changelog:
1.2.2.0
* The `integer-simple` package, upon which this package optionally
depended, has been replaced with `integer-pure`. The build flag has
been renamed accordingly.
* Bug fix: For the `Binary` instance, If UTF-8 decoding fails during a
`get`, the error is propagated via `fail` instead of an uncatchable
crash.
* New function: `takeWhileEnd`
* New instances for the `Text` types:
* if `base` >= 4.7: `PrintfArg`
* if `base` >= 4.9: `Semigroup`
---------------------------
- Fixed bugs and applied patches:
122 "clang does not compile re2c 0.15.x" (reported and fixed by Oleksii Taran).
124 "Get rid of UINT32_MAX and friends" (patch by Sergei Trofimovich, fixes FreeBSD builds).
125 "[OS X] git reports changes not staged for commit in newly cloned repository" (by Oleksii Taran, this fix also applies to Windows).
- Added option --no-version that allows to omit version information.
- Reduced memory and time consumed with -Wundefined-control-flow.
- Improved coverage of input data generated with -S --skeleton.
NEW support "set clip {one|two}" in 3D vector plots (splot ... with vectors)
CHANGE post.trm treats lt -1 as double width only when drawing the plot border
CHANGE distinguish between empty string variable and string constant ""
CHANGE preserve full precision of samples generated by '+' or '++'
CHANGE dumb terminal now handles UTF-8 characters
CHANGE "plot for [i=1:n] foo=i, x*foo" generates n plots (comma is ignored)
CHANGE accept '\r' as a terminator after console prompt (Windows only)
CHANGE use the same arrowhead style in the key sample as in the plot itself
CHANGE the command "set tics {front|back}" no longer affects grid lines also
CHANGE allow "noautoscale" keyword for 2D function plots
FIX dashtype labels in 'test' command were off by one
FIX autocalculation of box widths in the presence of NaN data values
FIX qt terminals dots were invisible
FIX point and impulse colors in 3D binary plots
FIX enable dashtype processing for epslatex terminal
FIX clean handling of unexpected input commands or data found by fuzz-testing
FIX many places where corrupt input commands or data could trigger a crash
FIX aquaterm fill area with transparency
FIX "offset 0" means "no offset" even in the case of log-scaled axes
FIX handle formatted read from a datablock
FIX "pause mouse" for wxt terminal (OSX, other single-threaded platforms)
FIX 2-column data plots "with filledcurve y=<value>"
FIX handling outliers in boxplot with categories (i.e. level in column 4)
FIX inline input format in `splot` command
FIX order-dependence of optional keywords for "set key" and "set obj polygon"
FIX lua/tikz text placement errors on OSX 10.10.2 with lua5.3
FIX B and L formats in gprintf()
FIX bug parsing time input with format "%s" (extra fractional second)
FIX incorrect average value in final bin of "smooth cnorm" calculation
FIX handle log-scale y values when calculating monotonic cubic spline fit
FIX "set clip points" was non-functional in version 5.0
FIX regression in 5.0.1 that left extraneous '@' in title columnhead(N)
FIX vertical placement of text fragments by cairo terminals
FIX "set [*]axis rangelimited" applies to minor as well as major tics
FIX qt terminal could drop chars from stdin depending on external event timing
(Passes make check on netbsd-6 i386 with pgsql 9.3.)
