PostgreSQL 11.4, 10.9, 9.6.14, 9.5.18, 9.4.23, and 12 Beta 2 Released!
The PostgreSQL Global Development Group has released an update to all supported versions of our database system, including 11.4, 10.9, 9.6.14, 9.5.18, and 9.4.23, as well as the second beta of PostgreSQL 12. This release fixes one security issue and over 25 bugs since the previous cumulative update in May.
Security Issues
This release closes one security vulnerability:
CVE-2019-10164: Stack-based buffer overflow via setting a password
Versions affected: 10, 11, 12 beta.
Bug Fixes and Improvements
Fix assorted errors in run-time partition pruning that could lead to wrong answers in queries on partitioned tables
pg_dump now recreates table partitions using CREATE TABLE and ALTER TABLE .. ATTACH PARTITION rather than including PARTITION OF in the creation command
Improve how initdb determines which system time zone to select if there are equivalent names for the time zone. Also explicitly prefer UTC over UCT
Fix possible crash while trying to copy trigger definitions to a new partition
Fix failure of ALTER TABLE .. ALTER COLUMN TYPE when the table has a partial exclusion constraint
Fix failure of COMMENT command for comments on domains
Several fixes related to aggregation
Fix faulty generation of merge-append plans that could lead to "could not find pathkey item to sort" errors
Fix failures on dump/restore where views contained queries with duplicate join names
Fix conversion of JSON string literals to JSON-type output columns in json_to_record() and json_populate_record()
Fix incorrect optimization of {1,1} quantifiers in regular expressions
Fix issue for B-tree indexes during edge case failure involving columns covered with the INCLUDE clause, which manifests itself with errors during VACUUM. If you are affected by this issue, you will need to reindex the specific index
Fix race condition in check to see whether a pre-existing shared memory segment is still in use by a conflicting postmaster
Fix for the walreceiver process that avoids a crash or deadlock on shutdown
Avoid possible hang in libpq if using SSL and OpenSSL's pending-data buffer contains an exact multiple of 256 bytes
Fix ordering of GRANT commands emitted by pg_dump and pg_dumpall for databases and tablespaces
Fix misleading error reports from reindexdb
Ensure that vacuumdb returns correct status if an error occurs while using parallel jobs
Fix contrib/auto_explain to not cause problems in parallel queries, which resulted in failures like "could not find key N in shm TOC"
Account for possible data modifications by local BEFORE ROW UPDATE triggers in contrib/postgres_fdw
On Windows, avoid failure when the database encoding is set to SQL_ASCII and we attempt to log a non-ASCII string
- the default audio output driver (in case no -ao option is specified)
on NetBSD is still oss even if pulseaudio is enabled
- users can change the audio output driver by "-ao pulse" option or
"ao=pulse" in ~/.mplayer/config file, as they did on 1.3.0 packages
- SDL (which is in current SUGGESTED_OPTIONS) already depends on
pulseaudio by default
Bump PKGREVISIONs.
Switched to SDL2.
BZFlag 2.4.19
-------------
* Add new bz_ePlayerDeathFinalizedEvent API event - Vladimir Jimenez
* Output correct error when loading a nonexistent bzfs plugin - Vladimir Jimenez
* Remove obsolete bzfs option from Start Server menu on Windows - Scott Wichser
BZFlag 2.4.18 "Do You Hear What I Hear?" (2018-10-18)
------------------------------------------------------
* Fix DirectSound initialization order so that sound on Windows works again
- Scott Wichser
BZFlag 2.4.16 "Reduce, Reuse, Replay" (2018-09-23)
---------------------------------------------------
* Send MsgFlagGrab before API event is called - Jeff Myers, Vladimir Jimenez
* Correctly unmuted when paused and killed by server - Alfredo Tupone
* Format codebase to allman style - Jeff Myers, Scott Wichser
* Use GLEW for obtaining OpenGL entry points and checking for extensions
- Alfredo Tupone
* Revert a80ab87 (truncation warning fix) as that generated broken replay file
headers. Detect and work around that bad header.
