The return values of the postinstall and postremove meta-tasks are
ignored unless the user-settable variable ${PKG_FATAL_ERRORS} is
"yes". ${PKG_FATAL_ERRORS} defaults to "no" to preserve the
existing behavior of install scripts by mk/pkginstall.
If ${DESTDIR} was non-empty and the source file was an absolute
path, the postinstall check target defined in mk/pkgtasks/files.mk
was improperly failing. Fix the bug by only prepending ${PREFIX}
if the source path is relative, and always prepending ${DESTDIR}.
Add definitions for the gtk-update-icon-cache(1) command to the
script header template, and a makefile fragment that creates the
data file for the "icon_themes" package task if ${ICON_THEMES} is
"yes" in the package Makefile.
Also bump pkgtasks dependency to version 1.12 for the "icon_themes"
package task and compatibility with pkgsrc/mk/pkginstall.
* Add a "icon_themes" task to cache GTK+ icon theme directories.
* Change the way that install-info(1) is invoked.
* Clarify the output from the "groups" and "users" tasks.
* Bug fixes.
These should be explicitly set in the scripts, otherwise, the
pkgtasks defaults are used by locating programs in the $PATH
or are hardcoded defaults used for testing pkgtasks.
For target files listed in CONF_FILES (and other config file
variables), assert that the containing directories are named in
MAKE_DIRS or one of the other directory variables.
Pkgsrc changes:
Added comments and RCS tags to patches.
Make perl a runtime dependency since installed
runtime scripts uses it.
Changes and bugfixes from release notes:
Changes in 4.13:
* build: wire up version handling for non-release tarballs (as opposed to git
checkouts)
* build: switch to the GNU build system
* i3bar: disable pango markup for plain-text input
* man/i3-msg: point out default ipc message type
* config: introduce support for specifying variables from X resources
* config: ensure variables match on longest-length, eliminating problems
where one variable was a prefix of another
* config: do not count '\' in comment lines as line continuation
* ipc: introduce a new GET_BINDING_MODES command
* ipc: implement new window::mark event
* ipc: add ?output? to IPC events referencing a container
* make fullscreen windows open on the output which is indicated by their
geometry (fixes LibreOffice Impress multi-monitor presentations)
* focus newly managed windows only if they don?t use the globally active
input mode (fixes issues with RubyMine)
* remove title indentation in nested containers (rationale was unclear,
nobody spoke up when we asked about the feature on i3-discuss)
* use the last known timestamp when calling xcb_set_input_focus (might fix
rare race conditions in focus handling)
* introduce the "smart" option for hide_edge_borders, which will hide borders
when there is precisely one window on the workspace
* handle _MOTIF_WM_HINTS changes (_MOTIF_WM_HINTS were previously only
considered when managing a new window)
* don?t change border style if BS_NORMAL is requested in _MOTIF_WM_HINTS
* only add numlock fallback for keybindings where necessary (allows users to
correctly bind keys on the numpad)
* do not match docks in config and command criteria
* get DPI from the Xft.dpi resource instead of directly looking at the screen
resolution/size
* handle _NET_ACTIVE_WINDOW for scratchpad windows (for pagers)
* set _NET_WM_DESKTOP to sticky for scratchpad windows
* add new criteria "tiling" and "floating"
* implement special output name "current" for commands
* handle ResizeRequests for tray clients (fixes VLC tray icon)
Bugfixes in 4.13:
* i3bar: fix crash when the I3SOCK environment variable is present
* i3-dmenu-desktop: do not die on failed open
* i3-input: properly position in non-standard cases (fixes an issue where
i3-input would launch off-screen)
* i3-save-tree: rename "mark" to "marks" to reflect our recent change to
allow multiple marks
* mouse bindings: only grab the mouse buttons that need to be grabbed
* no_focus: correctly count the number of windows (makes no_focus work with
tabbed/stacked workspace layouts).