PostGIS 2.2.1
2016/01/06
* Bug Fixes *
- #2232, avoid accumulated error in SVG rounding
- #3321, Fix performance regression in topology loading
- #3329, Fix robustness regression in TopoGeo_addPoint
- #3349, Fix installation path of postgis_topology scripts
- #3351, set endnodes isolation on ST_RemoveIsoEdge
(and lwt_RemIsoEdge)
- #3355, geography ST_Segmentize has geometry bbox
- #3359, Fix toTopoGeom loss of low-id primitives from
TopoGeometry definition
- #3360, _raster_constraint_info_scale invalid input syntax
- #3375, crash in repeated point removal for collection(point)
- #3378, Fix handling of hierarchical TopoGeometries
in presence of multiple topologies
- #3380, #3402, Decimate lines on topology load
- #3388, #3410, Fix missing end-points in ST_Removepoints
- #3389, Buffer overflow in lwgeom_to_geojson
- #3390, Compilation under Alpine Linux 3.2
gives an error when compiling the postgis and postgis_topology extension
- #3393, ST_Area NaN for some polygons
- #3401, Improve ST_Split robustness on 32bit systems
- #3404, ST_ClusterWithin crashes backend
- #3407, Fix crash on splitting a face or an edge
defining multiple TopoGeometry objects
- #3411, Clustering functions not using spatial index
- #3412, Improve robustness of snapping step in TopoGeo_addLinestring
- #3415, Fix OSX 10.9 build under pkgsrc
- Fix memory leak in lwt_ChangeEdgeGeom [liblwgeom]
* not well-maintained in upstream
* active alternative "memoist" gem is available and committed
* the only user mikutter is updated to use the memoist gem
#mikutter 3.3.3
* update language po files
* fix of "crash on click of setting button" was missed
#mikutter 3.3.2
* Happy new year
* several crash issue
* crash on click of setting button on certain condition
* avoid use of lacacy methods deprecated by Ruby 2.3
#mikutter 3.3.1
* crash on UserStream process in some case
* crash on adding list
#mikutter 3.3.0
* use external libraries
* Delayer-Deferred
* Pluggaloid
* retweeted retweet
* liked retweet
* retweet with comments
* show icons for protected accounts
* add settings to show icons for verified accounts
* change method of counting a number of chars, to reflect URL conversion
* improvements of daemon mode
* notice function
* imrovements of support of some image services
Twitter-text gem provides text processing routines for Twitter Tweets.
The major reason for this is to unify the various auto-linking and
extraction of usernames, lists, hashtags and URLs.
NTP 4.2.8p5
Focus: Security, Bug fixes, enhancements.
Severity: MEDIUM
In addition to bug fixes and enhancements, this release fixes the
following medium-severity vulnerability:
* Small-step/big-step. Close the panic gate earlier.
References: Sec 2956, CVE-2015-5300
Affects: All ntp-4 releases up to, but not including 4.2.8p5, and
4.3.0 up to, but not including 4.3.78
CVSS3: (AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:L) Base Score: 4.0, MEDIUM
Summary: If ntpd is always started with the -g option, which is
common and against long-standing recommendation, and if at the
moment ntpd is restarted an attacker can immediately respond to
enough requests from enough sources trusted by the target, which
is difficult and not common, there is a window of opportunity
where the attacker can cause ntpd to set the time to an
arbitrary value. Similarly, if an attacker is able to respond
to enough requests from enough sources trusted by the target,
the attacker can cause ntpd to abort and restart, at which
point it can tell the target to set the time to an arbitrary
value if and only if ntpd was re-started against long-standing
recommendation with the -g flag, or if ntpd was not given the
-g flag, the attacker can move the target system's time by at
most 900 seconds' time per attack.
Mitigation:
Configure ntpd to get time from multiple sources.
Upgrade to 4.2.8p5, or later, from the NTP Project Download
Page or the NTP Public Services Project Download Page
As we've long documented, only use the -g option to ntpd in
cold-start situations.
Monitor your ntpd instances.
Credit: This weakness was discovered by Aanchal Malhotra,
Isaac E. Cohen, and Sharon Goldberg at Boston University.
NOTE WELL: The -g flag disables the limit check on the panic_gate
in ntpd, which is 900 seconds by default. The bug identified by
the researchers at Boston University is that the panic_gate
check was only re-enabled after the first change to the system
clock that was greater than 128 milliseconds, by default. The
correct behavior is that the panic_gate check should be
re-enabled after any initial time correction.
If an attacker is able to inject consistent but erroneous time
responses to your systems via the network or "over the air",
perhaps by spoofing radio, cellphone, or navigation satellite
transmissions, they are in a great position to affect your
system's clock. There comes a point where your very best
defenses include:
Configure ntpd to get time from multiple sources.
Monitor your ntpd instances.
Other fixes:
* Coverity submission process updated from Coverity 5 to Coverity 7.
The NTP codebase has been undergoing regular Coverity scans on an
ongoing basis since 2006. As part of our recent upgrade from
Coverity 5 to Coverity 7, Coverity identified 16 nits in some of
the newly-written Unity test programs. These were fixed.
