1.77 2016-08-01
Fixed incorrect size to memset in tlsext_ticket_key_cb_invoke.
1.76 2016-07-31
Replaced bzero with memset. Bzero not present on windows.
Bugfixes:
TLS: switch off SSL session id when client cert is used
TLS: only reuse connections with the same client cert
curl_multi_cleanup: clear connection pointer for easy handles
include the CURLINFO_HTTP_VERSION man page into the release tarball
include the http2-server.pl script in the release tarball
test558: fix test by stripping file paths from FD lines
spnego: Corrected miss-placed * in Curl_auth_spnego_cleanup() declaration
tests: Fix for http/2 feature
cmake: Fix for schannel support
curl.h: make public types void * again
win32: fix a potential memory leak in Curl_load_library
travis: fix OSX build by re-installing libtool
mbedtls: Fix debug function name
Change MAINTAINER from shattered@ to msaitoh@. OK'ed by shattered.
CHANGES from 2.1.2:
2015-09-03 Jean Delvare <jdelvare@suse.de>
* version.h: Set version to 3.0.
2015-08-04 Tyler Bell <tyler.bell@hp.com>
* dmioem.c: Decode HP-specific DMI type 233
* dmioem.c: Refactored HP-specific types 209 and 221 to use common code
* dmioem.c: Documented spec for HP-specific types 209, 221 and 233
2015-05-21 Jean Delvare <jdelvare@suse.de>
* dmidecode.c: Fix up invalid DMI type 34 structure length.
* dmioem.c: Decode HP-specific DMI types 212 and 219.
* dmioem.c: Move function is_printable to dmidecode.c.
2015-05-13 Jean Delvare <jdelvare@suse.de>
* dmidecode.c: Add support for SMBIOS3 EFI table.
* dmidecode.c: Fix warnings about comparison between signed and
unsigned integers.
* util.c: Fix warnings about unused labels when building without
-DUSE_MMAP.
* dmioem.c: Strip spaces at the end of vendor names.
* dmioem.c: Decode Acer-specific DMI type 170.
2015-05-12 Jean Delvare <jdelvare@suse.de>
* dmidecode.c: Remove extra blank line after hidden DMI type 40
structure.
2015-05-04 Jean Delvare <jdelvare@suse.de>
* dmidecode.c: Move table decoding to a separate function.
* dmidecode.c: Simplify function dmi_table_dump.
* dmidecode.c: Display types 41 and 42 in quiet mode too.
* dmidecode.c: Get OEM vendor from System Information (DMI type 1).
2015-04-28 Jean Delvare <jdelvare@suse.de>
* dmidecode.h, dmiopt.h: Fix sparse errors.
* biosdecode.c, dmiopt.c, ownership.c, vpdopt.c: Fix sparse warnings.
* util.c: Fix sparse warning.
2015-04-27 Jean Delvare <jdelvare@suse.de>
* dmidecode.c: Fix --dump-bin when reading from sysfs.
2015-04-27 Jean Delvare <jdelvare@suse.de>
Update to support SMBIOS specification version 3.0.0.
* dmidecode.c: Add support for the new _SM3_ 64-bit entry point
defined in the SMBIOS specification version 3.0.0, including
support of 64-bit addresses and 32-bit table lengths.
* dmidecode.c: Add 3 new chassis types (DMI type 3).
* dmidecode.c: Add 4 new processor families (DMI type 4).
* dmidecode.c: Add 4 new Intel socket types (DMI type 4).
* dmidecode.c: Add 13 new slot types (DMI type 9).
* dmidecode.c: Add 4 new memory device types (DMI type 17).
* dmidecode.c: Add support for processors with more than 255 cores
or threads (DMI type 4).
* dmidecode.c: Stop decoding v3 tables at End-of-Table marker.
2015-04-21 Roy Franz <roy.franz@linaro.org>
* util.c, util.h: Add utility function read_file, which reads an
entire binary file into a buffer.
* dmidecode.c: Add passing of flags parameter to dmi_table.
* dmidecode.c: Add reading of SMBIOS tables from sysfs.
* dmidecode.c, dmiopt.c, dmiopt.h: Add --no-sysfs option to disable
use of sysfs.
