Pkgsrc changes:
* Adjust PLIST.
* Bump version number.
* Depend on newer version of goffice0.10.
Upstream changes:
gnumeric 1.12.23:
Noteworthy news in this release:
* Fuzzed file hardening.
* Solver refactoring.
Special thanks to Juha Kylmänen from Oulu University Secure
Programming Group for running a large amount of fuzzing against
Gnumeric.
gnumeric 1.12.22:
Noteworthy news in this release:
* Graph fixes and improvements.
* Test suite improvements.
* ODF/XLSX import and export fixes.
* A schema for the ODF files we produce.
As part of our testing we check that the ODF, XLSX, and Gnumeric
files we produce are valid according to the relevant xml schema.
* For Gnumeric files we provide the schema.
* For XLSX there is an official schema which we use with a few
fixes so Excel can read our files. (We consider the format to
be defined by what XLSX writes.)
* For ODS the situation is more problematic. We appear to be the
first to release a schema for the ODS files we produce. That
is mildly shocking -- several spreadsheets have ODS as their
primary format, yet no-one seem to be validating the files they
produce! There is an official schema for the format without
extensions which is fine, except that no-one uses that format
because there are lots of fairly basic things that cannot be
expressed in the format without extensions.
Pkgsrc changes:
* Bump version.
* Adjust PLIST.
Upstream changes:
goffice 0.10.23:
Details of changes by contributor:
Jean
* Disable metafiles support when there is no screen. [Bug 748493].
* Fuzzed file fixes. [Bug 750860] [Bug 751059] [Bug 751256]
[Bug 751257] [Bug 751272] [Bug 751925] [Bug 752223].
Morten
* Fix ABR [Bug 749167].
* Shield Cairo from image sizes it cannot handle. [Bug 749274].
* Plug leaks. [Bug 749395].
* Portability problem affecting macs. [Bug 749463].
* Fuzzed file fixes. [Bug 750047] [Bug 751250].
* Fix log-fit problem. [Redhat Bug 1240470].
* Fix general format for wide case. [Bug 752839].
goffice 0.10.22:
Noteworthy news in this release:
* Graph fixes and enhancements.
Details of changes by contributor:
Jean
* Fix selection of axes using only part fo the plot area. [Bug 746456].
* Protect colored xy and bubble plots against NULL z values.
* Update circular axis bounds after a unit change. [Bug 746738].
* Auto fill color made transparent for opened markers. [Bug 691025].
* Make manual scale really manual. [Bug 700599].
Johannes Deutsch
* Do not draw the line over the arrow head at start. [Bug 745736].
Morten
* Improve log axis bounds. [Bug 745960].
* Fix format used for stacked percentage graphs.
* Don't force bar/col axis to include 0 for log axis.
* Don't force radial plots to include 0 for log axis.
* Rewrite pattern-fill rendering. [Bug 747212].
* Add go_cotpi and go_atan2pi.
* Fix persistence of ring plot center size.
1.49 Fri 31 Jul 2015
- Fails on unseekable file handle after desiredCompressionLevel(), RT #54827
- Upgrade build tools to avoid tar warnings, RT #105547
1.48 Thu 18 Jun 2015
- Wrap skip in a SKIP: block [github/plicease]
1.47 Wed 17 Jun 2015
- zip file with a deflated directory cannot be written out again [github/ntyni]
- add missing test data to MANIFEST
1.93 2015-08-11
- This release is based on version 2015f of the Olson database. This release
includes contemporary changes for Moldova, North Korea, and Uruguay.
Changelog:
Redmine 3.1.0 released
I am happy to announce that Redmine 3.1.0 has been released. Highlights:
Subtasking: option for independent subtask priority/start date/due date/done ratio (#5490), ability to filter the issue list by parent task or subtasks (#6118)
Permission to view only your own time logs (#8929)
Better handling of HTML-only emails (#16962), nokogiri is now used to parse incoming HTML
Ability to limit the member management permission to certain roles (#19707)
Security features (optional settings): ability to expire passwords after a configurable number of days (#19458), password re-entry for sensitive actions (#19851)
You can review all the changes in the Changelog.
About the maintenance of previous Redmine versions: 3.0.x maintenance will stop in favor of 3.1.x soon but Redmine 2.6.x will still be maintained until at least the end of 2015.