* properly close disabled outputs restored during a restart (this fixes state
handling when RandR changes happen during i3 restarts)
* don't trigger bindings on window border clicks unless --border was
specified for the binding
* traverse numbered workspaces in correct order
fix transition from named to numbered workspaces in "workspace next|prev"
* avoid setting urgency hint on content containers and above (fixes crashes)
* don't trigger unrelated key bindings for --release bindings
* fix colormap handling for containers (fixes taking screenshots using xwd)
* check output crossing on ENTER_NOTIFY to dockarea (fixes pointer jumping)
* fix a use-after-free bug (fixes "floating enable" on single split windows)
Curl and libcurl 7.55.0
Public curl releases: 167
Command line options: 210
curl_easy_setopt() options: 247
Public functions in libcurl: 61
Contributors: 1571
This release includes the following changes:
o curl: allow --header and --proxy-header read from file [7]
o getinfo: provide sizes as curl_off_t [6]
o curl: prevent binary output spewed to terminal [16]
o curl: added --request-target [22]
o libcurl: added CURLOPT_REQUEST_TARGET [22]
o curl: added --socks5-{basic,gssapi}: control socks5 auth [30]
o libcurl: added CURLOPT_SOCKS5_AUTH [30]
This release includes the following bugfixes:
o glob: do not parse after a strtoul() overflow range (CVE-2017-1000101) [85]
o tftp: reject file name lengths that don't fit (CVE-2017-1000100) [84]
o file: output the correct buffer to the user (CVE-2017-1000099) [83]
o includes: remove curl/curlbuild.h and curl/curlrules.h [1]
o dist: make the hugehelp.c not get regenerated unnecessarily [2]
o timers: store internal time stamps as time_t instead of doubles [3]
o progress: let "current speed" be UL + DL speeds combined [4]
o http-proxy: do the HTTP CONNECT process entirely non-blocking [5]
o lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV [8]
o fuzz: bring oss-fuzz initial code converted to C89 [10]
o configure: disable nghttp2 too if HTTP has been disabled
o mk-ca-bundle.pl: Check curl's exit code after certdata download [11]
o test1148: verify the -# progressbar [12]
o tests: stabilize test 2032 and 2033 [13]
o HTTPS-Proxy: don't offer h2 for https proxy connections [14]
o http-proxy: only attempt FTP over HTTP proxy [9]
o curl-compilers.m4: enable vla warning for clang [15]
o curl-compilers.m4: enable double-promotion warning [15]
o curl-compilers.m4: enable missing-variable-declarations clang warning [15]
o curl-compilers.m4: enable comma clang warning [15]
o Makefile.m32: enable -W for MinGW32 build [15]
o CURLOPT_PREQUOTE: not supported for SFTP [17]
o http2: fix OOM crash
o PIPELINING_SERVER_BL: cleanup the internal list use [18]
o mkhelp.pl: fix script name in usage text
o lib1521: add curl_easy_getinfo calls to the test set
o travis: do the distcheck test build out-of-tree as well
o if2ip: fix compiler warning in ISO C90 mode
o lib: fix the djgpp build [19]
o typecheck-gcc: add support for CURLINFO_OFF_T [20]
o travis: enable typecheck-gcc warnings [21]
o maketgz: switch to xz instead of lzma [23]
o CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
o curl-compilers.m4: fix unknown-warning-option on Apple clang [24]
o winbuild: fix boringssl build [25]
o curl/system.h: add check for XTENSA for 32bit gcc [26]
o test1537: fixed memory leak on OOM
o test1521: fix compiler warnings [27]
o curl: fix memory leak on test 1147 OOM [28]
o libtest/make: generate lib1521.c dynamically at build-time [29]
o curl_strequal.3: fix typo in SYNOPSIS [31]
o progress: prevent resetting t_starttransfer [32]
o openssl: improve fallback seed of PRNG with a time based hash [33]
o http2: improved PING frame handling [34]
o test1450: add simple testing for DICT [35]
o make: build the docs subdir only from within src [36]