* dmidecode.8: Document the changes above.
2015-04-20 Jean Delvare <jdelvare@suse.de>
* biosdecode.c: Add support for the _SM3_ entry point, as defined in
the SMBIOS 3.0.0 specification.
2014-11-14 Jean Delvare <jdelvare@suse.de>
* man/dmidecode.8: Add a note about DMI strings available from sysfs
on Linux.
2014-10-13 Jean Delvare <jdelvare@suse.de>
* dmidecode.c: Add support for DDR4 (DMI type 17). Patch from Tomohiro
Kimura. The value was taken from preliminary SMBIOS specification
version 3.0.0d.
This fixes Savannah bug #43370:
https://savannah.nongnu.org/bugs/?43370
2014-07-11 Jean Delvare <jdelvare@suse.de>
* dmidecode.c: Decode the CPUID of recent AMD processors (DMI type 4).
2014-03-20 Jean Delvare <jdelvare@suse.de>
* dmidecode.c: Let legacy_decode be quiet in dump mode too.
* dmidecode.c: Skip the SMBIOS version comparison in quiet mode.
Patch from Jens Rosenboom.
2014-02-25 Jean Delvare <jdelvare@suse.de>
* dmidecode.c: Fix spacing of memory module voltage attributes
(DMI type 17).
2014-01-13 Jean Delvare <jdelvare@suse.de>
* dmidecode.c: Decode ID of PCI Express 3 slots (DMI type 9).
This fixes Savannah bug #40178:
https://savannah.nongnu.org/bugs/?40178
2014-01-13 Jean Delvare <jdelvare@suse.de>
* LICENSE: Update to the latest upstream version. Amongst other
things, this fixes the FSF address.
2013-04-24 Jean Delvare <jdelvare@suse.de>
* dmidecode.c: Strip trailing zeroes from memory voltage values
(DMI type 17).
* dmidecode.c: Fix support for new processor upgrade types (DMI
type 4) and new memory device type (DMI type 17.)
TortoiseHg 3.9
TortoiseHg 3.9 is a quarterly feature release, with many improvements to performance on large repositories, and security improvements in Mercurial 3.9. See https://www.mercurial-scm.org/wiki/SecureConnections
Bugs Fixes
merge: fix missing separator in merge preview output (fixes#4526)
repofilter: do not emit branchChanged if original branch is restored
repowatcher: compare st_size and st_ctime to detect changes
repowidget: add status bar to LightRepoWindow (fixes#4553)
run: load template functions from extensions (fixes#4515)
wconfig: patch iniparse to allow :suboption in name
Improvements
commit: focus on commit message after branch operation (fixes#4442)
filedata: pass in existing copy information to diff
fileview: change shortcut keys of parent toggle actions to free Ctrl+n
icons: doubles the icon sizes on Linux on retina displays (fixes#4493)
init: relabel "Add special files" to avoid confusion with "hg add" (fixes#4513)
repofilter: improve branch drop-down performance
repomodel: new graph layout algorithm for large repositories
status: reuse working context in WctxModel
sync: add widget to select minimum TLS protocol
workbench: add actions to switch tabs by Ctrl+n key (closes#3543)
workbench: add shortcut to toggle visibility of task tab
Installer
updates to mercurial_keyring, evolve, hgsubversion, and hg-git
Features
ui.textwidth can now be set to define width of help text
separate() template function added
ui.rollback can be set to false to disable the hg rollback command
fail-<command> hooks now run when a command fails
experimental.graphstyle.* config options to control styling of graphs in console
experimental.histedit.autoverb allows histedit lines beginning with "verb!" to be interpreted as histedit actions
[hostsecurity] config section for defining advanced per-host security settings
ability to define the SHA-256 and SHA-512 hashes of pinned server certificates
ability to define CA certificates on a per-host basis
ability to define the minimum TLS protocol version on a global or per-host basis
sort() revset can now perform topological sorts using the topo option
hgweb can now render JSON for filelog, filerevision, summary, and search web commands
[paths] entries can now define a pushrev sub-option to control which revisions to push by default
The experimental 'journal' extension was added, allowing users to view the previous positions of bookmarks and the working copy
Improvements
This release includes many improvements, including (but not limited to):
performance of hg diff has been improved
chg now detects more changes to the configuration and execution environment
SSL/TLS code has been significantly refactored and now is consistent across all consumers (HTTPS, SMTPS)
performance improvements to server communication (particularly for the largefiles and remotefilelog extensions)
connections to servers whose certificate authority (CA) is unknown are now refused even if no CA certificates are available
(see SecureConnections for details)
fingerprints of server certificates are now printed using SHA-256 instead of SHA-1
reads and writes to certain files is now robust and avoids more race conditions and edge cases (see ExactCacheValidationPlan)
performance improvements to certain revsets
cloning will no longer prompt for a password multiple times when cloning from a server that requires a password
annotate view in hgweb now groups lines into blocks depending on their revision and highlights lines for the current revision
hgweb now displays extra information and also navigation links in popups for each line in annotate view
0.4.5 (2016-05-28)
------------------
* #552: PHP 7.0.7 introduced a sublte BC break that caused Baikal to error.