- Joshua Bodine, Vladimir Jimenez, Scott Wichser
* Use pkg-config, if available, to detect ncurses
- Scott Wichser, Joshua Bodine, Alfredo Tupone
BZFlag 2.4.14 "Hello Motto" (2018-05-02)
-----------------------------------------
* Add new bz_eAllowServerShotFiredEvent to the API - Vladimir Jimenez
* Fix antialiasing when starting the client windowed - Joshua Bodine
* Update the Windows icon file to include larger icons - Scott Wichser
* Treat the number pad keys uniquely for key mapping with SDL2 - Scott Wichser
* Better cpu selection for x86_64 - Alfredo Tupone
* Fix build with enable-profile - Alfredo Tupone
* Add safety check when getting flags (bzfs) - Alfredo Tupone
* Add min/../max to drawTime - Alfredo Tupone
* Fix the -configdir option for the client - Scott Wichser
* Upgrade Windows projects to Visual Studio 2017 - Scott Wichser, Jeff Myers
* Improve support for custom BZDB vars in plug-ins - Vladimir Jimenez
* Fix truncation warnings - Jeff Makey, Alfredo Tupone
* Add new bz_ePermissionModificationEvent to the API - Vladimir Jimenez
* Introduce new 'showMotto' permission - Vladimir Jimenez
* Fix gcc warnings and code formatting - Jeff Myers, Scott Wichser
* Remove old BitmapFont renderer - Scott Wichser
* Add new bz_eServerShotFiredEvent to the API - Vladimir Jimenez
* Revamp the world weapon API entirely - Vladimir Jimenez
* Add PLAYER-MOTTO output to logDetail plugin - Scott Wichser
* Display remaining ban time when a banned player connects - Vladimir Jimenez
* Punitive messages no longer display admin callsigns - Vladimir Jimenez
* Slash commands in the API now know destination channel - Jeff Myers
* Allow building with lcc compiler on e2k-alt-linux - Joshua Bodine
* Fix ability to bind a key with a modifier through menu - Joshua Bodine
* Disallow -helpmsg from world files - Vladimir Jimenez
BZFlag 2.4.12 "Silence is Golden" (2017-10-29)
-----------------------------------------------
* Allow API to trigger CTF capture event - Vladimir Jimenez
* Allow setting default values for BZDB from API - Vladimir Jimenez
* Add bzu_getTeamFromFlag() convenience function - Vladimir Jimenez
* Add new functions to the bz_APIStringList - Vladimir Jimenez
* Add string utility functions to the API and TextUtils - Vladimir Jimenez
* Fixed an issue with ASCII characters from modified non-ASCII keys in SDL 2
- Joshua Bodine
* Fixed compilation on macOS when using autotools/gcc - Mike Miller
* Don't send client queries on behalf of players - Vladimir Jimenez
* Removed pollSet as a default perm in bzfs - Vladimir Jimenez
* Player records canSpawn value no longer always returns true - Vladimir Jimenez
* bz_addURLJob() now supports setting HTTP headers - Vladimir Jimenez
* Made multisampling work on all platforms with SDL 1.2/2 - Joshua Bodine
* Add bz_eMuteEvent and bz_eUnmuteEvent to the API - Vladimir Jimenez
* Add configure --disable-server option - Jeff Makey
* Add bz_isPlayerAutoPilot() to the API - Vladimir Jimenez
* Add bz_eAutoPilotEvent to the API - Vladimir Jimenez
* Add bz_getServerOwner() API function - Vladimir Jimenez
* The _maxFlagGrabs BZDB setting is no longer a random number - Vladimir Jimenez
* Add API access for the handicap system - Jeff Myers, Vladimir Jimenez
* Remove Xcode references to deployment targets except for main project
- Joshua Bodine
* Allow silencing unregistered players in the client - Scott Wichser
* Fix the /silence and /unsilence client commands - Scott Wichser
BZFlag 2.4.10 "This is How We Roll" (2017-03-12)
-------------------------------------------------
* Fix high DPI handling on Windows (again) - Scott Wichser
