Security Vulnerabilities fixed in Firefox 82.0.3, Firefox ESR 78.4.1, and Thunderbird 78.4.2
#CVE-2020-26950: Write side effects in MCallGetProperty opcode not accounted for
Based on work by Dan Cîrnaț and myself.
gnome-session contains the GNOME session manager, as well as a
configuration program to choose applications starting on login.
Based on work by Dan Cîrnaț and myself in pkgsrc-wip.
Mutter is a window and compositing manager that displays and manages your
desktop via OpenGL. Mutter combines a sophisticated display engine using
the Clutter toolkit with solid window-management logic inherited from the
Metacity window manager.
Change log:
pluma 1.24.1
* Translations update
* build: silent build warnings for distcheck
* help: Remove Open Location from shortcut keys table
* build: do not override the default value for MATE_COMPILE_WARNINGS
* Use user page on github when user email is private
* Update authors
Change log:
mate-terminal 1.24.1
* Translations update
* build: silent build warnings for distcheck
* build: do not override the default value for MATE_COMPILE_WARNINGS
* fix searching in terminal window
* fix url highlighting due to deprecation of vte_terminal_match_add_gregex
* terminal-screen: prevent crash on bad term spawn due to redundant frees
* Use user page on github when user email is private
* Update authors
## Version 2.0.3 - 8-Nov-2020
* Added support for handling "slim" format zoneinfo files that are produced by
default by zic version 2020b and later. The POSIX-style TZ string is now used
calculate DST transition times after the final defined transition in the file.
#120.
* Fixed `TimeWithOffset#getlocal` returning a `TimeWithOffset` with the
`timezone_offset` still assigned when called with an offset argument on JRuby
9.3.
* Rubinius is no longer supported.
10.1.0 -- 2020-10-31
--------------------
* compatibility with Mercurial 5.6
* numerous minor changes to packaging, Makefile, README moved to README.rst
* evolve: various improvements to content-divergence resolution
* evolve: fix various issues with --continue when solving content-divergence
* evolve: specify the source of config override for `server.bundle1=no`
* evolve: avoid leaving mergestate after instability resolution
* evolve: while resolving conflicts, the evolved node will no longer be a
dirstate parent (won't show up in `hg parents` and not as `@` in `hg log -G`,
but it will show up as `%` with hg >= 5.4)
* metaedit: update bookmark location when applicable
* rewind: add a --dry-run flag
* rewind: properly record rewind of splits as folds
topic (0.20.0)
* stack: support foo#stack relation revset (hg-5.4+ only)
* merge: add a experimental.topic.linear-merge option to allow oedipus merges
in some cases
On Wednesday, November 7th, 2000, George W. Williams V first
published a piece of software called PfaEdit that allowed rudimentary
editing of PostScript fonts. It lacked the features and polish of
such prominent products as Fontographer and Font Studio, but it
had one big advantage: it was free.
Twenty years later, Fontographer and FontStudio are gone, and the
whereabouts of George Williams are unknown, but FontForge has grown
into a highly capable and mature product. It supports dozens of
file formats and includes such features as spline stroking, overlap
removal, and Python scripting. And it is still free software. With
over 100,000 users, it is the most widely used typeface design tool
in the world.
It may seem anti-climactic that today's 20th anniversary release
includes no major changes or new features, but it perfectly befits
a product that has evolved carefully and slowly over its entire
lifecycle with almost no breaking changes. Whether for the special
commemorative splash screen or for the countless small improvements
and fixes, we hope that you will try it. It is available, as always,
on the FontForge website <https://fontforge.org/>;.
The entire project team thank you for your support.
Fixes
Fixed possible infinite loop when combining generators with section filter (-c option) (#2025)
Miscellaneous
Fixed ParseAndAddCatchTests not finding TEST_CASEs without tags (#2055, #2056)
ParseAndAddCatchTests supports CMP0110 policy for changing behaviour of add_test (#2057)
This was the shortlived change in CMake 3.18.0 that temporarily broke ParseAndAddCatchTests
Features
No new features have been added in this release.
Experimental
We have added support for a new allExperiments setting. By enabling
this flag, you will enable all experimental features that we intend
to roll out slowly. You can still disable individual settings (full
list of settings). In-progress features, such as multi-module
workspaces (below), will remain disabled until they are ready for
users.
Improved CPU utilization: experimentalDiagnosticsDelay
experimentalDiagnosticsDelay controls the amount of time that gopls
waits after the most recent file modification before computing deep
diagnostics. Simple diagnostics (parsing and type-checking) are
always run immediately on recently modified packages.
Enable it by setting it to a duration string, for example "200ms".
With allExperiments, this is set to "200ms".
Improved memory usage for workspaces with multiple folders:
experimentalPackageCacheKey
experimentalPackageCacheKey controls whether to use a coarser cache
key for package type information. If you use the gopls daemon, this
may reduce your total memory usage.
Enable it by setting it to true. With allExperiments, this is set
to true.
