New features
Release binary for Linux ARM64 (#728)
Make width configurable for snippet column
Add shared paths for cheat directory and config file
Add build feature to disable repo management
Add build feature to disable command execution
Code quality
Bump all possible dependencies (#729)
Temporarily remove lint checks (#730)
Fix path-related tests (#727)
Fix minor typos
Remove references to Linuxbrew
- build without x11
- bundle libstdc++.so.9 & libgcc_s.so.1 from base so it works with
base clang as well as future NetBSD releases
- don't ship external debug symbols (.diz), demos, src.zip
- build in clean chroot with pkgsrc bootstrapped to /root/pkg
- upload pgp signatures to nbftp
This mimics how it was done for openjdk11 &
takes bootstraps down from ~300MB to ~100MB.
Changes:
Fix resetting colors when loading invalid theme
Use correct color for nick of others in history
Fix a segfault when uploading or downloading files
Fix logging of text chatlogs
Simplification of tab completion code
Add Alt/Ctrl-arrows combinations for GNU Screen
Make all existing input functions bindable from config
Cleanup
Improve man pages
Fix race condition on resize
What's New in Pylint 2.13.9?
Respect ignore configuration options with --recursive=y.
Fix false positives for no-name-in-module and import-error for numpy.distutils and pydantic.
Fix IndexError crash in uninferable_final_decorators method.
Fix a crash in unnecessary-dict-index-lookup when subscripting an attribute.
Fix a crash when accessing __code__ and assigning it to a variable.
Fix a false positive for undefined-loop-variable when using enumerate().
v2.5.0
Merged pull requests:
tools/travis-ci/install.sh: git clone with https:// to fix 'The unaut…
Java Support 1.8 now...
Separate fuzz targets to increase coverage
CMakeLists.txt: do not set INSTALL_NAME_DIR for MacOS builds for CMake >= 3.0 (fixes
Avoid integer overflows in DWT. Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44544
Updated "added support for partial bitstream decoding"
opj_encoder_set_extra_options(): add a GUARD_BITS=value option
More overflow related bug fixes
opj_j2k_setup_encoder(): validate number of tiles to avoid illegal values and potential overflow (fixes
Missed conversion from unsigned int to OPJ_INT32
Added check for integer overflow in get_num_images
Added overflow check for CVE-2021-29338
Fix integer overflow in num_images
Remove duplicate assignments in function tiftoimage
Fix some typos (found by codespell)
CI: Add CIFuzz action
Feature/decimation
API: deprecate 'bpp' member in favor of 'prec'
Added support for high throughput (HTJ2K) decoding.
verify-indentation.sh: fix for pull request from bar/master to foo/master
Change integer for version libtiff 4.3.0
Port continuous integration to github actions
Avoid integer overflows in DWT.
LGTM warning: Comparison result is always the same
A couple typos found by codespell
cmake: add install interface include directory
fix issues 1368: exist a issues of freeing uninitialized pointer in src/bin/jp2/opj_decompress.c，that will cause a segfault
opj_j2k_is_imf_compliant: Fix out of bounds access
opj_j2k_is_imf_compliant: Fix argument formatting for warnings.
CMakeLists.txt/appveyor.yml: update version number to 2.5.0…
.travis.yml: try to fix gcc 4.8 config by updating to xenial
Add support for enabling generation of TLM markers in encoder
Fix various compiler warnings
fix
Remove obsolete components JPWL, JP3D and MJ2
tools/travis-ci/install.sh: fix links to Kakadu and jpylyzer binaries
emscripten: disable big endian test
Fix cmake file with DESTDIR
CMakeLists.txt: Don't require a C++ compiler
Import files tiff and yuv(raw)
Fix year in NEWS
Fix lcms2 static linking using pgk config
fix static build only against tiff and its indirect dependencies
Closed issues:
integer constant is too large for 'long' type
Openjpeg3D lossy compression not working
mj2: Array overflow
OPJ fails to decode image that KDU manages correctly
yuvtoimage() bug in v1 and v2 for 16-Bit: please apply ASAP
JP3D: Fix CVE-2013-4289 CVE-2013-4290
MJ2 libraries are installed in lib
MJ2: realloc is misused and may leak memory
MJ2 wrapper not functional
JPWL is broken in trunk
MJ2 files not using OPENJPEG API correctly
Maximum bit depth supported by the OpenJPEG implementation of JP3D
does openjpeg support either visually lossless or numerically lossless jpeg2000 compression?
extract jpeg2000 tile without decompression
openjpeg doesn't install a relocatable shared lib on macOS
pull request - the cinema industry awaits!