* Custom slash commands respect double quotes when tokenizing - Vladimir Jimenez
* Make /help page names case-insensitive - Vladimir Jimenez
* Extend bz_ePlayerDieEventData to v2 to hold flag held when killed - Jeff Myers
* Add bzfs API hooks for polls and allow custom poll types - Vladimir Jimenez
* Reduce DNS cache time of list server hostname - Scott Wichser
* Fix bz_addURLJob() to correctly handle default NULL handler - Vladimir Jimenez
* TextUtils::url_encode and TextUtils::url_decode now use cURL's functions; this
change fixes a crash bug with bz_urlEncode() - Vladimir Jimenez
* Add bz_reloadBadwords() to API - Vladimir Jimenez
* Add ability to reload badwords list with '/reload badwords' - Vladimir Jimenez
* Source code now dual licensed under the MPL 2.0 or LGPL 2.1 - Tim Riker
* Added an option to invert one or both joystick axes - Joshua Bodine
* Multisampling support under SDL 2 on macOS - Joshua Bodine
BZFlag 2.4.8 "Sixteen" (2016-10-10)
------------------------------------
* Add Russian transliteration - Ruslan Hihin, Aleksandr Lahin
* Fix a regression in 2.4.6 where the client would not reduce CPU usage when
minimized on Windows - Scott Wichser
* On autotools platforms, try to use SDL2, then SDL1, and then fall back to
native platform code. Allow specifying an SDL version as well.
- Scott Wichser
* Prevent some more bzfs options from being specified in a world file
- Scott Wichser
* Cleaned up some GCC6 warnings - Scott Wichser
* Spawn all players on base when a timed game starts - Konstantinos Kanavouras
* Add indicator for -noTeamKill servers on server list - Konstantinos Kanavouras
* Send a notification to admins when a BZDB variable is reset
- Konstantinos Kanavouras
* Increase the range of the volume slider - Konstantinos Kanavouras
BZFlag 2.4.6 "Eight, Our Codebase is Overweight" (2016-06-26)
--------------------------------------------------------------
* regFlag plugin now uses bz_eAllowFlagGrab event - Scott Wichser
* RogueGenocide plugin defaults to ignoring rogue self-kills - Scott Wichser
* Standardize and update the documentation for bundled plugins - Scott Wichser
* Add bz_getRandomPoint to API - Vladimir Jimenez
* Correctly handle the keypad keys with SDL2 - Jeff Makey, Scott Wichser
* Implement SOURCE_DATE_EPOCH spec in our autoconf system to work towards
reproducible builds - Scott Wichser, Jeff Makey
* Include a timestamp in the /savemsgs output filename - Scott Wichser
* Added -t option to /savemsgs to add timestamps to messages - Scott Wichser
* Added a GUI option to show timestamps on the messages - Scott Wichser
* For SDL2, restore the original gamma on exit and reapply desired gamma on
window recreation - Scott Wichser
* Use SDL2 on Windows for the window/display management - Scott Wichser
* Remove hiddenAdmin plugin - Vladimir Jimenez
* Add a cycleRadar and cyclePanel key binding command - Joshua Bodine
BZFlag 2.4.4 "Be My Valentank" (2016-02-14)
--------------------------------------------
* Correctly exit the game when closing from the Windows 10 taskbar
- Scott Wichser
* Update the player status when a gameover event occurs - Scott Wichser
* Fix fullscreen window toggling on Mac OS X - Joshua Bodine
* Fix crash on exit with Windows bzfs - Scott Wichser
* Fix crash on exit with Mac OS X bzfs - Joshua Bodine
* Fix buffer overrun that caused a crash on exit and other strange behavior on
Windows and Linux - Scott Wichser
* On Windows, reload textures after initializing the context - Scott Wichser
* Add a menu to edit server list quick filters - Scott Wichser
