Release v1.36.0
Core
Remove unnecessary internal pollset set in c-ares DNS resolver.
Fix implicit declaration error in zlib + macOS.
Support Default Root Certs in Tls Credentials.
C++
Move third party identity C++ api out of experimental namespace.
refactor!: change error_details functions to templates.
Support ServerContext for callback API.
Python
Implement Python Client and Server xDS Creds.
4.2.2 (2021-02-26)
------------------
- Fixed a bug where ``supervisord`` could crash if a subprocess exited
immediately before trying to kill it.
- Fixed a bug where the ``stdout_syslog`` and ``stderr_syslog`` options
of a ``[program:x]`` section could not be used unless file logging for
the same program had also been configured. The file and syslog options
can now be used independently. Patch by Scott Stroupe.
- Fixed a bug where the ``logfile`` option in the ``[supervisord]``
section would not log to syslog when the special filename of
``syslog`` was supplied, as is supported by all other log filename
options. Patch by Franck Cuny.
- Fixed a bug where environment variables defined in ``environment=``
in the ``[supervisord]`` section or a ``[program:x]`` section could
not be used in ``%(ENV_x)s`` expansions. Patch by MythRen.
- The ``supervisorctl signal`` command now allows a signal to be sent
when a process is in the ``STOPPING`` state. Patch by Mike Gould.
- ``supervisorctl`` and ``supervisord`` now print help when given ``-?``
in addition to the existing ``-h``/``--help``.
Version 54.0.0 "F Maj Pixie"
New features and enhancements
* mkvmerge: added support for using ISO 639-3 language codes in IETF BF47
language tags.
* mkvmerge: AC-3 parser: added support for byte-swapped AC-3 data.
* mkvmerge: Matroska reader: for audio tracks that have the bit depth track
header set mkvmerge will now keep that header even for codecs that don't
require it for decoding.
* mkvmerge: MPEG transport stream reader, PCM audio tracks: mkvmerge will now
re-order the channels for 5.1, 7.0 and 7.1 channel tracks from the Blu-ray
layout to the WAVEFORMATEXTENSIBLE layout expected in Matroska.
* mkvmerge, mkvinfo, mkvpropedit, MKVToolNix GUI: added support for the
following new track header elements: "hearing impaired" flag, "visual
impaired" flag, "text descriptions" flag, "original" flag, "commentary"
flag.
* MKVToolNix GUI: added support for using ISO 639-3 language codes in IETF
BF47 language tags. As there are several thousand of them, they're
deactivated by default and must be activated in the preferences ("GUI" →
"Often used selections" → "Languages").
* MKVToolNix GUI: multiplexer: when adding Blu-rays the user can select
multiple playlists to add simultaneously in the "select playlist to add"
dialog.
* MKVToolNix GUI: multiplexer: the file name extensions "eb3" and "ec3" were
added for Dolby Digital Plus & "mpl" for Dolby TrueHD in the file
dialogs.
* MKVToolNix GUI: multiplexer: when adding multiple files the dialog asking
the user what to do with them has gained a new checkbox. If enabled, all
files containing at least one video track will always be placed in newly
created multiplex setting.
* MKVToolNix GUI: multiplexer: added a menu entry in the "Multiplexer" for
adding all files that are currently in the clipboard.
Bug fixes
* all: Windows: fixed compatibility with gettext 0.21 and newer on mingw.
* all: Windows: fixed several of the programs having problems with certain
Unicode characters (primarily emojis) in file names (e.g. mkvextract
wrongfully complaining about an "invalid mode" or the GUI not being able to
find parts of Blu-ray file structures).
* mkvextract: AAC: fixed wrong channel mask field in the ADTS headers for 7.1
channel layouts.
* mkvextract: h.265/HEVC extraction: if the first frame starts with the
parameter sets (SPS, PPS & VPS), the ones from CodecPrivate aren't written
and the ones from the first frame are kept.
* mkvmerge: fixed the calculation of chapter timestamps read from NTSC
DVDs.
* MKVToolNix GUI: IETF BCP 47 language widget: the language combo box will now
always contain the language code the user enters in the free-form field,
even if it isn't in the list of often-used languages the user configured in
the preferences.
* MKVToolNix GUI: multiplexer: when browsing for the destination file name the
default directory is now chosen according to the preferences regarding how
the destination file name should be formed. For example, if the policy is
set to "fixed output directory" then that output directory will be the one
initially set when the directory selection dialog is opened.
* MKVToolNix GUI: multiplexer: fixed the removal of appended source files if
the "delete source files" end-of-job action is enabled.