* Significantly reduce RAM requirements for both "install" and "update",
headline number is "pkgin install gcc47" on SmartOS/x86_64 reduces from
383MB to 14MB, as well as being significantly faster, especially on
slower hardware. See my blog post at
<http://www.perkin.org.uk/posts/reducing-ram-usage-in-pkgin.html> for
more details.
* Handle pkg_add signature verification failures.
* Support pkg_summary.xz if available.
* Don't switch to parsable output when stdout isn't a tty, which broke
various automation tools.
* Integrate patches/patch-external_progressmeter.h
Tested on NetBSD, OSX, and SmartOS.
--[ Redis 3.0.3 ] Release date: 17 Jul 2015
Upgrade urgency: LOW for Redis and Sentinel.
* [FIX] Fix blocking operations timeout precision when HZ is at its default
value (not increased) and there are thousands of clients connected
at the same time. This bug affected Sidekiq users that experienced
a very long delay for BLPOP and similar commands to return for
timeout. Check commit b029ff1 for more info. (Salvatore Sanfilippo)
* [FIX] MIGRATE "creating socket: Invalid argument" error fix. Check
issues #2609 and #2612 for more info. (Salvatore Sanfilippo)
* [FIX] Be able to connect to the master even when the slave is bound to
just the loopback interface and has no valid public address in the
network the master is reacahble. (Salvatore Sanfilippo)
* [FIX] ZADD with options encoding promotion fixed. (linfangrong)
* [FIX] Reset aof_delayed_fsync on CONFIG RESETSTATS. (Tom Kiemes)
* [FIX] PFCOUNT key parsing in cluster fixed. (MOON_CLJ)
* [FIX] Fix Solaris compilation of Redis 3.0. (Jan-Erik Rediger)
* [NEW] Variadic EXISTS command. Now the command accepts multiple arguments
and returns the total count of existing keys.
Upstream changes:
=================
2.7.0 (2015-05-03)
This is the first release that follows our new release process. For more, see
our documentation.
Bugfixes
Updated urllib3 to 1.10.4, resolving several bugs involving chunked
transfer encoding and response framing.
2.6.2 (2015-04-23)
Bugfixes
Fix regression where compressed data that was sent as chunked data was not
properly decompressed. (#2561)
2.6.1 (2015-04-22)
Bugfixes
Remove VendorAlias import machinery introduced in v2.5.2.
Simplify the PreparedRequest.prepare API: We no longer require the user to
pass an empty list to the hooks keyword argument. (c.f. #2552)
Resolve redirects now receives and forwards all of the original arguments
to the adapter. (#2503)
Handle UnicodeDecodeErrors when trying to deal with a unicode URL that
cannot be encoded in ASCII. (#2540)
Populate the parsed path of the URI field when performing Digest
Authentication. (#2426)
Copy a PreparedRequest's CookieJar more reliably when it is not an instance
of RequestsCookieJar. (#2527)
pkgsrc changes:
===============
- Add dependencies for tests
- /usr/bin/env police
Upstream changes:
=================
4.03_06 2015-01-31 Duncan Ferguson <duncan_ferguson@user.sf.net>
- Remoe references to 'logmsg' preventing the history window from working
(thanks to Andrew Stevenson)
4.03_05 2014-12-20 Duncan Ferguson <duncan_ferguson@user.sf.net>
- Fix options parsing tests picked up via cpantesters on different version of
perl
4.03_04 2014-12-12 Duncan Ferguson <duncan_ferguson@user.sf.net>
- Do not use system perl but whatever is found in PATH (to stop breaking
perlbrew based builds)
- Warn when the configured terminal isn't installed/found
- Don't show 'Opening to:' when no servers are given
4.03_03 2014-09-28 Duncan Ferguson <duncan_ferguson@user.sf.net>
- Force tests to have English locale when user has something else set (Github
issue: 10) (thanks to Emanuele Tomasi)
- Skip permissions check test when run as root as the results are invalid
(Github issue: 11) (thanks to Deny Dias)
- Ensure config file option for ssh_args is not lost when options is not used
on command line (Github issue: 14)
- New Send menu option to send a numeric value between 1 and 1024 (thanks to
cqexbesd)
- Remove all history when history window closed (thanks to Bill Rushmore)
4.03_02 2014-08-10 Duncan Ferguson <duncan_ferguson@user.sf.net>
- Fix behaviour when external cluster command is not defined or doesn't exist
4.03_01 2014-07-09 Duncan Ferguson <duncan_ferguson@user.sf.net>
- Amended host parsing to include alternative IPv6 address port definitions,
e.g. 1::2::3::4/5567
- List available external tags with -L option and also add into 'Add Host' in
UI
[NOTE: Some options have changed!]