Multi-module workspace support
The proposal described in golang/go#32394 is still in development
and off by default. See our progress by tracking the multi-module
workspace milestone and project.
Enable multi-module workspace support by adding the following to
your settings:
"gopls": { "experimentalWorkspaceModule": true, }
With this setting, you will be able to open a directory that contains
multiple modules. Most features will work across modules, but some,
such as goimports, will not work as expected.
Give this a try if you're interested in this new feature, but please
note that it is still very experimental.
Support for semantic tokens
This is a new, unreleased LSP feature that provides additional
syntax highlighting. In advance of this new LSP version, we have
added preliminary support for this feature. Enable it by setting:
"gopls": { "semanticTokens": true, }
It will not be enabled with allExperiments.
Fixes
A list of all issues fixed can be found in the gopls/v0.5.2 milestone.
For editor clients
All command names have been given gopls. prefixes, to avoid
conflicting with commands registered by other language servers.
This should not have affected any clients.
5.41.2 - 2020-11-08
This patch fixes urls() strategy ensuring that ~ (tilde) is treated
as one of the url-safe characters (issue #2658).
5.41.1 - 2020-11-03
This patch improves our CLI help and documentation.
ugrep v3.0.4
New v3: performance enhancements and other improvements with a
redesigned search engine. Search speeds are significantly increased
when searching very large files (several GB). Added a new T3
benchmark with a large 13GB file to demonstrate the improvements.
Update v3.0.2 corrects an issue with ugrep v3.0.0 when opening
root-owned files on some Linux systems and resolves a minor problem
when matching a specific short pattern. Update v3.0.4 includes
improvements and a fix for an issue with large zip files searched
in the query UI and corrects a compressed file search issue on
Windows systems. More features will be added soon!
ugrep v2.5.6
Interactive query UI usability improvements; new query UI commands
Alt-[ (decrease fuzziness by one), Alt-] (increase fuzziness by
one), Alt-{ (decrease context size by one line), Alt-} (increase
context size by one line); improved ARM AArch64 configure and build.
More coming soon!
Fixes:
-Fixed not setting some default settings properly.
-Fixed Spotify client not starting if using file extension.
Changes:
-D-Bus support is now optional and is automatically enabled if Qt 5
D-Bus is found (#30).
-MPRIS media controller is now available on platforms where D-Bus is.
-Improved application logging.
-Added a new log viewer for viewing and saving application logs.
-Redesigned artist view with new context button.
-Settings are now restored if they are corrupt or invalid.
1.5.0
* Added support for Python 3.9.
* Dropped support for Python 3.5.
* Stopped supporting running tests with ``python setup.py test`` which is
deprecated in favor of ``python -m pytest``.
0.790:
Bug Fixes
Fix disable_error_code config file option
Fix partial type crash during protocol checking
Store the type for assignment expression
Always type check arguments when using --disallow-untyped-calls
Make None compatible with Hashable
Don't infinite loop on self dependencies in --follow-imports=normal
Don't simplify away Any when joining union types
Check for deleted vars in raise from
Fix corner case for comparing nested overloads
Fix issues with async for and with statements
Fix internal error on list/dict comprehension with walrus operator in global scope
Fix propagation of module-specific options to the parser
Fix crash when super is called outside a method
Fix untyped decorator overload error on class decorator with __call__ overloads
Clean up terminal width handling
Add keyword arguments for functional Enum API
Validate follow_imports values in mypy.ini
Fix *expr in an assigned expression
Don't consider comparing True and False as a dangerous comparison
Make reveal_type work with call expressions returning None
Error Reporting Improvements
Improve missing module error for subdirectories
Clarify bytes formatting error messages
Fix misleading follow_imports error message in dmypy
Use [arg-type] error code for additional argument type error messages
Report some additional serious errors in junit.xml
Report note about binary operation on the same location as error message
Documentation Updates
Document disable_error_code config file option
Add cross references to config file values
Add cross references to additional config values, and missing plugins config value, and document --help option for stubgen
Remove note that Final is experimental and suggest importing it from typing
Discuss unreachable code as a common issue
Stubgen Improvements
Improve property type detection in extension modules
Fix type stubgen crash caused by invalid type annotation
Import Iterable and Iterator from typing in generated stubs
Other Improvements
Speed up type checking of unions containing many literal string types
Add scripts to misc/
- MIME support: Implement decoding quoted-printable
- View command to view multiple messages at once
- Remember received articles if interrupted or timed out
- Post to multiple servers status still Open with 5 other changes
- Check for errors properly after reading a dot at the beginning of a line
from the NNTP server; also add a "G" progress indicator
1.23.0:
Features
api-core: pass retry from result() to done()
Bug Fixes
map LRO errors to library exception types
harden install to use full paths, and windows separators on windows
update out-of-date comment in exceptions.py
1.23.0:
Features
Add custom scopes for access tokens from the metadata service
Bug Fixes
deps: Revert "fix: pin 'aoihttp < 3.7.0dev'
pin 'aoihttp < 3.7.0dev'
remove checks for ancient versions of Cryptography