* MKVToolNix GUI: chapter editor: when importing chapters from DVDs the IETF
BCP 47 language elements will be set, too, not just the legacy language
elements.
Build system changes
* libEBML v1.4.2 and libMatroska v1.6.3 are now required. The optional,
bundled copies of both libraries have been updated to those versions. This
bump in requirements fixes several heap overflow bugs in libEBML.
* MKVToolNix is now using the C++17 library feature "file system library"
instead of Boost's "file system" and "system" libraries. For the GNU
Compiler Collection (gcc) libstdc++ this means v8 or newer is required; for
clang's libc++ it means v7 or newer. For macOS this means that provided disk
image will only run on 10.15 "Catalina" or newer.
* Include mk/atomic64.mk to add -march=i586 to CFLAGS and pass
CFLAGS to gyp. Fix PR pkg/56025 in another way.
* Use external devel/protobuf to avoid internal protobuf build.
So bump PKGREVISION.
* dictionary/pos_matcher.h does not generated before its use sometimes.
Generate it explicitly with
dictionary/dictionary_base.gyp:text_dictionary_loader target
for mozc-server.
- Fixed build issue due to initial declarations only allowed in C99 mode
(e.g., CentOS7).
- Added 'Caddy' to the list of pre-defined log formats.
- Added command line option '--no-strict-status' to disable status validation.
- Added native support to parse JSON logs.
- Added the ability to process timestamps in milliseconds using '%*'.
- Ensure TUI/CSV/HTML reports are able to output 'uint64_t' data.
- Ensure we allow UI render if the rate at which data is being read is
greater than '8192' req/s.
- Ensure we don't re-render Term/HTML output if no data was read/piped.
- Fixed build configure to work on NetBSD.
- Fixed issue where it would send data via socket each second when managed
by systemd.
- Fixed issue where parser was unable to parse syslog date with padding.
- Fixed issue where some items under browsers.list were not tab separated.
- Fixed issue where the format parser was unable to properly parse logs
delimited by a pipe.
- Fixed issue where T.X. Amount metrics were not shown when data was piped.
- Fixed issue where XFF parser could swallow an additional field.
- Fixed memory leak when using '%x' as date/time specifier.
- Replaced select(2) with poll(2) as it is more efficient and a lot faster
than select(2).
- Updated Swedish i18n.
- Added the ability to set how often goaccess will parse data and output to
the HTML report via '--html-refresh=<secs>'.
- Changed how TLS is parsed so the Cypher uses a separate specifier.
It now uses '%K' for the TLS version and '%k' for the Cypher.
- Fixed issue where real-time output would double count a rotated log. This
was due to the change of inode upon rotating the log.
- Updated man page to reflect proper way of 'tail -f' a remote access log.
- Added the ability to show 'Encryption Settings' such as 'TLSv1.2' and
Cipher Suites on its own panel.
- Added the ability to show 'MIME Types' such as 'application/javascript' on
its own panel.
- Ensure the HTML report defaults to widescreen if viewport is larger than
'2560px'.
- Fixed inability to properly process multiple logs in real-time.
- Fixed issue where named PIPEs were not properly seed upon generating
filename.
- Fixed issue where served time metrics were not shown when data was piped.
- Removed unnecessary padding from SVG charts. Improves readability on mobile.
- Added addtional browsers and bots to the main list.
- Added 'Android 11' to the list of OSs.
- Added 'macOS 11.0 Big Sur' to the list of OSs.
- Added 'average' to each panel overall metrics.
- Added '.dmg', '.xz', and '.zst' to the static list.
- Added extra check to ensure restoring from disk verifies the content of the
log against previous runs.
- Added Russian translation (i18n).
- Added Ukrainian translation (i18n).
- Added support for HTTP status code '308'.
- Added the ability for 'get_home ()' to return NULL on error, instead of
terminating the process. Great if using through systemd.
- Added the ability to read lowercase predefined log formats. For instance,
'--log-format=COMBINED' or '--log-format=combined'.
- Changed how FIFOs are created and avoid using predictable filenames under
'/tmp'.
- Changed '--ignore-referer' to use whole referrer instead of referring site.
- Ensure Cache Status can be parsed without sensitivity to case.
- Ensure restored data enforces '--keep-last' if used by truncating
accordingly.
- Fixed a few memory leaks when restoring from disk.
- Fixed blank time distribution panel when using timestamps.
- Fixed build issue due to lack of 'mmap' on 'Win'/'Cygwin'/'MinGW'.
- Fixed crash in mouse enabled mode.
- Fixed double free on data restore.
- Fixed inability to keep processing a log when using '--keep-last'.
- Fixed inability to properly parse truncated logs.
- Fixed inability to properly count certain requests when restoring from
disk.