Integer overflows in j2K
why lossly compression performance worse than jpeg when compress png？
cect
the docs don't describe bpp and prec in opj_image_comp very well
converting .png to .jp2 by opj_compress is different from the original image
Comparison result is always the same
Exist a issues of freeing uninitialized pointer in src/bin/jp2/opj_decompress.c，that will cause a segfault
[TEST NOT RUNNING]: bigendian test
opj_decompress 2.4.0 built with library 2.3.0.
New library htjpeg2000
Integer Overflow in num_images
All IMF Profile Selections Result in PART1
grayscale image
error C2169: 'lrintf': intrinsic function, cannot be defined
Generate lower-case extension
color of reconstructed png file much darker
CVE-2019-6988, CVE-2018-20846 and CVE-2018-16376
opj 2.4.0: opj_free missing in opj3d
Not able to compress volumetric data
HTML documents are not installed in specified place
Can't find openjpeg.h when cross-compile.
OpenJPEG is available with EasyConfig
Building Test Programs
Builds are not reproducible
strange behaviour of opj_jp3d_compress/decompress utility
Potential heap-based buffer overflow in function t2_encode_packet in src/lib/openmj2/t2.c and src/lib/openjp3d/t2.c
Function tgatoimage in src/bin/jpwl/convert.c need to check that the file is big enough to avoid excessive memory allocations
memory & cpu are exhausted when converting jp2 file into png
Cannot compress PGX into JP3D despite following the directions?
sscanf buffer overflow in opj_jp3d_compress.c
integer underflow may lead to writing garbage
sscanf buffer overflow
strcpy overflows
sprintf buffer overflows
strcpy buffer overflow
integer overflow in malloc()
out of bounds writes
out of bounds writes
divide by zero, perhaps multiplication overflow
missing format string parameter
leaks from cppcheck in lib folder
How to initialize DEBUG_PROFILE in color.c?
JP3D sample files
BIG_ENDIAN bug in jpwl.c
OpenJPEG fails to decode partial j2c where kdu succeeds
building mj2 binaries fails
openmj2\mj2.c: Out of bounds
bin\mj2\opj_mj2_decompress.c 101 wrong check / leak
Changes since OpenSSH 8.9
=========================
This release is focused on bug fixing.
Potentially-incompatible changes
--------------------------------
This release switches scp(1) from using the legacy scp/rcp protocol
to using the SFTP protocol by default.
Legacy scp/rcp performs wildcard expansion of remote filenames (e.g.
"scp host:* .") through the remote shell. This has the side effect of
requiring double quoting of shell meta-characters in file names
included on scp(1) command-lines, otherwise they could be interpreted
as shell commands on the remote side.
This creates one area of potential incompatibility: scp(1) when using
the SFTP protocol no longer requires this finicky and brittle quoting,
and attempts to use it may cause transfers to fail. We consider the
removal of the need for double-quoting shell characters in file names
to be a benefit and do not intend to introduce bug-compatibility for
legacy scp/rcp in scp(1) when using the SFTP protocol.
Another area of potential incompatibility relates to the use of remote
paths relative to other user's home directories, for example -
"scp host:~user/file /tmp". The SFTP protocol has no native way to
expand a ~user path. However, sftp-server(8) in OpenSSH 8.7 and later
support a protocol extension "expand-path () openssh com" to support
this.
In case of incompatibility, the scp(1) client may be instructed to use
the legacy scp/rcp using the -O flag.
New features
------------
* ssh(1), sshd(8): use the hybrid Streamlined NTRU Prime + x25519 key
exchange method by default ("sntrup761x25519-sha512 () openssh com").
The NTRU algorithm is believed to resist attacks enabled by future
quantum computers and is paired with the X25519 ECDH key exchange
(the previous default) as a backstop against any weaknesses in
NTRU Prime that may be discovered in the future. The combination
ensures that the hybrid exchange offers at least as good security
as the status quo.
We are making this change now (i.e. ahead of cryptographically-
relevant quantum computers) to prevent "capture now, decrypt
later" attacks where an adversary who can record and store SSH
session ciphertext would be able to decrypt it once a sufficiently
advanced quantum computer is available.
