
Diffie-hellman group14 over group1
- Add option to disable CBC ciphers.
- Disable twofish in default options.h
- Enable sha2 HMAC algorithms by default, the code was already required
for ECC key exchange. sha1 is the first preference still for performance.
- Fix installing dropbear.8 in a separate build directory, from Like Ma
- Allow configure to succeed if libtomcrypt/libtommath are missing, from Elan Ruusamäe
- Don't crash if ssh-agent provides an unknown type of key. From Catalin Patulea
- Minor bug fixes, a few issues found by Coverity scan
2014.66 - Thursday 23 October 2014
- Use the same keepalive handling behaviour as OpenSSH. This will work better
with some SSH implementations that have different behaviour with unknown
message types.
- Don't reply with SSH_MSG_UNIMPLEMENTED when we receive a reply to our own
keepalive message
- Set $SSH_CLIENT to keep bash happy, patch from Ryan Cleere
- Fix wtmp which broke since 2013.62, patch from Whoopie
2014.65 - Friday 8 August 2014
- Fix 2014.64 regression, server session hang on exit with scp (and probably
others), thanks to NiLuJe for tracking it down
- Fix 2014.64 regression, clock_gettime() error handling which broke on older
Linux kernels, reported by NiLuJe
- Fix 2014.64 regression, writev() could occassionally fail with EAGAIN which
wasn't caught
- Avoid error message when trying to set QoS on proxycommand or multihop pipes
- Use /usr/bin/xauth, thanks to Mike Frysinger
- Don't exit the client if the local user entry can't be found, thanks to iquaba
2014.64 - Sunday 27 July 2014
- Fix compiling with ECDSA and DSS disabled
- Don't exit abruptly if too many outgoing packets are queued for writev(). Patch
thanks to Ronny Meeus
- The -K keepalive option now behaves more like OpenSSH's "ServerAliveInterval".
If no response is received after 3 keepalives then the session is terminated. This
will close connections faster than waiting for a TCP timeout.
- Rework TCP priority setting. New settings are
if (connecting || ptys || x11) tos = LOWDELAY
else if (tcp_forwards) tos = 0
else tos = BULK
Thanks to Catalin Patulea for the suggestion.
- Improve handling of many concurrent new TCP forwarded connections, should now
be able to handle as many as MAX_CHANNELS. Thanks to Eduardo Silva for reporting
and investigating it.
- Make sure that exit messages from the client are printed, regression in 2013.57
- Use monotonic clock where available, timeouts won't be affected by system time
changes
- Add -V for version
2014.63 - Wednesday 19 February 2014
- Fix ~. to terminate a client interactive session after waking a laptop
from sleep.
- Changed port separator syntax again, now using host^port. This is because
IPv6 link-local addresses use %. Reported by Gui Iribarren
- Avoid constantly relinking dropbearmulti target, fix "make install"
for multi target, thanks to Mike Frysinger
- Avoid getting stuck in a loop writing huge key files, reported by Bruno
Thomsen
- Don't link dropbearkey or dropbearconvert to libz or libutil,
thanks to Nicolas Boos
- Fix linking -lcrypt on systems without /usr/lib, thanks to Nicolas Boos
- Avoid crash on exit due to cleaned up keys before last packets are sent,
debugged by Ronald Wahl
- Fix a race condition in rekeying where Dropbear would exit if it received a
still-in-flight packet after initiating rekeying. Reported by Oliver Metz.
This is a longstanding bug but is triggered more easily since 2013.57
- Fix README for ecdsa keys, from Catalin Patulea
- Ensure that generated RSA keys are always exactly the length
requested. Previously Dropbear always generated N+16 or N+15 bit keys.
Thanks to Unit 193
- Fix DROPBEAR_CLI_IMMEDIATE_AUTH mode which saves a network round trip if the
first public key succeeds. Still not enabled by default, needs more
compatibility testing with other implementations.
- Fix for port 0 forwarding in the client and port forwarding with Apache MINA SSHD.
- Fix for bad system linux/pkt-sched.h header file with older Linux
kernels, from Steve Dover
- Fix signal handlers so that errno is saved, thanks to Erik Ahlén for a patch
and Mark Wickham for independently spotting the same problem.
There are no release notes from upstream (short of commit
logs), here is a partial list of changes:
- no more manual window placement
- color support
- support for fullscreen and shaped windows
- format string and memory fixes
- compatibility fixes for some toolkits
- window titles are UTF-8
Changelog:
ARM
Support for the ARMv5 and ARMv5E architectures has been deprecated (which have no known implementations) and will be removed in a future GCC release. Note that ARMv5T, ARMv5TE and ARMv5TEJ architectures remain supported. The values armv5 and armv5e of -march are thus deprecated.