- Fixed issue where it would not parse subsequent requests coming from stdin (tail).
- Fixed issue where log truncation could prevent accurate number counting.
- Fixed issue where parsed date range was not rendered with '--date-spec'.
- Fixed issue where parser would stop regardless of a valid '--num-test' value.
- Fixed issue where restoring from disk would increment 'MAX.TS'.
- Fixed possible incremental issue when log rotation occurs.
- Fixed possible XSS when getting real-time data into the HTML report.
- Fixed potential memory leak when failing to get root node.
- Fixed real-time hits count issue for certain scenarios.
- Fixed segfault in 'Docker' due to a bad allocation when generating FIFOs.
- Fixed 'Unknown' Operating Systems with 'W3C' format.
- Removed unnecessary include from parser.c so it builds in macOS.
- Updated each panel overall UI to be more streamlined.
- Updated French translation.
- Updated German translation.
- Updated Spanish translation.
- Updated sigsegv handler.
Changelog:
Fixes
Importing an address book from a CSV file always reported an error
Security information for S/MIME messages was not displayed correctly prior to a
draft being saved
Calendar: FileLink UI fixes for Caldav calendars
Recurring tasks were always marked incomplete; unable to use filters
Various UI widgets not working
Dark theme improvements
Extension manager was missing link to addon support web page
Various security fixes
Security fixes:
#CVE-2021-23969: Content Security Policy violation report could have contained
the destination of a redirect
#CVE-2021-23968: Content Security Policy violation report could have contained
the destination of a redirect
#CVE-2021-23973: MediaError message property could have leaked information
about cross-origin resources
#CVE-2021-23978: Memory safety bugs fixed in Thunderbird 78.8
pkgsrc changes:
---------------
* The main maintainer seems to have changed. The GitHub repository has been
updated accordingly.
* Since the vendor dependencies has been removed from the Github release, we
use php-composer to resolve them.
upstream changes:
-----------------
Version 4.0.4 (to 4.0.3)
o Fix#321: Boolean settings in presets caused errors when trying to store
the preset's addressbooks to the database
o Fix#322: The refresh time string from admin presets was not converted to
seconds, causing errors or wrong values when storing the preset's
addressbooks to the database
o Fix#324: Changes not immediately visible with postgresql (delete contact,
add/remove contact to/from group)
o Fix: spurious error returned when creating VCard on Google
Version 4.0.3 (to 4.0.2)
o Allow release 1.0 of carddavclient in composer dependencies
o No changes to the plugin itself
Version 4.0.2 (to 4.0.1)
o Fix#316: Incompatibility with Sabre/VObject version 4 preventing saving
contacts using custom labels
o Fix: Default refresh time set to 1 sec in settings
Version 4.0.1 (to 4.0.0)
o Fix: Plugin version was not shown in about window for tarball installations
o Fix: Collation behavior was case-insensitive for MySQL (only). Now unified
across the different supported DBMS.
o Fix#306: With MySQL, sync failure could occur when several custom labels
where used that only differed in case (effect of previous issue).
o Fix#308: With SQLite, the initial sync after adding a new addressbook was
not automatically triggered.
Version 4.0.0 (to 3.0.3)
This release contains changes to DB schema. The database will be migrated
automatically upon login to roundcube.
o All changes from 4.0.0-alpha1
o Fix: Deletion of empty CATEGORIES-type groups
o Fix: Delete CATEGORIES-type groups from DB that become empty during a sync
o Fix: Renaming of empty CATEGORIES-type groups
o Fix: During deletion, do not rely on the DB's ON CASCADE DELETE because
this is disabled by default for SQLite
o Fix: It was not possible to discover multiple addressbooks for an admin
preset because of a wrong UNIQUE constraint in MySQL
o Fix: Catch exceptions thrown inside the plugin (avoid "white page" on error)
o Increase the maximum lengths of password, email and url fields
o Use transactions to synchronize concurrent operations on the same
addressbook (data consistency issues may still occur with MySQL because of
roundcube DB layer bug). For details, see DBSYNC.md.
o Unified database indexes across the different database backends: Create
indexes for foreign key columns (PostgreSQL, SQLite)
o Fixed issues in the migration scripts and added SQL scripts showing the
current DB schema
o Update hungarian translation (thanks to @tsabi)
Version 4.0.0-alpha1 (to 3.0.3)
Note: The Changelog for this version is not complete
This is an alpha release because I did not perform any tests on it.