* Tell Windows that we are DPI aware - Scott Wichser
* Time functions in the bzfs API use doubles instead of int - Vladimir Jimenez
* Fix issue on Windows that allowed mouse to get stuck off-screen when switching
to windowed mode - Scott Wichser
* Replace NaN with zero in nboUnpackFloat() - Jeff Makey
* Add a bz_ChatEventData_V2 that contains message type - Konstantinos Kanavouras
* Show recipient/sender for private action messages in BZAadmin
- Konstantinos Kanavouras
* Server list filter: remove "cached" boolean filter, rename "flags" to "ffa",
"teams" to "ctf", and add "offa" - Scott Wichser
* Add server list filter help pages - Scott Wichser
* Add config option to control shot brightness - Konstantinos Kanavouras
* Don't show a running countdown to a player who joins a paused game
- Konstantinos Kanavouras
* Allow RGB values in ANSI color codes to allow custom colors
- Konstantinos Kanavouras
* Vastly improved support for changing tank and radar colors
- Konstantinos Kanavouras
* Fix rendering of TK warning symbol - Joshua Bodine
* Remove third-party libraries from our source tree - Scott Wichser
* Fix search field losing focus while loading server list - Joshua Bodine
* Do not count observers when sorting the server list - Scott Wichser
* Randomize the order of servers with identical player counts - Scott Wichser
* Mouse grab/confine fixes - Joshua Bodine, Scott Wichser
* Improvements to flagStay and rabidRabbit plugin - Vladimir Jimenez
* Joystick hat fixes - Konstantinos Kanavouras
* Update shot stats live - Konstantinos Kanavouras
* Track shot stats for all flag types, even custom flags
- Konstantinos Kanavouras
* Filter messages before MsgEnter - Jeff Myers
* Require a player have spawned to be added to rejoin wait list - Jeff Makey
* Validate the player ID in MsgPlayerUpdate and MsgPlayerUpdateShort
- Scott Wichser
* Fix usage of privateMessage permission - Konstantinos Kanavouras
* Properly prevent multiple MsgEnter messages - Jeff Myers
* Refactor and extend the shot API - Jeff Myers
* Autokick on unknown packet type - Vladimir Jimenez
* Block whitespace-only message and kick for garbage characters - Scott Wichser
* Validate teleporter index in client and server - Scott Wichser
* Limit half-joined player connection duration - Scott Wichser
* Add various checks for invalid player actions - Jeff Makey
* Show coordinates of target tank instead of observer camera location
- Jeff Makey
* Allow shot API event to cancel broadcasting shot to other clients - Jeff Myers
* Store a list of how many times each player was killed by other players and
expose it to the API - Jeff Myers
* Allow plugins delay adding players to allow for remote data lookups
- Jeff Myers
* Add API event triggered when authentication is complete - Jeff Myers
* Added bz_GetPlayerMottoData_V2 - Jeff Myers
* Relicense the SAMPLE_PLUGIN to BSD 2 clause license - Jeff Myers, Tim Riker
* Update joystick axis list when changing joystick device
- Konstantinos Kanavouras
* List server communication now uses HTTPS - Scott Wichser
* Added bz_setPlayerSpawnAtBase and bz_getPlayerSpawnAtBase API functions
- Vladimir Jimenez
* Added configure --enable-custom-plugins and --enable-custom-plugins-file
options - Jeff Makey
* Introduce bz_AllowSpawnData_V2 - Vladimir Jimenez
* Added bz_setPlayerSpawnable and bz_isPlayerSpawnable API functions
- Vladimir Jimenez
* Removed GLEW as a dependency - Joshua Bodine, Scott Wichser
* Made text at top of HUD use sans-serif font and removed serif font
- Joshua Bodine
* Player scores are now factors in auto team assignment - Joshua Bodine