The ARMv8.2-A architecture and the ARMv8.2-A 16-bit Floating-Point Extensions are now supported. They can be used by specifying the -march=armv8.2-a or -march=armv8.2-a+fp16 options. The 16-bit Floating-Point Extensions introduce new half-precision data processing floating-point instructions.
The ARMv8-M architecture is now supported in its two architecture profiles: ARMv8-M Baseline and ARMv8-M Mainline with its DSP and Floating-Point Extensions. They can be used by specifying the -march=armv8-m.base, armv8-m.main or armv8-m.main+dsp options.
Support has been added for the following processors (GCC identifiers in parentheses): ARM Cortex-A73 (cortex-a73), ARM Cortex-M23 (cortex-m23) and ARM Cortex-M33 (cortex-m33). The GCC identifiers can be used as arguments to the -mcpu or -mtune options, for example: -mcpu=cortex-a73 or -mtune=cortex-m33.
A new command-line option -mpure-code has been added. It does not allow constant data to be placed in code sections. This option is only available when generating non-PIC code for ARMv7-M targets.
Support for the ACLE Coprocessor Intrinsics has been added. This enables the generation of coprocessor instructions through the use of intrinsics such as cdp, ldc, and others.
The configure option --with-multilib-list now accepts the value rmprofile to build multilib libraries for a range of embedded targets. See our installation instructions for details.
I have just released 1.1.13 of libmtp.
- Fixed GetPartialObject64 on non-x86_64
- Lots of USB ID additions.
- Some bugworkaround flags removed for Samsung Galaxy and Motorola G 2nd edition
(proplistget and proplistgetall bug flags)
pkgsrc change:
Really make libgcrypt optional.
- version: 2.85.1
date: 2017-05-12
new features:
- title: "Book details panel: Allow right click to search the internet for the current book"
- title: "Book details panel: Allow right clicking on an author name to search the internet for works by that author"
- title: "Book details panel: Clicking an author name now searches Goodreads by default instead of Wikipedia. Can be changed in Preferences->Look & feel->Book details"
- title: "Kobo driver: Add support for the Kobo Auro H2O Edition 2"
bug fixes:
- title: "PDF Output: Fix a regression in the previous release that broke conversion to PDF for some files."
- title: "DOCX Output: Fix lengths specified in percentage of page size not being converted correctly."
- title: "DOCX Output: Fix some hyperlinks not working in word because the bookmark name is longer than forty characters."
- title: "DOCX Output: Prevent images from being larger than the page size."
- title: "Comic Input: Fix the number of colors control not allowing values less than 8"
- title: "Kobo driver: Fix main memory and Card A being swapped on some systems"
- title: "Kobo driver: Fix the ignore collections option being accidentally case-insensitive"
- title: "Preferences->Toolbars: Show an error message when the user tries to remove either the Preferences or Location Manager buttons instead of just silently adding them back."
- title: "version 2.85.1 contains a fix for a regression that cause the Open with action to go missing from the right click menu of the Book details panel"
improved recipes:
- Private Eye
new recipes:
- title: Balkanist
author: Darko Miletic
- version: 2.84.0
date: 2017-05-05
new features:
- title: "Kindle driver: Also delete book thumbnails from the system directory when deleting books."
- title: "Conversion: Use the same regular expression engine as is used by the Edit Book tool. The new engine has much better support for Unicode characters/character classes."
- title: "Edit Book: Add keyboard shortcuts to jump to opening and closing tags (Ctrl+{ and Ctrl+})"
- title: "Add API to pre-process image data in recipes easily"
- title: "fetch-ebook-metadata: add option to use only a single metadata plugin"
bug fixes:
- title: "E-book viewer: Fix a regression in the previous release that broke printing from inside the viewer."
- title: "DOCX Output: When the input document contains paragraphs inside a block with a background color preserve the background color in the resulting paragraphs in the DOCX document."
- title: "DOCX Output: Fix links to empty inline tags not working."
- title: "DOCX Input: Fix links that point to anchors placed in empty paragraphs not working."
- title: "PDF Output: Do not crash when unable to find page for link destination, instead use previous page."
- title: "Edit Book: Fix sorting by language in Report->Words not working"
- title: "Edit Book: Fix drag and drop of multiple items in the File Browser causing item order to be reversed."