o cmake: Added compatibility options for older Windows versions [37]
o gtls: fix build when sizeof(long) < sizeof(void *) [38]
o url: make the original string get used on subsequent transfers [39]
o timeval.c: Use long long constant type for timeval assignment [40]
o tool_sleep: typecast to avoid macos compiler warning
o travis.yml: use --enable-werror on debug builds [41]
o test1451: add SMB support to the testbed [42]
o configure: remove checks for 5 functions never used [43]
o configure: try ldap/lber in reversed order first [44]
o smb: fix build for djgpp/MSDOS [45]
o travis: install nghttp2 on linux builds [46]
o smb: add support for CURLOPT_FILETIME [47]
o cmake: fix send/recv argument scanner for windows [48]
o inet_pton: fix include on windows to get prototype [49]
o select.h: avoid macro redefinition harder
o cmake: if inet_pton is used, bump _WIN32_WINNT
o asyn-thread.c: fix unused variable warnings on macOS
o runtests: support "threaded-resolver" as a feature
o test506: skip if threaded-resolver
o cmake: remove spurious "-l" from linker flags [50]
o cmake: add CURL_WERROR for enabling "warning as errors"
o memdebug: don't setbuf() if the file open failed [51]
o curl_easy_escape.3: mention the (lack of) encoding [52]
o test1452: add telnet negotiation [53]
o CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
o cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC [54]
o tests/valgrind.supp: supress OpenSSL false positive seen on travis [55]
o curl_setup_once: Remove ERRNO/SET_ERRNO macros [56]
o curl-compilers.m4: disable warning spam with Cygwin's clang [57]
o ldap: fix MinGW compiler warning [58]
o make: fix docs build on OpenBSD [59]
o curl_setup: always define WIN32_LEAN_AND_MEAN on Windows [60]
o system.h: include winsock2.h before windows.h
o winbuild: build with warning level 4 [61]
o rtspd: fix MSVC level 4 warning
o sockfilt: suppress conversion warning with explicit cast
o libtest: fix MSVC warning C4706
o darwinssl: fix pinnedpubkey build error [62]
o tests/server/resolve.c: fix deprecation warning [63]
o nss: fix a possible use-after-free in SelectClientCert() [64]
o checksrc: escape open brace in regex
o multi: mention integer overflow risk if using > 500 million sockets [65]
o darwinssl: fix --tlsv1.2 regression [66]
o timeval: struct curltime is a struct timeval replacement [67]
o curl_rtmp: fix a compiler warning [68]
o include.d: clarify that it concerns the response headers [69]
o cmake: support make uninstall [70]
o include.d: clarify --include is only for response headers [71]
o libcurl: Stop using error codes defined under CURL_NO_OLDIES [72]
o http: fix response code parser to avoid integer overflow [73]
o configure: fix the check for IdnToUnicode [74]
o multi: fix request timer management [75]
o curl_threads: fix MSVC compiler warning [76]
o travis: build on osx with openssl
o travis: build on osx with libressl
o CURLOPT_NETRC.3: mention the file name on windows
o cmake: set MSVC warning level to 4 [77]
o netrc: skip lines starting with '#' [78]
o darwinssl: fix curlssl_sha256sum() compiler warnings on first argument
o BUILD.WINDOWS: mention buildconf.bat for builds off git
o darwinssl: silence compiler warnings [79]
o travis: build on osx with darwinssl
o FTP: skip unnecessary CWD when in nocwd mode [80]
o gssapi: fix memory leak of output token in multi round context [81]
o getparameter: avoid returning uninitialized 'usedarg' [82]
o curl (debug build) easy_events: make event data static
o curl: detect and bail out early on parameter integer overflows [86]
o configure: fix recv/send/select detection on Android [87]
ftp://invisible-island.net/ncurses/6.0/ncurses-6.0-20170701.patch.gz
+ add/improve checks in tic's parser to address invalid input
(Redhat #1464684, #1464685, #1464686, #1464691).
+ alloc_entry.c, add a check for a null-pointer.