* New font rendering tool and new font textures up to 64pt - Joshua Bodine
* Added bz_getPlayerBySlotOrCallsign API function - Vladimir Jimenez
* Have custom permissions show in /showperms and /groupperms - Vladimir Jimenez
* Start adding unit tests with CppUTest - Scott Wichser
* CIDR ban support - Scott Wichser
* Radar size and panel size are now set individually - Joshua Bodine
* Added bz_incrementTeamLosses and bz_incrementTeamWins API functions
- Vladimir Jimenez
* Vertical sync support under SDL - Joshua Bodine, Jeff Makey
* SDL 2 support - Alfredo Tupone, Joshua Bodine
* Do not flash GAME OVER for observers - Jeff Makey
* Validate the teleporter indexes in MsgTeleport - Scott Wichser
* Correctly validate an offered admin password - Jeff Makey
* Added "showAdmin" permission - Vladimir Jimenez
* Added countdown pause/resume API events - Vladimir Jimenez
* Added bz_getCountdownRemaining API function - Vladimir Jimenez
* Added bz_getPausedTime API function - Vladimir Jimenez
* Added bz_isCountDownPaused API function - Vladimir Jimenez
* Added bz_getIdleTime API function - Vladimir Jimenez
* Added bz_getPlayerFlagID API function - Vladimir Jimenez
* Added bz_isAutoTeamEnabled API function - Vladimir Jimenez
* Added bz_cancelCountdown API function - Vladimir Jimenez
* Added bz_pollActive API function - Vladimir Jimenez
* Added bz_CustomZoneObject API class - Vladimir Jimenez
* Added CustomZoneSample plugin - Vladimir Jimenez
* Added permission for /listplugins - Vladimir Jimenez
* Allow API to overload built-in slash commands - Vladimir Jimenez
* Added "report" permission - Vladimir Jimenez
* Added bz_eGameResumeEvent and bz_eGamePauseEvent to the API
- Vladimir Jimenez
* Don't allow muted players with ADMINMESSAGESEND to send PMs to hidden admins
- Konstantinos Kanavouras, Vladimir Jimenez
* Add [Reverse Score] scoreboard sort option - Konstantinos Kanavouras
* Track number of self-kills on the scoreboard - Konstantinos Kanavouras
* Added menu option to pause chat window scrolling - Konstantinos Kanavouras
* Added "noteam" option for "/flag reset" command - Konstantinos Kanavouras
* Added option to bz_resetFlags to skip team flags - Konstantinos Kanavouras
* Implemented "/poll kill" command - Konstantinos Kanavouras
* Added "/countdown cancel" command - Konstantinos Kanavouras
* Added serverSidePlayerSample plugin - Jeff Myers
* Fix fancy radar tank when zoomed - Kyle Mills
* Added /handicap command - Frank Thilo
* Reverted to traditional handicap calculation - Frank Thilo
* Add bzfscron plugin to execute commands on time intervals
- Daniel Remenak, Scott Wichser
* Server-side players can send slash commands - Scott Wichser
* Added server side shot tracking - Jeff Myers
* Added clientQuery permission - Konstantinos Kanavouras
* Added superUser plugin - Jeff Myers
* Added bz_getPlayerCount API function - Jeff Myers
* Added bz_incrementPlayerWins API function - Jeff Myers
* Added bz_incrementPlayerLosses API function - Jeff Myers
* Added bz_incrementPlayerTKs API function - Jeff Myers
* Make players respawn on bases after countdown ends - Lee Marshall
* Countdown now resets player scores as well as team scores - Lee Marshall
* Fully integrated Xcode project file - Joshua Bodine
# OpenSCAD 2019.05
**Language Features:**
* New modules
* assert() - stop script evaluation on failed constraints
* let() - scoped assignment
* New functions
* ord() - convert from character to Unicode code point
* echo()
* assert() - stop script evaluation on failed constraints
* Type testing functions: is_undef(), is_list(), is_num(), is_bool(), is_string()
