Pylint 1.8.3:
* Fix false positive inconsistent-return-statements message when a
function is defined under an if statement.
* Exempt __doc__ from triggering a redefined-builtin
__doc__ can be used to specify a docstring for a module without
passing it as a first-statement string.
* Don't crash on invalid strings when checking for logging-format-interpolation
* Fix false positive inconsistent-return-statements message by
avoiding useless exception inference if the exception is not handled.
* Fix false positive undefined-variable for lambda argument in
class definitions
* Fix false-positive undefined-variable for generated
comprehension variables in function default arguments
1.6.2
* Fix submodule imports from six
* Enhancement of brain_numpy by adding different types from
numpy.core.numerictypes
* Fix RecursionError for augmented assign
* Stop most inference tip overwrites from happening by using
predicates on existing inference_tip transforms.
* Add missing attrs special attribute
* Fix contextlib.contextmanager inference for nested context managers
Trusted QSL V2.3.1 Release Notes
This version of Trusted QSL (TQSL) has new features as well as
corrections for defects found since TQSL 2.3 was
released. This release also includes an update to the most
recent TQSL configuration file.
TQSL 2.3.1 can be installed to upgrade any older version of TQSL.
On all three supported platforms (Windows, MacOS, and Linux),
installing TQSL 2.3.1 will replace older versions of Trusted
QSL while preserving your Callsign Certificates, Station
Locations, and preferences. On Windows, simply run the TQSL
2.3.1 installer, which will automatically uninstall older
versions of TQSL (and, if installed, TQSLCert). On Mac OS X,
open the disk image (.dmg) file and drag the “Trusted QSL”
folder to your Applications folder. Direct the installer to
“Replace All”, which will uninstall old files. For Linux
systems, unpack the tar file and read the INSTALL file for
directions.
TQSL 2.3 has been “localized” to allow use in the native
language of non-English speakers. This could not have been
done without the help of the volunteers who have contributed
translations for TQSL. Thanks to the following for their
assistance:
Chinese: Caros, BH4TXN
Finnish: Juhani, OH8MXL
German: Andreas DF4WC
Italian: Salvatore IV4FYV
Japanese: Akihiro JL3OXR
Portuguese: Nuno CT2IRY
Russian: Vic US5WE
Spanish: Jordi EA3GCV
The following list describes the major changes in the v2.3.1 release of Trusted QSL.
TQSL changes
Defects Corrected:
- Added 'Saving QSOs' to the messages to be translated.
- When renewing a callsign certificate and backing up to
earlier pages in the wizard, TQSL could display an unexpected
page for selecting the certificate type, which is not needed
for renewals. TQSL will no longer display the unexpected page.
- When editing an ADIF file that has an invalid mode setting,
TQSL now notifies the user that the mode is being ignored.
- For Unix systems, fix a defect that could cause the password
prompt to not appear when the system has built the wxWidgets
system with debug assertions enabled.
- Correct the invocation of the Windows Installer when an
update is available.
- Correct the counts reported when duplicate QSOs are found
along with QSOs with other errors.
- Fix formatting of the messages that appear when QSOs change
values in the station location for duplicate QSOs.
- Correct improperly formatted frequencies from ADIF files
(values like '7.010.20') to remove the extra periods.
- Revert the change that stripped spaces in the TQSL
configuration file as that caused newlines to be removed in
places like the station_data file.
- Fix "OpenSSL error - bad end line" by ensuring that there's
always a newline starting a new certificate.
Feature Additions:
- Add Finnish translation from Juhani, OH8MXL.
- Add the ADIF satellite name to the pulldown menu in the ADIF
editor to allow satellites to be more easily looked up.
- Allow 'LIGHT' in a Cabrillo file to represent 300 GHz and above.
- Allow TQSL to build against OpenSSL 1.1.0.
- Add the ability to pull DXCC Entity valid date ranges from the TQSL configuration file.
Reinstalling TQSL 2.3
Downgrading to TQSL 2.3 can be seamlessly performed by
uninstalling TQSL 2.3.1 and reinstalling TQSL 2.3.
* Use c++03 to fix build.
* ppc binary is not PaX MPROTECT safe.