+ parse_entry.c, add several checks for valid pointers as well as
one check to ensure that a single character on a line is not
treated as the 2-character termcap short-name.
that's CVE-2017-10684 CVE-2017-10685 CVE-2017-11112 CVE-2017-11113
HPLIP 3.17.7 - This release has the following changes:
Added Support for the Following New Printers:
- HP DeskJet Ink Advantage 2635 All-in-One
- HP DeskJet Ink Advantage 2636 All-in-One
- HP DeskJet Ink Advantage 2675 All-in-One
- HP DeskJet Ink Advantage 2676 All-in-One
- HP DeskJet Ink Advantage 2677 All-in-One
- HP DeskJet Ink Advantage 2678 All-in-One
- HP DeskJet 2620 All-in-One
- HP DeskJet 2621 All-in-One
- HP DeskJet 2622 All-in-One
- HP DeskJet 2623 All-in-One
- HP DeskJet Ink Advantage 2200 All-in-One
- HP DeskJet 3722 All-in-One
- HP DeskJet Ink Advanatge 3789 All-in-One
- HP DeskJet Ink Advanatge 3790 All-in-One
Other Requirement:
1. 43180 - Re-implementation of "hpps" filter in C
Change the assertion into an install-time check that the paths
listed in INSTALLATION_DIRS are relative paths or are in ${PREFIX}.
This delays the check so that some common variables used when
listing directories in INSTALLATION_DIRS are fully-expanded.
* jpeg: restore grayscale image support
* bmp: Tighten image dimension checks
* ico: Fixo icon quality sorting
* Various other leak and overflow fixes
* Add some assertion to help static analysis
* Remove support for building on various obsolete platforms
* Translation updates
2.36.7:
* Add tests for recent bug fixes
* ico, bmp, tiff: avoid integer overflows
* jpeg: error out if wrong number of channels
* Misc.bugfixes
* Support mimetypes: image/wmf, image/emf
* Translation updates
MariaDB 5.5.57
- Bugfixes and updates, including from MySQL 5.5.57.
- Fixes for the following security vulnerabilities:
- CVE-2017-3636
- CVE-2017-3641
- CVE-2017-3653
MariaDB 5.5.56
- Bugfixes and updates, including from MySQL 5.5.56.
MariaDB 5.5.55
- Bugfixes and updates, including from MySQL 5.5.55.
- MDEV-11027: better InnoDB crash recovery progress reporting
- MDEV-11520: improvements to how InnoDB data files are extended
- MDEV-6143: the various MariaDB Linux binary tarballs will now untar
to directories that match their filename
- Fixes for the following security vulnerabilities:
- CVE-2017-3302
- CVE-2017-3313
- CVE-2017-3308
- CVE-2017-3309
- CVE-2017-3453
- CVE-2017-3456
- CVE-2017-3464
MariaDB 5.5.54
- Bugfixes and updates, including from MySQL 5.5.54.
- HeidiSQL updated to 9.4
- Fixes for the following security vulnerabilities:
- CVE-2016-6664
- CVE-2017-3238
- CVE-2017-3243
- CVE-2017-3244
- CVE-2017-3258
- CVE-2017-3265
- CVE-2017-3291
- CVE-2017-3312
- CVE-2017-3317
- CVE-2017-3318
MariaDB 5.5.53
- Bugfixes and updates, including from MySQL 5.5.53.
- XtraDB updated to 5.5.52-38.3
- Fixes for the following security vulnerabilities:
- CVE-2016-7440
- CVE-2016-5584
- CVE-2016-5483 (re-issued later as CVE-2017-3600)
- CVE-2017-3651
This appears to be causing issues with pkgsrc GCC attempting to insert
builtins it does not have, because we don't build libssp. unbreaks icu build.
there may be more problems from this issue in the future, but netbsd-7 is
better tested now.
https://git.finalrewind.org/feh/plain/ChangeLog
Tue, 25 Jul 2017 18:40:33 +0200 Daniel Friesel <derf+feh@finalrewind.org>
* Release v2.19.1
* Fix Shift modifier not being recognized for tab, space and similar keys.
