Changelog:
new
Offer to configure Exchange accounts for Office365. A third-party add-on is required for this account type. IMAP still exists as alternative.
fixed
Edit tag not working
fixed
Write window: "Insert > Characters and Symbols" not working
fixed
Moving/dragging messages from "Search Messages" result dialog not working
fixed
Command line -compose "attachment=" not working
fixed
Custom views not working
fixed
Issues with list of content types/actions for incoming attachments
fixed
"Learn More" links in Error Console not working
fixed
Visual glitches: Quick Filter Bar tag buttons too tall, missing scroll
bar on Connection Setting subdialog, LDAP server selection after "New",
"Edit" and "Delete"
fixed
Calendar: Parts of CalDAV dialog not working
fixed
Various security fixes
Security fixes:
CVE-2019-11739: Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message
#CVE-2019-11746: Use-after-free while manipulating video
#CVE-2019-11744: XSS by breaking out of title and textarea elements using innerHTML
#CVE-2019-11742: Same-origin policy violation with SVG filters and canvas to steal cross-origin images
#CVE-2019-11752: Use-after-free while extracting a key value in IndexedDB
#CVE-2019-11743: Cross-origin access to unload event attributes
#CVE-2019-11740: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and Thunderbird 60.9
Mozilla Firefox is a free, open-source and cross-platform web browser
for Windows, Linux, MacOS X and many other operating systems.
It is fast and easy to use, and offers many advantages over other web
browsers, such as tabbed browsing and the ability to block pop-up
windows.
Firefox also offers excellent bookmark and history management, and it
can be extended by developers using industry standards such as XML,
CSS, JavaScript, C++, etc. Many extensions are available.
This package provides Firefox 68 ESR.
Changelog:
Fixed
Fixed external programs launching in the background when clicking a link from inside Firefox to launch them (bug 1570845)
Usability improvements to the Add-ons Manager for users with screen readers (bug 1567600)
Fixed the Captive Portal notification bar not being dismissable in some situations after login is complete (bug 1578633)
Fixed the maximum size of fonts in Reader Mode when zoomed (bug 1578454)
Fixed missing stacks in the Developer Tools Performance section (bug 1578354)
Security and stability fixes
irefox 69.0.1
Security fixes:
#CVE-2019-11754: Pointer Lock is enabled with no user notification
Version 1.2.1:
* Fixup release: Remove minimum version for sqlalchemy dependency which was
set too high.
* yhsm-yubikey-ksm: Add --proxy/--proxies argument for logging proxies
requests.
Version 1.2.0:
* yhsm-validation-server: Support OATH TOTP.
* yhsm-init-oath-token: Handle keys with length != 20.
* yhsm-yubikey-ksm: Allow passing soft-HSM keys via stdin by passing "-" as
device argument.
* yhsm-yubikey-ksm: Allow passing --db-url via environment variable.
* Moved utils, yubikey-ksm and validation-server to be included when
installing using pip.
* Use entry_point scripts generated by setuptools.
* Moved man pages to man/ directory.
* Bugfix: Fix AEAD generation on Windows by writing in binary mode.
* Bugfix: Support AEADs generated on Windows using pyhsm <= 1.1.1.
* Bugfix: Avoid installing unit test package.
* Bugfix: yhsm-import-keys: Fix --aes-key argument used when importing
without a YubiHSM.
Version 1.1.1:
* Fixup release.
Version 1.1.0:
* Restructured the repository and build process.
* Use Semantic Versioning (semver.org).
* Added support for a "soft" HSM in yhsm-yubikey-ksm, yhsm-import-keys
and yhsm-generate-keys.
Version 1.0.4l:
* Documentation is now in asciidoc format.
* yhsm-yubikey-ksm: Fix bug when the same public ID occured for multiple
keyhandles.