- Rework options code
4.02_05 0000-00-00 Duncan Ferguson <duncan_ferguson@user.sf.net> (unreleased)
- Add in 'Set all active' and 'Set half active' host menu options (thanks to
Andrew Stevenson)
4.02_04 2014-05-17 Duncan Ferguson <duncan_ferguson@user.sf.net>
- Amend 'Changes' file format to match CPAN specs (see CPAN::Changes)
- Correct autoclose short option to what is actually used (Github issue 4)
(thanks to Simon Fraser)
- Fix 'use_all_a_records' option (Github issue: 5) (thanks to Simon Fraser)
- Fix 'title' option (thanks to Barry Roberts)
- Fix 'Add host or cluster' window to contain cluster names
4.02_03 2014-01-31 Duncan Ferguson <duncan_ferguson@user.sf.net>
- Fix 'File->Show History' (Sf support request 41)
- Amend 'tag-file' short option to 'r' to avoid option clash
4.02_02 2014-01-13 Duncan Ferguson <duncan_ferguson@user.sf.net>
- Fixed macros (%u, %s, %h, %n) not doing multiple replacements
- Add in key shortcut for username macro (ALT-u)
- Add in key shortcut for local hostname macro (ALT-l)
- Fix a bug with 'show history' key shortcut
- Fix "uninitialised errors in hash element" bug [clusterssh
support-requests:#38]
- Fixed the default cluster not being opened
- Add in toggle for macros
Changes since version 4 are much to numerous to list but include for
example a new autorouting tool, 64-bit support and usability improvements
in all subsystems such as editor, CAM processor and component library.
Upstream changes:
6.14 2015-07-12
- Improved app generator command not to create a log directory.
6.13 2015-07-08
- Added support for validating file uploads.
- Added upload check to Mojolicious::Validator.
- Improved error messages for broken applications in Mojo::Server. (mst)
- Improved subscribers method in Mojo::EventEmitter to allow subscribers to be
modified more easily.
Upstream changes:
0.056 2015-05-19 06:00:40-04:00 America/New_York
- No changes from 0.055
0.055 2015-05-07 18:13:41-04:00 America/New_York (TRIAL RELEASE)
[ADDED]
- Added 'can_ssl' method to detect SSL support before trying and
failing with a fatal exception.
- Added support for 308 redirects
[FIXED]
- When specifying a custom CA file, if that file is missing or
unreadable, HTTP::Tiny will no longer fall back to a default CA
[DOCUMENTED]
- Noted units are bytes for max_size
0.054 2015-01-27 07:18:19-05:00 America/New_York
[ADDED]
- Added more fallback paths to find CA files (thanks golang)
[DOCUMENTED]
- Fixed a typo
Upstream changes:
== Security fixes ==
* Internal review discovered that Special:DeletedContributions did not
properly
protect the IP of autoblocked users. This fix makes the functionality of
Special:DeletedContributions consistent with Special:Contributions and
Special:BlockList.
<https://phabricator.wikimedia.org/T106893>
* Internal review discovered that watchlist anti-csrf tokens were not being
compared in constant time, which could allow various timing attacks. This
could
allow an attacker to modify a user's watchlist via csrf.
<https://phabricator.wikimedia.org/T94116>
* John Menerick reported that MediaWiki's thumb.php failed to sanitize
various
error messages, resulting in xss.
<https://phabricator.wikimedia.org/T97391>
Additionally, the following extensions have been updated to fix security
issues:
* Extension:SemanticForms - MediaWiki user Grunny discovered multiple
reflected
xss vectors in SemanticForms. Further internal review discovered and fixed
other reflected and stored xss vectors.
<https://phabricator.wikimedia.org/T103391>
<https://phabricator.wikimedia.org/T103765>
<https://phabricator.wikimedia.org/T103761>
* Extension:SyntaxHighlight_GeSHi - xss and potential DoS vectors. Internal
review discovered that the contib directory for GeSHi was re-included in
MediaWiki 1.25. Some scripts could be potentially be used for DoS, and
DAU Huy Ngoc discovered an xss vector. All contrib scripts have been
removed.