* Upgraded sabre/dav, which fixes CardDAV performance problems.
* Ships with sabre/dav 3.1.4
Todoman is a simple, standards-based, CLI todo (aka: task) manager.
Todos are stored into icalendar files, which means you can sync
them via CalDAV using, for example, vdirsyncer.
Change log:
Added Support for the Following New Printers:
- HP Officejet Pro 8730
- HP Officejet Pro 8210 Printer
- HP Pagewide P55250
- HP Pagewide MFP P57750
- HP Pagewide Color 556
- HP Pagewide Color MFP 586
- HP Pagewide Color flow MFP 586
- HP DeskJet Ink Advantage Ultra 5730 All-in-One Printer
- HP Color Laserjet MFP M377 fnw
Security related fixes: This flaw is caused by loading data from external sources (file, custom ctx, etc) and are hard to validate before calling libgd APIs:
* fix php bug 72339, Integer Overflow in _gd2GetHeader (CVE-2016-5766)
* bug 247, A read out-of-bands was found in the parsing of TGA files (CVE-2016-6132)
* also bug 247, Buffer over-read issue when parsing crafted TGA file (CVE-2016-6214)
* bug 248, fix Out-Of-Bounds Read in read_image_tga
Using application provided parameters, in these cases invalid data causes the issues:
* Integer overflow error within _gdContributionsAlloc() (CVE-2016-6207)
* fix php bug 72494, invalid color index not handled, can lead to crash ( CVE-2016-6128)
* improve color check for CropThreshold
Important update:
* gdImageCopyResampled has been improved. Better handling of images with alpha channel, also brings libgd in sync with php's bundled gd.
- [fastcgi] setenv should displace HTTP headers
#996 (Kazuho Oku)
- [http2] fix buffer overrun
#972 (Frederik Deweerdt)
- [misc] fix build error when libuv is not found
#1008 (nextgenthemes)
- [misc] fix assertion failure when YAML alias and merge is used in
certain way
#1011 (Kazuho Oku)
- [fastcgi] fix internal server error when PHP returns a huge header
#958 (Kazuho Oku)
- [http2] recognize link header containing multiple links
#950 (Frederik Deweerdt)
- [libh2o] fix resource leaks upon startup failure
#936 (David CARLIER)
- [libh2o] do not require linking to libbrotli externally
#941 (Kazuho Oku)
- [core][breaking change] do not automatically append `/` to path-level
configuration
#820 (Kazuho Oku)
- [core] support `<<` in configuration file
#786 (Kazuho Oku)
- [core] configurable server: header
#877 (Frederik Deweerdt)
- [core] add directive for customizing the path of temporary buffer files
#911 (Kazuho Oku)
- [core] fix crash when receiving SIGTERM during start-up
#878 (Frederik Deweerdt)
- [core] spawn the configured number of DNS client threads
#880 (Sean McArthur)
- [access-log] add directive for logging protocol-specific values
#801 (Kazuho Oku)
- [access-log][fastcgi][mruby] per-request environment variables
#868 (Kazuho Oku)
- [access-log] fix memory leak during start-up
#864 (Frederik Deweerdt)
- [compress] on-the-fly compression using brotli, as well as
directives to tune the compression parameters
#802, #924 (Kazuho Oku, Frederik Deweerdt)
- [compress][expires] refrain from setting redundant `cache-control` tokens
#846 (Kazuho Oku)
- [file] `file.file` directive for mapping specific file
#822 (Kazuho Oku)
- [file] `send-compress` directive (renamed from `send-gzip`) to support