0.18.1
P2P protocol and network code
- Add tests and documentation for blocksonly
- Avoid logging transaction decode errors to stderr
- fix: tor: Call `event_base_loopbreak` from the event's callback
- Make poll in InterruptibleRecv only filter for POLLIN events
Wallet
- Add -ignorepartialspends to list of ignored wallet options
RPC and other APIs
- Bugfix: fix pruneblockchain returned prune height
- Document iswitness flag and fix bug in converttopsbt
- Ensure that uncompressed public keys in a multisig always returns a legacy address
- Disallow extended encoding for non-witness transactions
- add 2nd arg to signrawtransactionwithkey examples
- signrawtransactionwithkey: report error when missing redeemScript/witnessScript
GUI
- fix the bug of OPEN CONFIGURATION FILE on Mac
- Show "No wallets available" in open menu instead of nothing
- Enable open wallet menu on setWalletController
- Set progressDialog to nullptr
- Fix open wallet menu initialization order
- Set `AA_EnableHighDpiScaling` attribute early
- Enable console line edit on setClientModel
- Assert QMetaObject::invokeMethod result
Build system
- Add test for GCC bug 90348
- Install bitcoin-wallet manpage
- build with -fstack-reuse=none
Tests and QA
- Pure python EC
- Add test for superfluous witness record in deserialization
- Bugfix: test/functional/rpc_psbt: Remove check for specific error message that depends on uncertain assumptions
- Add test that addmultisigaddress fails for watchonly addresses
Documentation
- Remove text about txes always relayed from -whitelist
Miscellaneous
- Catch by reference not value in wallettool
- Replace fprintf with tfm::format
3.1.1
Trap AttributeError in Gnome backend as in some environments
it seems that will happen.
Fix issue where a backslash in the service name would cause
errors on Registry backend on Windows.
3.1
``keyrings.alt`` no longer depends on the ``keyring.util.escape``
module.
3.0
``keyrings`` namespace should now use the pkgutil native technique
rather than relying on pkg_resources.
2.4
File based backends now reject non-string types for passwords.
from https://github.com/earlephilhower/esp-quick-toolchain.
This is a version compatible with the Arduino environement.
Cross GCC for for chips using the Xtensa lx106 core, such as the
Espressif ESP8266 wireless modules.
from https://github.com/earlephilhower/esp-quick-toolchain.
This is a version compatible with the Arduino environement.
Cross binutils for chips using the Xtensa lx106 core, such as the
Espressif ESP8266 wireless modules.
It uses SDL for sound so the tileset version is now the SDL version
instead of the X11 version. Instead of games/angband-tty, games/angband
is now the TTY version.
There is a SDL2 port but it doesn't seem ready yet (the menu at the top
of the screen doesn't work). Keep SDL2 bits commented out so they're
ready to enable when the time comes.
Memcached 1.5.18 and newer can recover its cache between restarts. It can restart after upgrades of the binary, most changes in settings, and so on. It now also supports using persistent memory via DAX filesystem mounts.
Changes in version 2.1.11-stable
This release contains one ABI breakage fix (that had been introduced in
2.1.10, and strictly speaking this release breaks ABI again to make it
compatible with 2.1.9 and less, please take a look at 18104973 for more
details). Apart from that it contains some bug fixes, that grouped below.
And even though the return value for evbuffer_setcb() had been changed it
should ABI compatible (anyway that function is in -compat.h header).
There is also one patch that introduce new functionality, this is 546a366c,
to tune SO_RCVBUF/SO_SNDBUF in evdns, but one can count it as a bug-fix on
the application level, since before you cannot tune this settings and hence
you could stumble on problems.
ABI breakage:
o Protect min_heap_push_ against integer overflow.
o Revert "Protect min_heap_push_ against integer overflow."