This lead to keybindings like Shift+Tab or Shift+Space being parsed as if
the Shift modifier had not been specified
WordPress 4.8.1 contains 29 maintenance fixes and enhancements to the 4.8 release series, chief among them are fixes to the rich Text widget and the introduction of the Custom HTML widget.
Administration
* #40982 - Permalink Settings: custom structure field keyboard trap
Build/Test Tools
* #41327 - Bump Akismet External - 4.9 Edition
Comments
* #40975 - 'Empty Spam' and 'Empty Trash' comment buttons not displayed on mobile
Customize
* #40978 - Customizer Panel Footer border missing
* #40981 - Customizer: Menus: it is far too easy to mistakenly delete a menu because the "Delete Menu" link and the "Add Items" button are too close together
* #41158 - Increase tinymce panel z-index
* #41410 - Set `'filter' => 'content'` on starter content "business info" widget
Embeds
* #41019 - oEmbed: Update VideoPress oEmbed URL
* #41048 - `WP_oEmbed_Controller::get_proxy_item()` should remove `_wpnonce` from cached `$args`
* #41299 - oEmbed proxy fails to forward maxwidth and maxheight params
General
* #41056 - WP-API JS Client: Settings is incorrectly registered as a collection
Media
* #41231 - media-views.js: Cannot read .length of undefined (this.controller.$uploaderToggler.length)
REST API
* #38964 - Add filter to allow modifying response *after* embedded data is added
* #40886 - REST API: PUT requests fail on Nginx servers when fancy permalinks aren't enabled
Taxonomy
* #41010 - wp_get_object_terms() returns duplicate terms if more than one taxonomy is given in args
TinyMCE
* #41408 - TinyMCE: Images with link and caption look "broken" when selected
Widgets
* #40907 - Introduce widget dedicated for HTML code
* #40935 - Facebook Video Works On Preview But Not On Theme
* #40951 - New Text Widget - Switching Between Visual/Text Editor Strips Out Code
* #40960 - Widgets: The Text widget should respect the “Disable the visual editor when writing” setting
* #40972 - TinyMCE editor in Text widget does not have RTL contents
* #40974 - Updated text widget do not save text (when using paste)
* #40977 - Widgets: Query param for `loop` added for non-hosted external videos
* #40986 - Widgets: text widget and media widgets cannot be edited in accessibility mode
* #41021 - Text widget does not show Title field or TinyMCE editor
* #41361 - Text widget can raise JS error if customize-base is enqueued on widgets admin screen
* #41386 - Text Widget - Wording - Legacy Mode 4.8.1 beta
* #41392 - Theme styles for Text widget do not apply to Custom HTML widget
* #41394 - Text widget: Rename legacy mode to visual mode and improve back-compat for widget_text filters
* Add native file chooser support for OS X
* Bug fixes:
766517 GtkAboutDialog should use https:// license URLs
781583 gtk_image_new_from_resource does not work
781935 Add nullable return annotation to gtk_notebook_get_tab_label
781936 Add nullable return annotation to gtk_text_mark_get_name
782040 Wacom pen calibration application responds to mouse input
782325 wayland: Add possibility to get the exported handle multiple times
784323 Quartz backend: gtk_clipboard_get_default not implemented
784723 macOS: native file chooser dialog
784888 gtkapplication: Mark gtk_application_get_active_window() as nullable
* Translation updates:
Friulian
Kazakh
=============================================
- Support emoji sequences in boundary determination
- Choose emoji font for color emoji
Overview of changes between 1.40.6 and 1.40.7
=============================================
- Some fixes for meson build support
- Don't change fonts for variation selectors
- Fix some bugs in the libthai glue layer
- Pass text along when calling into cairo
Overview of changes between 1.40.5 and 1.40.6
=============================================
- Don't use deprecated harfbuzz api
- Correctly implement min-required/max-allowed support
- Avoid compiler warnings
- Drop -uninstalled.pd files
- Add support for building with meson