Nevertheless, it has many bugs fixed and I encourage you to upgrade and report
issues as you find them. The last release 3.0.3 has many issues that have been
fixed with in v4. I push this release early mainly because of the security
issue reported. I'll continue working on remaining issues I want to fix (note:
all of them are also present in 3.0.3) for v4 and I intend release a more
tested version and a more detailed changelog within the next weeks.
o Security issue: It was possible to read data from other user's
addressbooks. Depending on the configuration, it might also have been
possible to change data in their addressbooks. Thanks to @cnmicha for
reporting this issue. This issue affects all previously released versions
of RCMCardDAV using a database cache.
o Many bugs you reported and several more I discovered during refactoring
have been fixed.
o The password scheme now defaults to encrypted (if you have not configured a
password scheme, this will take effect automatically for newly stored
password. If you don't want this, configure a password scheme in
settings.php).
o The URL is not changeable after creation of an addressbook anymore. It used
to work in specific, but not all cases. As the behavior is potentially
broken and not easy to fix, it is removed for now.
o The two kinds of contact groups (VCard-based vs. CATEGORIES-based) are not
transparently supported to the possible extent. The configuration switch is
only meaningful concerning the type of group used when a new group is
created from RCMCardDAV. See details here.
o The CardDAV interaction is moved to a library. It is essentially a complete
rewrite of the code communicating with the CardDAV servers and includes
interoperability tests with many common servers, see here.
upstream changes:
-----------------
Release notes for Grafana 7.4.3
Bug fixes
o AdHocVariables: Fixes crash when values are stored as numbers. #31382,
@hugohaggmark
o DashboardLinks: Fix an issue where the dashboard links were causing a full
page reload. #31334, @torkelo
o Elasticsearch: Fix query initialization logic & query transformation from
Prometheus/Loki. #31322, @Elfo404
o QueryEditor: Fix disabling queries in dashboards. #31336, @gabor
o Streaming: Fix an issue with the time series panel and streaming data
source when scrolling back from being out of view. #31431, @torkelo
o Table: Fix an issue regarding the fixed min and auto max values in bar
gauge cell. #31316, @torkelo
Release notes for Grafana 7.4.2
Features and enhancements
o Explore: Do not show non queryable data sources in data source picker.
#31144, @torkelo
o Snapshots: Do not allow an anonymous user to create snapshots. #31263,
@marefr
Bug fixes
o CloudWatch: Ensure empty query row errors are not passed to the panel.
#31172, @sunker
o DashboardLinks: Fix the links that always cause a full page to reload.
#31178, @torkelo
o DashboardListPanel: Fix issue with folder picker always showing All and
using old form styles. #31160, @torkelo
o IPv6: Support host address configured with enclosing square brackets.
#31226, @aknuds1
o Permissions: Fix team and role permissions on folders/dashboards not
displayed for non Grafana Admin users. #31132, @AgnesToulet
o Postgres: Fix timeGroup macro converts long intervals to invalid numbers
when TimescaleDB is enabled. #31179, @kurokochin
o Prometheus: Fix enabling of disabled queries when editing in dashboard.
#31055, @ivanahuckova
o QueryEditors: Fix an issue that happens after moving queries then editing
would update other queries. #31193, @torkelo
o SqlDataSources: Fix the Show Generated SQL button in query editors. #31236,
@torkelo
o StatPanels: Fix an issue where the palette color scheme is not cleared when
loading panel. #31126, @torkelo
o Variables: Add the default option back for the data source variable.
#31208, @hugohaggmark
o Variables: Fix missing empty elements from regex filters. #31156,
@hugohaggmark
Release notes for Grafana 7.4.1
Features and enhancements
o Influx: Make max series limit configurable and show the limiting message if
applied. #31025, @aocenas
o Make value mappings correctly interpret numeric-like strings. #30893,
@dprokop
o Variables: Adds queryparam formatting option. #30858, @hugohaggmark
Bug fixes
o Alerting: Fixes so notification channels are properly deleted. #31040,
@hugohaggmark
o BarGauge: Improvements to value sizing and table inner width calculations.
#30990, @torkelo
o DashboardLinks: Fixes crash when link has no title. #31008, @hugohaggmark
o Elasticsearch: Fix alias field value not being shown in query editor.
#30992, @Elfo404
o Elasticsearch: Fix log row context errors. #31088, @Elfo404
o Elasticsearch: Show Size setting for raw_data metric. #30980, @Elfo404
o Graph: Fixes so graph is shown for non numeric time values. #30972,
@hugohaggmark
o Logging: Ignore ‘file already closed’ error when closing file. #31119,
@aknuds1
o Plugins: Fix plugin signature validation for manifest v2 on Windows.