functionality:
o evdns: add new options -- so-rcvbuf/so-sndbuf
build:
o Change autoconf version to 2.62 and automake version to 1.11.2
o cmake: install shared library only if it was requested
o Missing <winerror.h> on win7/MinGW(MINGW32_NT-6.1)/MSYS
o cmake: set library names to be the same as with autotools
o Enable _GNU_SOURCE for Android
o Enable kqueue for APPLE targets
o autotools: do not install bufferevent_ssl.h under --disable-openssl
o cmake: link against shell32.lib/advapi32.lib
o Add README.md into dist archive
o cmake: add missing autotools targets (doxygen, uninstall, event_rpcgen.py)
o m4/libevent_openssl.m4: fix detection of openssl
o Fix detection of the __has_attribute() for apple clang [ci skip]
lib:
o buffer: fix possible NULL dereference in evbuffer_setcb() on ENOMEM
o Warn if forked from the event loop during event_reinit()
o evutil: set the have_checked_interfaces in evutil_check_interfaces()
samples:
o https-client: correction error checking
Changes in version 2.1.10-stable
This release contains mostly fixes (some evbuffer oddity, AF_UNIX handling in
http server, some UB fixes and others) but also some new functionality
(without ABI breakage as usual) and now dist archive can be used for building
on windows (getopt had been added into it).
Above you will find changelog for this particular release (but with some
trivial fixes pruned out from it - to make it a little bit more informative).
To view full changelog please use git:
git log --format=' o %s (%h %aN)' release-2.1.9-beta...release-2.1.10-stable
dist:
o Add getopt into dist archive
functionality:
o evdns: add DNS_OPTION_NAMESERVERS_NO_DEFAULT/EVDNS_BASE_NAMESERVERS_NO_DEFAULT
o Add support for EV_TIMEOUT to event_base_active_by_fd
fixes:
o Merge branch 'evbuffer-fixes-806-v2'
o Merge branch 'issue-807-accept4-getnameinfo-AF_UNIX'
Azat Khuzhin)
o kqueue: Avoid undefined behaviour. (e70e18e9 Tobias Stoeckmann)
o Prevent integer overflow in kq_build_changes_list.
o evdns: fix lock/unlock mismatch in evdns_close_server_port()
o Merge remote-tracking branch 'official/pr/804' -- Enforce limit of NSIG
signals
o Protect min_heap_push_ against integer overflow.
o le-proxy: initiate use of the Winsock DLL
o Fix leaks in error path of the bufferevent_init_common_() (bb0f8fe7 Azat Khuzhin)
o buffer: make evbuffer_prepend() of zero-length array no-op
o Merge branch 'evbuffer-empty-chain-handling'
o Don't loose top error in SSL
o Remove needless check for arc4_seeded_ok
o Merge pull request 769 from sungjungk/fix-return-handling
build:
o Define `_GNU_SOURCE` properly/consistently per autoconf
o signal: guard __cdecl definition with #ifdef
o Link test/regress with event_core/event_extra over event
tests:
o Use kill() over raise() for raising the signal (fixes osx 10.14 with
kqueue)
o tinytest: implement per-test timeout (via alarm() under !win32 only)
Changes in version 2.1.9-beta
This changelog will differs from other releases in the next few clauses:
- contains only highlighted changes (so now it will not contains a lot of
patches that fixes some stuff in regression tests, typos, leaks fixes in
samples and so forth)
- no authors (since merge commits breaks them anyway, but AUTHORS sections in
README will be kept up to date)
- group name trimmed from commit subjects trimmed
- it's been 2 years since the previoius release, so it is pretty huge
And I think that this is more useful, so from now on it will always has the
same look (until there will too many objections of course).
To view full changelog please use git:
git log --format=' o %s (%h %aN)' release-2.1.8-stable...release-2.1.9-beta
dist archive:
o Add cmake rules into dist archive
o Add missing print-winsock-errors.c into dist archive
o Include openssl-compat.h into dist archive
core:
o Merge branch 'check-O_NONBLOCK-in-debug'
o Merge branch 'event-ET-636-v2'
o Fix visibility issues under (mostly on win32)
o Define __EXT_POSIX2 for QNX
o Cleanup __func__ detection
o Add convenience macros for user-triggered events
o Notify event base if there are no more events, so it can exit without delay
o Fix base unlocking in event_del() if event_base_set() runned in another thread
o If precise_time is false, we should not set EVENT_BASE_FLAG_PRECISE_TIMER
o Fix race in access to ev_res from event loop with event_active()
o Return from event_del() after the last event callback termination
http:
o Merge branch 'http-EVHTTP_CON_READ_ON_WRITE_ERROR-fixes-v2'
o Preserve socket error from listen across closesocket cleanup
o fix connection retries when there more then one request for connection
o improve error path for bufferevent_{setfd,enable,disable}()
o Fix conceivable UAF of the bufferevent in evhttp_connection_free()
o Merge branch 'http-request-line-parsing'
o Fix evhttp_connection_get_addr() fox incomming http connections
o fix leaks in evhttp_uriencode()
o CONNECT method only takes an authority
o Allow bodies for GET/DELETE/OPTIONS/CONNECT
o Do not crash when evhttp_send_reply_start() is called after a timeout.