<https://phabricator.wikimedia.org/T108198>
* Extension:TimedMediaHandler - User:McZusatz reported that resetting
transcodes deleted the transcode without creating a new one, which could be
used for vandalism or potentially DoS.
<https://phabricator.wikimedia.org/T100211>
* Extension:Quiz - Internal review discovered that Quiz did not properly
escape
regex metacharacters in a user controlled regular expression, enabling a DoS
vector.
<https://phabricator.wikimedia.org/T97083>
* Extension:Widgets - MediaWiki developer Majr reported a potential HTML
injection (xss) vector.
<https://phabricator.wikimedia.org/T88964>
== Bug Fixes in 1.25.2 ==
* (T102562) Fix InstantCommons parameters to handle the new HTTPS-only
policy of Wikimedia Commons.
* (T100767) Setting a configuration setting for skin or extension to
false in LocalSettings.php was not working.
* (T100635) API action=opensearch json output no longer breaks when
$wgDebugToolbar is enabled.
* (T102522) Using an extension.json or skin.json file which has
a "manifest_version" property for 1.26 compatability will no longer
trigger warnings.
* (T86156) Running updateSearchIndex.php will not throw an error as
page_restrictions has been added to the locked table list.
* Special:Version would throw notices if using SVN due to an incorrectly
named variable. Add an additional check that an index is defined.
Changse 1.2.6:
- Eigenvalues can be computed over larger range of base fields.
- Common denomiantor package handles now multivariate polynomials.
- More uniform break (error) handling.
Bug fixes, in particular:
- 'distribute' handles 'box' operator.
- Fixed problem with guessing over multivariate polynomilas.
- Fixed hashcode handling for Void in Aldor.
Changelog:
# System emulation
## Incompatible changes
* The handling of the floppy device controller is different between <2.4 and >=2.4 machine types that use the Q35 chipset (e.g. "-M pc-q35-2.3" vs. "-M pc-q35-2.4"). This can cause problems if you are defining floppy drives with command-line options such as "-global isa-fdc.driveA=id.
* The ARM 'virt' board default interface type has changed from IDE to virtio. This means that some incorrect command lines that we previously silently accepted will now fail with an error message like "qemu-system-arm: -drive file=img.qcow2,id=foo: Drive 'foo' is already in use because it has been automatically connected to another device (did you need 'if=none' in the drive options?)". As the error message suggests, you should add "if=none" to the -drive option to fix this.
## Future incompatible changes
* Three options are using different names on the command line and in configuration file. In particular:
** The "acpi" configuration file section matches command-line option "acpitable";
** The "boot-opts" configuration file section matches command-line option "boot";
** The "smp-opts" configuration file section matches command-line option "smp".
-readconfig will standardize on the name for the command line option.
* Behavior of automatic calculation of SMP topology when some SMP topology options for -smp are omitted (sockets, cores, threads) will change in the future. If guest ABI needs to be preserved on upgrades while using the SMP topology options, users should either set set all options explicitly (sockets, cores, threads), or omit all of them.
* Image encryption is fatally flawed, and will be dropped entirely. It'll remain available only in qemu-img, so you can use 'qemu-img convert' to convert encrypted images to uncrypted ones.
* Host floppy device pass-through (block driver "host_floppy") is deprecated, and will be dropped in a future release.
* Block device parameter aio=native has no effect without cache.direct=on. It will be made an error.
* A few devices will be configured with explicit properties instead of implicitly. Unlikely to affect users; for the full list, see the 2.3 ChangeLog.
* QMP command blockdev-add is still a work in progress. It doesn't support all block drivers, it lacks a matching blockdev-del, and more. It might change incompatibly.
* The configure option --disable-guest-base is unneeded and will be removed in a future release.
## Alpha
* Major fixes to the implementation of floating point exceptions.
## ARM
* New board model xlnx-ep108
* Support for ACPI v5.1 tables in the "-M virt" board.
* Support for instantiation sysbus devices from the command line (using "-device") in the "-M virt" board.
* Emulation of the stream ID for MSI writes, for use in GICv3.