* New special variable: $preview variable which is set to true in preview mode
* List comprehension updates
* Added if/else condition
* Added each keyword
* Added C-style for loop
* Now allows looping over characters of a string
* rotate_extrude(): Added angle parameter to
* import() now supports SVG, 3MF and AMF
* color() now supports hex color codes
* Removed glide() and subdiv() which were never implemented
**Program Features:**
* Customizer: Allow parametrizing design parameters with GUI customization
* Support for using 3D-Mouse / Joystick / Gamepad input devices for controlling the 3D view
* 3D Printing support: Purchase from a print service partner or print to Octoprint
* New export file formats: SVG, 3MF, AMF
* Quick-edit and preview of values using Alt-Arrows (Shift-Alt-Arrows on macOS)
* Added --view cmd-line parameter
* Play sound notification on render complete
* Line numbers and filenames are now shown for many errors and warnings
* Hardwarning preference: Stop on first warning
* Hardwarning and assert now shows a stack trace
* New warnings
* Module call parameterns don't match module declaration
* Argument value of of range
* Duplicate passed argument
* Children passed to module not accepting children
* Reference to inknown $special_variables
* Duplicate assigment
* New translations: Ukrainian, Polish
Jesse Smith <jessefrgsmith@yahoo.ca> -> 5.1
- Fixed duplicate error message when user tries to
sign in with invalid username.
- Make sure user can change username before
successfully authenticating.
- Fix error message when "type" command is not
given a parameter.
- Make sure we do not return multiple error
codes when an account is disabled.
- Do not drop connection to client when
selected account is disabled.
- Make sure when accounts are disabled/denied, they print the
proper reason (set in the config file) back to the client
ValueError: invalid literal for int() with base 10:
'_PATH_ORIG=/home/jmcneill/bin:/bin:/sbin:/usr/bin:/usr/sbin:/usr/X11R7/bin:/usr/pkg/bin:/usr/pkg/sbin:/usr/games:/usr/local/bin:/usr/local/sbin'
Upstream changes:
* quickstep
* crash on a retweet tab in Tweet details tabs when non-Twitter World
is selected
* pass application name to notify-send
* thanks Shibafu Midorino
* improve performance of toot cache
* crash on Fav'ed from Mastodon World when Current World is not
fav'ed account
Upstream changelog (from CHANGELOG.md):
## 1.10.3 / 2019-04-22
### Security Notes
[MRI] Pulled in upstream patch from libxslt that addresses CVE-2019-11068. Full details are available in [#1892](https://github.com/sparklemotion/nokogiri/issues/1892). Note that this patch is not yet (as of 2019-04-22) in an upstream release of libxslt.
## 1.10.2 / 2019-03-24
### Security
* [MRI] Remove support from vendored libxml2 for future script macros. [#1871]
* [MRI] Remove support from vendored libxml2 for server-side includes within attributes. [#1877]
### Bug fixes
* [JRuby] Fix node ownership in duplicated documents. [#1060]
* [JRuby] Rethrow exceptions caught by Java SAX handler. [#1847, #1872] (Thanks, @adjam!)
Changelog:
3.44.1:
* 1554336 - Optimize away unneeded loop in mpi.c
* 1515342 - More thorough input checking
* 1540541 - Don't unnecessarily strip leading 0's from key material during
PKCS11 import
* 1515236 - Add a SSLKEYLOGFILE enable/disable flag at build.sh
* 1546229 - Add IPSEC IKE support to softoken
* 1473806 - Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
* 1546477 - Updates to testing for FIPS validation
* 1552208 - Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
* 1551041 - Unbreak build on GCC < 4.3 big-endian