- title: "Get Books: Update Baen store plugin for website changes"
- title: "Linux: When adding books from directories ignore files that have undecodable names."
- title: "AZW3: Preserve the primary-writing-mode EXTH header field when round-tripping AZW3 files. Should fix editing/conversion of RTL AZW3 files causing page turning to become left-to-right on the Kindle"
- title: "AZW3 Output: Set the primary-writing-mode EXTH header when the input document has page-progression-direction set to RTL as this is apparently required on newer Kindle firmware for right-to-left page turning"
- title: "Fix a misbehaving wireless device connection can cause calibre to hang when opening the Connect/Share menu."
improved recipes:
- Private Eye
- Die Zeit
- NYTimes Tech Beat
new recipes:
- title: First Things
author: John Hutson
Changelog:
pdf2djvu (0.9.5) unstable; urgency=low
[ Jakub Wilk ]
* Improve error handling:
+ Fix temporary files removal order.
https://github.com/jwilk/pdf2djvu/issues/114
+ Ignore duplicate page titles (with warning).
Thanks to Juan Francisco Cantero Hurtado for the bug report.
https://github.com/jwilk/pdf2djvu/issues/113
* Fix creating bookmarks with more than 255 children.
Regression introduced in 0.7.20.
* Fix incorrect progress output in parallel mode.
* Windows: fix console output encoding.
https://github.com/jwilk/pdf2djvu/issues/64
* Upgrade libraries bundled with the Windows package:
- Poppler 0.49;
- DjvuLibre 3.5.27;
- GraphicsMagick 1.3.25;
- Expat 2.2.0;
- FreeType 2.6.5;
- fontconfig 2.12.1;
- gettext 0.19.8.1.
* Improve documentation:
+ Don't mention “--page-title-template=” as a way of disabling page
titles. This works only if “--no-page-titles” works; there's no reason
to prefer the former.
Thanks to Roland Winkler for the bug report.
+ Update nose homepage URL.
+ Update OpenMP URLs.
+ Fix typos.
* Improve the test suite:
+ Fix test failure on GNU/Hurd, which doesn't correctly propagate virtual
memory limits to subprocesses.
http://savannah.gnu.org/bugs/?43320
* Drop support for Poppler < 0.17.
* Build with “-std=gnu++98”.
* Build with “-Wempty-body”.
* Build with “-Werror=misleading-indentation”.
* Don't enable unknown warning options for clang.
* Update the Polish translation.
[ Américo Monteiro ]
* Update the Portuguese translation.
[ Chris Leick ]
* Update the German translation.
[ Kyrill Detinov ]
* Update the Russian translation.
-- Jakub Wilk <jwilk@jwilk.net> Wed, 14 Dec 2016 23:39:19 +0100
Noteworthy changes in version 2.1.21 (2017-05-15)
-------------------------------------------------
* gpg,gpgsm: Fix corruption of old style keyring.gpg files. This
bug was introduced with version 2.1.20. Note that the default
pubring.kbx format was not affected.
* gpg,dirmngr: Removed the skeleton config file support. The
system's standard methods for providing default configuration
files should be used instead.
* w32: The Windows installer now allows installion of GnuPG without
Administrator permissions.
* gpg: Fixed import filter property match bug.
* scd: Removed Linux support for Cardman 4040 PCMCIA reader.
* scd: Fixed some corner case bugs in resume/suspend handling.
* Many minor bug fixes and code cleanup.
Changelog:
Bugfixes:
1 JDK-7155957 client‑libs java.awt closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java hangs on win 64 bit with jdk8
2 JDK-8035568 client‑libs java.awt [macosx] Cursor management unification
3 JDK-8079595 client‑libs java.awt Resizing dialog which is JWindow parent makes JVM crash
4 JDK-8169589 client‑libs java.awt [macosx] Activating a JDialog puts to back another dialog
5 JDK-8147842 client‑libs javax.swing IME Composition Window is displayed at incorrect location
6 JDK-7167293 core‑libs java.net FtpURLConnection connection leak on FileNotFoundException
7 JDK-8169465 core‑libs javax.naming Deadlock in com.sun.jndi.ldap.pool.Connections
8 JDK-8133045 deploy deployment_toolkit java.lang.SecurityException: Failed to extract baseline.versions error
9 JDK-8028538 deploy webstart Fedora Linux issue with jnlp‑servlet.jar demo source code license
10 JDK-8170646 deploy webstart JNLP fails to get loaded with old javaws when multiple jres (jre9 and jre8u111) installed
11 JDK-8075196 docs guides CosNaming's implementation doesn't comply with the specification
12 JDK-8161147 hotspot compiler jvm crashes when ‑XX:+UseCountedLoopSafepoints is enabled
13 JDK-8161993 hotspot gc G1 crashes if active_processor_count changes during startup
14 JDK-8147910 hotspot runtime Cache initial active_processor_count
15 JDK-8150490 hotspot runtime Update OS detection code to recognize Windows Server 2016
16 JDK-8170888 hotspot runtime [linux] Experimental support for cgroup memory limits in container (ie Docker) environments