* The "virt" board default drive type is now virtio; this means that drives created with if=virtio or with no if= specification will be created as drives plugged into a virtio-blk-pci device. Short form options like -hda will also create this kind of drive. (Note that at time of writing Linux only supports the virt board's PCI controller for 32-bit ARM kernels; support has not yet made it into the 64-bit kernels. So 64-bit guests will need to continue using long command lines and virtio-mmio for now.) Unfortunately this means that some old command lines will need to change -- see the "incompatible changes" section above for details.
## MIPS
* More accurate emulation of the dp8393x network card and RC4030 DMA/IOMMU controller.
* Support for microMIPS32 R6 emulation (enabled in new "-cpu mips32r6-generic")
* Support for unaligned R6 and MSA memory accesses in TCG
* Support for XPA in MIPS32 and LPA in MIPS64 (eXtended and Large Physical Addressing) emulation
* Support for MIPS UHI semihosting
## PowerPC
* The default RAM size for the pseries machine is 512 MB.
* Support of PCI device hotplug on SPAPR (pSeries).
## s390
* Channel I/O is now available when running with TCG. Thus, the default machine for qemu-system-s390x is now s390-ccw.
* Several other fixes for TCG (emulation) mode.
* Extended name and UUID in STSI 3.2.2 information block
* Support for reading/writing guest memory while holding the IPTE lock under KVM, including access register mode
* Various cleanups in the s390-virtio and virtio-ccw transports
* Support for diag288 watchdog (KVM only).
* Support for vector registers
* Add virtio-1 specific ccws to virtio-ccw (SET_REV and v1 version of SET_VQ)
** Revision 1 (and therefore virtio 1.0) is not yet enabled, however.
* The s390-ccw-virtio machine is now versioned; the first versioned machine is s390-ccw-virtio-2.4
** The s390-ccw alias has been removed
## SH
* Optimizations to code generated by TCG.
## SPARC
* Fix SunOS 4.1.4 boot on sun4m with OpenBIOS
## x86
* Improvements to system management mode emulation, including support for high SMRAM and TSEG on machines using the Q35 chipset.
* q35 machine types starting with pc-q35-2.4.0 do not have a floppy disk controller. It will be created if you use "-drive if=floppy", "-fda" or "-fdb" to add a floppy disk drive, or it can be created if necessary with "-device isa-fdc".
* q35 now implements the TCO watchdog. Unlike real hardware, the watchdog is disabled when the virtual machine boot, so as to let existing firmware run with new QEMU. This may change in the future, but the change would be restricted to new machine types.
## KVM
* Support for MMIO operations outside the "big QEMU lock". For now, this only applies to the ACPI PM timer, which can alone improve performance substantially for very large Windows guests as long as they do not span multiple NUMA nodes in the host. For guests that span multiple NUMA nodes more kernel changes are required.
* Support for system management mode (requires Linux 4.1).
* When running under KVM, CPUID information includes the ARAT ("Always running APIC timer") bit
# Device emulation and assignment
## ACPI
* Support for memory hot-unplug.
* S3/S4 states can be disabled for boards using the Q35 machine type via "-global ICH9_LPC.disable_s3=on" and"-global ICH9_LPC.disable_s4=on"
## Block devices
* Minimal support in NVMe emulation for the NVME_VOLATILE_WRITE_CACHE feature.
* The infamous floppy device controller is not added to Q35 boards if not explicitly requested and no floppy drives are specified with "-drive if=floppy".
* I/O throttling now supports "groups" so multiple disks can use share a budget (use -drive groups=<name>)
* Performance of the parallels image format block driver has been improved
## Character devices
* Improved support for flow control in virtio-serial.
## IDE
* Fix macio CDROM detection for PPC
* Fix macio data corruption bug under Darwin/OS X PPC
* AHCI support rerror=stop and werror=stop.
## Mouse/keyboard
* Support for virtio-keyboard, virtio-mouse, virtio-tablet.
## Network
* Support for the "rocker" L2 switch device.
## SCSI
* scsi-generic now supports migration.
## PCI/PCIe
* Support for extra PCI root buses using PCI expander bridge devices. Unlike PCI-PCI bridges, a PCI expander bridge's bus can be associated with a NUMA node, allowing the guest OS to recognize the proximity of a device to RAM and CPUs.