Changelog:
version 0.5 (released 13. July 2011):
- slightly better code for lmw/stmw opcodes
- use "GNU as" instead of nasm
- use -mdynamic-no-pic on *darwin
- fixed some strict-aliasing problems
- JITC: AMD64 support
- compiles with gcc 4.3, 4.4, 4.5
* Require devel/nspr-4.19
Changelog:
The NSS team has released Network Security Services (NSS) 3.36,
which is a minor release.
Summary of the major changes included in this release:
- Replaced existing vectorized ChaCha20 code with verified
HACL* implementation.
- Experimental APIs for TLS session cache handling.
Changelog:
NSPR 4.19 contains the following changes:
- changed order of shutdown cleanup to avoid a crash on Mac OSX
- build compatibility with Android NDK r16 and glibc 2.26
Changelog:
59.0.1
Security fix
#CVE-2018-5146: Out of bounds memory write in libvorbis
59.0
New
Performance enhancements:
- Faster load times for content on the Firefox Home page
- Faster page load times by loading either from the networked cache
or the cache on the user's hard drive (Race Cache With Network)
- Improved graphics rendering using Off-Main-Thread Painting (OMTP)
for Mac users (OMTP for Windows was released in Firefox 58)
Drag-and-drop to rearrange Top Sites on the Firefox Home page, and
customize new windows and tabs in other ways
Added features for Firefox Screenshots:
- Basic annotation lets the user draw on and highlight saved screenshots
- Recropping to change the viewable area of saved screenshots
Enhanced WebExtensions API including better support for decentralized
protocols and the ability to dynamically register content scripts
Improved Real-Time Communications (RTC) capabilities.
- Implemented RTP Transceiver to give pages more fine grained control
over calls
- Implemented features to support large scale conferences
Added support for W3C specs for pointer events and improved platform
integration with added device support for mouse, pen, and touch
screen pointer input
Added the Ecosia search engine as an option for German Firefox
Added the Qwant search engine as an option for French Firefox
Added settings in about:preferences to stop websites from asking to
send notifications or access your device's camera, microphone, and
location, while still allowing trusted websites to use these features
Fixed
Various security fixes
Changed
Firefox Private Browsing Mode will remove path information from
referrers to prevent cross-site tracking
Security fixes:
#CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
#CVE-2018-5128: Use-after-free manipulating editor selection ranges
#CVE-2018-5129: Out-of-bounds write with malformed IPC messages
#CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption
#CVE-2018-5131: Fetch API improperly returns cached copies of
no-store/no-cache resources
#CVE-2018-5132: WebExtension Find API can search privileged pages
#CVE-2018-5133: Value of the app.support.baseURL preference is not properly
sanitized
#CVE-2018-5134: WebExtensions may use view-source: URLs to bypass content
restrictions
#CVE-2018-5135: WebExtension browserAction can inject scripts into
unintended contexts
#CVE-2018-5136: Same-origin policy violation with data: URL shared workers
#CVE-2018-5137: Script content can access legacy extension
non-contentaccessible resources
#CVE-2018-5138: Android Custom Tab address spoofing through long domain names
#CVE-2018-5140: Moz-icon images accessible to web content through moz-icon:
protocol
#CVE-2018-5141: DOS attack through notifications Push API
#CVE-2018-5142: Media Capture and Streams API permissions display
incorrect origin with data: and blob: URLs
#CVE-2018-5143: Self-XSS pasting javascript: URL with embedded tab into
addressbar
#CVE-2018-5126: Memory safety bugs fixed in Firefox 59
#CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
remote code execution via ogg files.
Note firefox52 nor this patches tremor, so the vulnerability still exists
for ARM (which uses tremor rather than vorbis).
Blind commit. I don't have the resources to build so many firefoxes.
However it is based off firefox52.
PKGREVISION++
This fixes an out of bound write, but possibly many other changes.
Unfortunately upstream doesn't do releases for tremor, so I manually
fetch the tarball and uploaded it.
Use boost::make_shared instead of std::make_shared in a few places
where it doesn't compile with netbsd-7/gcc4.8.5. I'm not sure, there
may be a more portable way to handle.