17 JDK-8166208 hotspot svc FlightRecorderOptions settings for defaultrecording ignored.
18 JDK-8161945 install install REGRESSION: 8u91 update of 32 bit JRE removes preferences of the 64 bit JRE
19 JDK-8172932 install install JRE installation fails with 1603 on Windows 10 with enabled Deviceguard
20 JDK-8089915 javafx web Input of type file doesn't honor "accept" attribute.
21 JDK-8090216 javafx web HTMLEditor: font bold doesn't work when an indent is set
22 JDK-8144263 javafx web [WebView, OS X] Webkit rendering artifacts with inertia scrolling
23 JDK-8150982 javafx web Crash when calling WebEngine.print on background thread
24 JDK-8164314 javafx web [WebView] Debug build is no longer working after JDK‑8089681
25 JDK-8165098 javafx web WebEngine.print will attempt to print even if the printer job is complete or has an error
26 JDK-8165173 javafx web canvas/philip/tests/2d.path.clip.empty.html fails with 8u112
27 JDK-8165508 javafx web Incorrect Bug ID in comment for JDK-8164076
28 JDK-8166231 javafx web use @Native annotation in web classes
29 JDK-8166677 javafx web HTMLEditor freezes after restoring previously maximized window
30 JDK-8166775 javafx web Audio slider works incorrectly for short files
31 JDK-8166999 javafx web Update to newer version of WebKit
32 JDK-8167098 javafx web Backport of JDK‑8158926 to JDK 8u mistakenly used preliminary patch
33 JDK-8167100 javafx web Minor source diffs introduced in backports of JDK-8160837 and JDK-8163582
34 JDK-8167675 javafx web Animated gifs are not working
35 JDK-8169204 javafx web Need to document JSObject Call and setSlot APIs to use weak references
36 JDK-8170585 javafx web Fix PlatformContextJava type leaking to GraphicsContext
37 JDK-8170938 javafx web Memory leak in JavaFX WebView
38 JDK-8173783 security‑libs javax.net.ssl IllegalArgumentException: jdk.tls.namedGroups
39 JDK-6474807 security‑libs javax.smartcardio (smartcardio) CardTerminal.connect() throws CardException instead of CardNotPresentException
40 JDK-8168774 tools javac Polymorhic signature method check crashes javac
41 JDK-8167485 tools visualvm Integrate new version of Java VisualVM based on VisualVM 1.3.9 into JDK
42 JDK-8167179 xml jaxp Make XSL generated namespace prefixes local to transformation process
Changelog:
Overview of Changes from GIMP 2.8.20 to GIMP 2.8.22
===================================================
GUI:
- improve drawing performance in single window mode, especially with
pixmap themes
macOS DMG:
- Make the launcher script also set BABL_PATH
- Add patch for GTK+ Bug 743717 to the build which concerns crashes
during clipboard operations with a clipboard manager active
- Add patch for GTK+ Bug 767091 to the build which concerns crashes
on some drag & drop operations
- generate OSX package metadata during build
Plug-ins:
- Fix for CVE-2007-3126, a bug in the ICO plug-in which allowed
context-dependent attackers to cause a denial of service (crash)
via an ICO file with an InfoHeader containing a Height of zero.
We couldn't reproduce any crash in recent version, but fixed the
error messages for good measure
- Avoid creating wrong layer group structure when importing PSD
files (already fixed in 2.8.20, didn't make it to the NEWS)
- Prevent a crash in PDF plug-in if images or resolution are large
- stop parsing invalid PCX files early and prevent a segmentation fault
General:
- if NOCONFIGURE is set, autogen.sh won't run configure
- VPATH builds for win32 targets have been fixed
Updated Translations:
- Basque
- Brazilian Portuguese
- Catalan
- Chinese (PRC)
- Finnish
- Greek
- Hungarian
- Italian
- Kazakh
- Norwegian
- Polish
- Slovenian
- Spanish
- Swedish
alsa is not supported upstream, and checks for failures by calling assert,
which means the default setup crashes whenever audio is played.
bump pkgrevision