## TPM
* Support for TPM 2
## VFIO
* Support for resetting AMD Bonaire and Hawaii GPUs
* Platform device passthrough support for Calxeda xgmac devices
## virtio
* Support for up to 1024 queues.
* Support for ioeventfd in virtio-mmio.
* FIXME: virtio 1
* New virtio-gpu device (only supports accelerated 2D for now)
* New virtio-input-host, virtio-keyboard, virtio-mouse and virtio-tablet devices (and corresponding virtio-*-pci devices for use on a PCI bus).
* Support for cross-endian vhost (i.e. little-endian host and big-endian guest, or vice versa).
* vhost can now be enabled even if MSI-X is not
* virtio-balloon can tell the guest that it should deflate the balloon on OOM conditions.
## VGA
* Support for virtio-vga, a VGA device that also supports the virtio-gpu interface.
## Character devices
* Improved support for flow control in spice-char.
## GUI
* Support for OpenGL-based display rendering in the SDL2 and GTK+ backend. This is preparatory work for 3D acceleration.
* Improvements to the Cocoa front-end, fixing full-screen mode and adding a list of consoles to the View menu.
* The two extra keys in Brazilian 107-key keyboards are now usable.
## Monitor
* qmp: New MIGRATION event to communicate change in the migration state
## Migration
* Support for compression of RAM data using multiple threads for compression and decompression (using migration capability "compress" and migration parameters "compress_threads", "compress_level" and "decompress_threads").
## Network
* Support for multi-queue vhost-user backends.
## Block devices in system emulation
* The BLOCK_IMAGE_CORRUPTED event has a new "node-name" field.
* FIXME: Throttle groups
* Block device mirroring supports concurrent unmap (aka discard or trim) operations on the source device and can create a thin-provisioned image in this case.
* Block device mirroring can use discard or "write zero" operations to speed up copying of large zero regions.
* FIXME: incremental backup?
## Command-line options
* A longhand version of -global (-global driver=DRIVER,property=PROP,value=VAL) is introduced, to set properties globally for devices that have a period in their name. The older syntax -global DRIVER.PROP=VAL did not allow this.
* New option -fw_cfg to pass arbitrary binary data to the guest.
## TCG
* New command line option "-icount sleep=no". The option will run emulation at the maximum possible speed: every time the CPU would go to sleep, the virtual clock will move to the next timer deadline. For virtual machines that have no other sources of non-determinism (e.g. asynchronous block I/O, character devices or user input) this will also make execution deterministic.
# Block devices and tools
* The "null" block device now has a new "latency-ns" option to delay the answer from the block device.
* The iscsi driver can use the target's FUA capabilities to greatly improve roundtrip times in write-through caching modes (cache.writeback=off). These modes are recommended when the storage has a non-volatile (battery-backed) cache.
* Parallels format driver now supports image creation and write to the image. Performance is significantly improved.
* qcow2 performance improvements.
* qemu-io supports encrypted qcow2 images (which are deprecated).
# Audio
* Obsolete audio backends have been removed: esd (superseded by pulseaudio), winwave (superseded by dsound), fmod (not compatible with the GPL)
# Guest agent
* Support for building a .msi file with the Windows version of the guest agent ("make msi"). This requires msitools.
* qemu-ga implements guest-get-fsinfo and guest-network-get-interfaces on Windows too
# User-mode emulation
* The default CPU for qemu-sh4 and qemu-sh4eb is the sh7785.
# Build dependencies
* QEMU now requires a minimum glib version of 2.22. (In particular, we will no longer build on a stock RHEL5 or Centos 5 system.)
* QEMU can now optionally be linked against tcmalloc.
* QEMU now compiles using clang 3.5 without warnings, which includes disabling GCC features not supported by clang.
* QEMU now compiles with ICC.
* libepoxy is required to compile QEMU with OpenGL support.
* Building on Mac OS X versions earlier than 10.5 is no longer supported.
* Sound on Windows now requires DirectSound (the old 'winwave' default audio backend has been dropped).
# Known issues
* SDL audio only works with SDL 1.x.
* Problems with QEMU for Windows and builds from newer versions of MinGW-w64, see this thread on qemu-devel (this is not a regression, other versions are also affected)
** Crash of 64-bit QEMU (Fix)
** Broken networking (Fix)
* Incomplete translations for GTK user interface