* [Bug 2829] Clean up pipe_fds in ntpd.c perlinger@ntp.org
* [Bug 2887] stratum -1 config results as showing value 99
- fudge stratum should only accept values [0..16]. perlinger@ntp.org
* [Bug 2932] Update leapsecond file info in miscopt.html. CWoodbury, HStenn.
* [Bug 2934] tests/ntpd/t-ntp_scanner.c has a magic constant wired in. HMurray
* [Bug 2944] errno is not preserved properly in ntpdate after sendto call.
- applied patch by Christos Zoulas. perlinger@ntp.org
* [Bug 2952] Peer associations broken by fix for Bug 2901/CVE-2015-7704.
* [Bug 2954] Version 4.2.8p4 crashes on startup on some OSes.
- fixed data race conditions in threaded DNS worker. perlinger@ntp.org
- limit threading warm-up to linux; FreeBSD bombs on it. perlinger@ntp.org
* [Bug 2957] 'unsigned int' vs 'size_t' format clash. perlinger@ntp.org
- accept key file only if there are no parsing errors
- fixed size_t/u_int format clash
- fixed wrong use of 'strlcpy'
* [Bug 2958] ntpq: fatal error messages need a final newline. Craig Leres.
* [Bug 2962] truncation of size_t/ptrdiff_t on 64bit targets. perlinger@ntp.org
- fixed several other warnings (cast-alignment, missing const, missing prototypes)
- promote use of 'size_t' for values that express a size
- use ptr-to-const for read-only arguments
- make sure SOCKET values are not truncated (win32-specific)
- format string fixes
* [Bug 2965] Local clock didn't work since 4.2.8p4. Martin Burnicki.
* [Bug 2967] ntpdate command suffers an assertion failure
- fixed ntp_rfc2553.c to return proper address length. perlinger@ntp.org
* [Bug 2969] Seg fault from ntpq/mrulist when looking at server with
lots of clients. perlinger@ntp.org
* [Bug 2971] ntpq bails on ^C: select fails: Interrupted system call
- changed stacked/nested handling of CTRL-C. perlinger@ntp.org
* Unity cleanup for FreeBSD-6.4. Harlan Stenn.
* Unity test cleanup. Harlan Stenn.
* Libevent autoconf pthread fixes for FreeBSD-10. Harlan Stenn.
* Header cleanup in tests/sandbox/uglydate.c. Harlan Stenn.
* Header cleanup in tests/libntp/sfptostr.c. Harlan Stenn.
* Quiet a warning from clang. Harlan Stenn.
Upstream changes:
# 2014-09-21 - Version 2.3.1
- Fixed message "Warning in formatC(Signif) : class of 'x' was discarded"
- Fixed problem looking up objects in Sweave. R Code inside
Sweave files is now evaluated in .GlobalEnv, again, as
before version 2.3.0.
# 2014-09-06 - Version 2.3
- API BREAK: Make package conform to new CRAN policies.
- .HTML.file is no longer stored in the global environment:
use HTMLSetFile() and HTMLGetFile() instead of modifying it directly.
- .HTMLenv is no longer stored in the global environment:
it should never have been accessed directly in the first place.
- fix() is no longer replaced during HTMLStart()/HTMLStop() sessions.
- Remove obsolete handling of 'date' class from package survival.
- Remove obsolete support for old format of objects from the rpart package
Upstream changes:
Version 1.0.8 2010/08/09
- path.packages instead of .path.package (later is defunct).
- change in lm.phylog to prevent (incorrect) note about no visible binding
for global variable \xe2\x80\x98sim.counter\xe2\x80\x99 in a call to subset.
Update LICENSE
Upstream changes:
CHANGES IN highr VERSION 0.5
MAJOR CHANGES
o the minimal required R version is 3.0.2 now
CHANGES IN highr VERSION 0.4
BUG FIXES
o hi_andre() may fail to find highlight under OS X (thanks, Christopher
Gandrud, #2)
MINOR CHANGES
o :: and ::: are recognized as operators, and they will be syntax highlighted
in the same way as other operators like +, -, *, and /, etc (thanks, Qiang Li)
Upstream changes:
0.9156 Thu Oct 15 13:29:38 BST 2015
* Handle dists that have numerics in last part of distname
* Compartmentalise build dirs like CPANpm does