o Fix crashing http server when callback do not reply in place
o fix handling of close_notify (ssl) in http with openssl bufferevents
evrpc:
o use *_new_with_arg() to match function prototype
o avoid NULL dereference on request is not EVHTTP_REQ_POST
regression tests:
o Merge branch 'TT_RETRIABLE'
bufferevent:
o Merge branch 'iocp-fixes'
o Merge branch 'be-wm-overrun-v2'
o bufferevent_socket_connect{,_hostname}() missing event callback and use ret code
o don't fail be_null_filter if bytes are copied
o Call underlying bev ctrl GET_FD on filtered bufferevents
bufferevent_openssl/openssl:
o Merge branch 'ssl_bufferevent_wm_filter-fix'
o be_openssl: avoid leaking of SSL structure
o Fix build with LibreSSL 2.7
o Add missing includes into openssl-compat.h
o Explicitly call SSL_clear when reseting the fd.
o Unbreak build with LibreSSL after openssl 1.1 support added
samples:
o Merge branch 'sample-http-server'
o sample/https-client: use host SSL certificate store by default
listener:
o ipv6only socket bind support
o Merge branch 'listener-immediate-close'
o Merge branch 'evconnlistener-do-not-close-client-fd'
evdns:
o evdns: handle NULL filename explicitly
o Merge branch 'evdns_getaddrinfo-race-fix'
o Generating evdns_base_config_windows_nameservers docs on all platforms
utils:
o Merge branch 'evutil_found_ifaddr-dev'
o Avoid possible SEGVs in select() (in unit tests)
o Port `event_rpcgen.py` and `test/check-dumpevents.py` to Python 3.
buffer:
o Fix assert() condition in evbuffer_drain() for IOCP
o fix incorrect unlock of the buffer mutex (for deferred callbacks)
o Fix wrong assert in evbuffer_drain()
cmake:
o fix checking of devpoll backend (like in autotools, by devpoll.h existence)
o support static runtime (MSVC)
o do not build both (SHARED and STATIC) for MSVC/win32
o introduce EVENT__LIBRARY_TYPE option
o ensure windows dll's are installed as well as lib files
o Fix generation of LibeventConfig.cmake for the installation tree
o fix pkgconfig generation (copy-paste typo)
o Merge branch 'cmake-missing-bits'
o Fix detection of timerfd_create() in CMake.
o Merge branch 'cmake-configure-fixes-v2'
o Do not add epoll_sub (syscall wrappers) for epoll in cmake
o Fix RPATH for APPLE
autotools:
o include win32 specific headers for socklen_t detection on win32/mingw
o Ignore evconfig-private.h for autotools
o config.h can't be prefixed unconditionally
o Merge branch 'pull-628'
o Provide Makefile variables LIBEVENT_{CFLAGS,CPPFLAGS,LDFLAGS}
o confirm openssl is working before using
o pass $(OPENSSL_INCS) for samples (FTBFS macOS)
o Add configure check for midipix
o Fix tests with detached builds
build:
o Fix arc4random_addrandom() detecting and fallback (regression)
o Merge branch 'win32-fixes'
o Merge branch 'fix-openssl-linking'
o Merge branch 'fix-struct-linger'
CI:
o travis-ci/appveyor now uses fast_finish+allow_failures
o Merge branch 'travis-ci-osx-fixes'
o Merge branch 'win64-fixes'
This gives us a stable source of new releases for future updates.
Sadly it does not use SDL2 yet but the newer release allows us to remove
the local patches and get a .desktop entry.