pre-compressed files using brotli
#802 (Kazuho Oku)
- [file] cache open failures
#836 (Kazuho Oku)
- [http2] support for nopush attribute in the link rel=preload header
#863 (Satoh Hiroh)
- [http2] support for push after delegation
#866 (Kazuho Oku)
- [http2] ignore push indications made by a pushed response
#897 (Kazuho Oku)
- [http2] accept `capacity-bits` attribute of the `http2-casper`
configuration directive
#882 (Satoh Hiroh)
- [http2] avoid memcpy during HPACK huffman encoding
#749 (Kazuho Oku)
- [http2] fix potential stall when http2-max-concurrent-requests-per-
connection is set to a small number
#912 (Kazuho Oku)
- [http2] refuse push a single resource more than once
#903 (Kazuho Oku)
- [http2] fix assertion failure when receiving more data than expected
during upgrade
#922 (Frederik Deweerdt)
- [mruby] add $H2O_ROOT/share/h2o/mruby to the default load path
#851 (Kazuho Oku)
- [proxy] add support for HTTPS
#875 (Kazuho Oku)
- [proxy] add an configuration option to pass through `x-forwarded-
proto` request header
#883 (Kazuho Oku)
- [proxy] log error when upstream connection is unexpectedly closed
#895 (Frederik Deweerdt)
- [ssl] update libressl to 2.2.7
#898 (Kazuho Oku)
- [ssl] support ECDH curves other than P-256
#841 (Kazuho Oku)
- [ssl] add support for text-based memcache protocol
#854 (Kazuho Oku)
- [ssl] fix memory leak when using TLS resumption with the memcached backend
#856 (Kazuho Oku)
- [ssl] fix "undefined subroutine" error in the OCSP updater
#872 (Masayuki Matsuki)
- [ssl] cap the number of OCSP updaters running concurrently
#891 (Kazuho Oku)
- [ssl] fix use-after-free when using session resumption with memcached backend
#923 (Frederik Deweerdt)
- [libh2o] add API for obtaining the socket descriptor
#886 (Frederik Deweerdt)
- [libh2o] add API to selectively disable automated I/O on reads and writes
#890 (Frederik Deweerdt)
- [libh2o] bugfix: h2o_mem_swap swaps only the first 256 bytes
#924 (Frederik Deweerdt)
- [status] introduce the status handler
#848 (Kazuho Oku)
- [misc] install examples
#850 (James Rouzier)
- [security fix][http2] fix use-after-free on premature connection close
(CVE-2016-4817)
#920 (Frederik Deweerdt)
- [core] fix SIGBUS when temporary disk space is full
#910 (Kazuho Oku)
- [mruby] do not drop `link` header
#913 (Kazuho Oku)
- [mruby] fix memory leak during initialization
#906 (Frederik Deweerdt)
- [mruby] fix race condition in mruby regex handler
#908 (Kazuho Oku)
- [libh2o] fix crash in h2o_url_stringify
#918 (Kazuho OKu)
Major new features:
- conditionals in format strings, with syntax %{?CONDITION?A[?B]}
- sndio output plugin (OpenBSD)
- VTX (libayemu) input plugin
- optional mouse support (:set mouse=true to enable)
Notable changes:
- lots of new formatting options:
- format_treewin
- format_treewin_artist
- format_trackwin_album
- format_statusline
- play count support (%X or %{play_count} in format strings)
- Bash completion support for cmus and cmus-remote
- support for CMUS_SOCKET environment variable
- format_print remote command
- pwd command
- auto_expand_albums option is split into
- auto_expand_albums_follow
- auto_expand_albums_search
- auto_expand_albums_selcur