#31045, @wbrowne
o TextPanel: Fixes so panel title is updated when variables change. #30884,
@hugohaggmark
o Transforms: Fixes Outer join issue with duplicate field names not getting
the same unique field names as before. #31121, @torkelo
upstream changes:
-----------------
2.0.8 - 2021-02-25
==================
Broker:
- Fix incorrect datatypes in `struct mosquitto_evt_tick`. This changes the
size and offset of two of the members of this struct, and changes the size
of the struct. This is an ABI break, but is considered to be acceptable
because plugins should never be allocating their own instance of this
struct, and currently none of the struct members are used for anything, so a
plugin should not be accessing them. It would also be safe to read/write
from the existing struct parameters.
- Give compile time warning if libwebsockets compiled without external poll
support. Closes#2060.
- Fix memory tracking not being available on FreeBSD or macOS. Closes#2096.
Client library:
- Fix mosquitto_{pub|sub}_topic_check() functions not returning MOSQ_ERR_INVAL
on topic == NULL.
Clients:
- Fix possible loss of data in `mosquitto_pub -l` when sending multiple long
lines. Closes#2078.
Build:
- Provide a mechanism for Docker users to run a broker that doesn't use
authentication, without having to provide their own configuration file.
Closes#2040.
3.7.4 (2021-02-25)
Bugfixes
(SECURITY BUG) Started preventing open redirects in the aiohttp.web.normalize_path_middleware middleware. For more details, see https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg.
Thanks to Beast Glatisant for finding the first instance of this issue and Jelmer Vernooij for reporting and tracking it down in aiohttp.
Fix interpretation difference of the pure-Python and the Cython-based HTTP parsers construct a yarl.URL object for HTTP request-target.
Before this fix, the Python parser would turn the URI's absolute-path for //some-path into / while the Cython code preserved it as //some-path. Now, both do the latter.
CMake 3.19.6
* Intel: Make explicit Fortran preprocessing under Ninja more robust
* Tests: Update for upstream ninja change to write status on stderr
* CMakePresets.json: Remove undocumented support for comments
* FindPython: fix erroneous variable handling
Upstream Release Notes:
2.0.11
- Reverted "Fixed runtime autoloader registration (for plugins and script
handlers) to prefer the project dependencies over the bundled Composer
ones" as it caused more problems than expected
2.0.10
- Added COMPOSER_MAX_PARALLEL_HTTP env var to let people set a lower amount
of parallel requests if needed
- Fixed autoloader registration when plugins are loaded, which may impact
plugins relying on this bug (if you use symfony/flex make sure you upgrade
it to 1.12.2+ to fix dump-env issues)
- Fixed exec command suppressing output in some circumstances
- Fixed Windows/cmd.exe support for script handlers defined as path/to/foo,
which are now rewritten internally to path\to\foo when needed
- Fixed bin handling on Windows for PHP scripts, to more closely match
symlinks and allow @php vendor/bin/foo to work cross-platform
- Fixed Git for Windows/Git Bash not being detected correctly as an
interactive shell (regression since 2.0.7)
- Fixed regression handling some private Bitbucket repository clones
- Fixed Ctrl-C/SIGINT handling during downloads to correctly abort as soon as
possible
- Fixed runtime autoloader registration (for plugins and script handlers) to
prefer the project dependencies over the bundled Composer ones
- Fixed numeric default branches being aliased as 9999999-dev internally.
This alias now only applies to default branches being non-numeric
(e.g. dev-main)
- Fixed support for older lib-sodium versions
- Fixed various minor issues
Changes:
1.0.2
-----
- Fix Java binding compilation
- Enable building for ARM little-endian only (ignore big-endian)
- Add uc_context_free() API
- Fix context saving/retoring API (core & Python binding)
- Add cmake option to build Unicorn as a static library
- Fix error handling of mmap()
- uc_emu_start() can be reentrant
- Fix naming conflicts when built with systemd
- Fix setjmp/longjmp on native Windows
- Fix enabled hooks even after deleting them
- X86:
- Fix 64bit fstenv
- Fix IP value of 16bit mode
- ARM:
- Fix APSR handling
- Python: Remove UC_ERR_TIMEOUT
- No longer require Python to build
- Fix recursive UC_HOOK_MEM callbacks for cross pages access
- Remove UC_ERR_TIMEOUT, so timeout on uc_emu_start() is not considered error
- Added UC_QUERY_TIMEOUT to query exit reason
- Fix UAF when deleting hook while in hook callback
- Ensure that hooks are unaffected by a request to stop emulation.
- Fix block hooks being called twice after an early exit from execution.
- Fix binding install on python2 (MacOS)
- X86:
- Support read/write STn registers
- Support read/write X64 base regs
- ARM64:
- Support some new registers