* sftp-server(8): support the "copy-data" extension to allow server-
side copying of files/data, following the design in
draft-ietf-secsh-filexfer-extensions-00. bz2948
* sftp(1): add a "cp" command to allow the sftp client to perform
server-side file copies.
Bugfixes
--------
* ssh(1), sshd(8): upstream: fix poll(2) spin when a channel's output
fd closes without data in the channel buffer. bz3405 and bz3411
* sshd(8): pack pollfd array in server listen/accept loop. Could
cause the server to hang/spin when MaxStartups > RLIMIT_NOFILE
* ssh-keygen(1): avoid NULL deref via the find-principals and
check-novalidate operations. bz3409 and GHPR#307 respectively.
* scp(1): fix a memory leak in argument processing. bz3404
* sshd(8): don't try to resolve ListenAddress directives in the sshd
re-exec path. They are unused after re-exec and parsing errors
(possible for example if the host's network configuration changed)
could prevent connections from being accepted.
* sshd(8): when refusing a public key authentication request from a
client for using an unapproved or unsupported signature algorithm
include the algorithm name in the log message to make debugging
easier.
Portability
-----------
* sshd(8): refactor platform-specific locked account check, fixing
an incorrect free() on platforms with both libiaf and shadow
passwords (probably only Unixware) GHPR#284,
* ssh(1), sshd(8): Fix possible integer underflow in scan_scaled(3)
parsing of K/M/G/etc quantities. bz#3401.
* sshd(8): provide killpg implementation (mostly for Tandem NonStop)
GHPR#301.
* Check for missing ftruncate prototype. GHPR#301
* sshd(8): default to not using sandbox when cross compiling. On most
systems poll(2) does not work when the number of FDs is reduced
with setrlimit, so assume it doesn't when cross compiling and we
can't run the test. bz#3398.
* sshd(8): allow ppoll_time64 in seccomp sandbox. Should fix sandbox
violations on some (at least i386 and armhf) 32bit Linux platforms.
bz#3396.
* Improve detection of -fzero-call-used-regs=all support in
configure script.
Security Near Miss
==================
* sshd(8): fix an integer overflow in the user authentication path
that, in conjunction with other logic errors, could have yielded
unauthenticated access under difficult to exploit conditions.
This situation is not exploitable because of independent checks in
the privilege separation monitor. Privilege separation has been
enabled by default in since openssh-3.2.2 (released in 2002) and
has been mandatory since openssh-7.5 (released in 2017). Moreover,
portable OpenSSH has used toolchain features available in most
modern compilers to abort on signed integer overflow since
openssh-6.5 (released in 2014).
Thanks to Malcolm Stagg for finding and reporting this bug.
Potentially-incompatible changes
================================
* sshd(8), portable OpenSSH only: this release removes in-built
support for MD5-hashed passwords. If you require these on your
system then we recommend linking against libxcrypt or similar.
* This release modifies the FIDO security key middleware interface
and increments SSH_SK_VERSION_MAJOR.
Changes since OpenSSH 8.8
=========================
This release includes a number of new features.
New features
------------
* ssh(1), sshd(8), ssh-add(1), ssh-agent(1): add a system for
restricting forwarding and use of keys added to ssh-agent(1)
A detailed description of the feature is available at
https://www.openssh.com/agent-restrict.html and the protocol
extensions are documented in the PROTOCOL and PROTOCOL.agent
files in the source release.
* ssh(1), sshd(8): add the sntrup761x25519-sha512@openssh.com hybrid
ECDH/x25519 + Streamlined NTRU Prime post-quantum KEX to the
default KEXAlgorithms list (after the ECDH methods but before the
prime-group DH ones). The next release of OpenSSH is likely to
make this key exchange the default method.
* ssh-keygen(1): when downloading resident keys from a FIDO token,
pass back the user ID that was used when the key was created and
append it to the filename the key is written to (if it is not the
default). Avoids keys being clobbered if the user created multiple
resident keys with the same application string but different user
IDs.
* ssh-keygen(1), ssh(1), ssh-agent(1): better handling for FIDO keys
on tokens that provide user verification (UV) on the device itself,
including biometric keys, avoiding unnecessary PIN prompts.
* ssh-keygen(1): add "ssh-keygen -Y match-principals" operation to
perform matching of principals names against an allowed signers
file. To be used towards a TOFU model for SSH signatures in git.
* ssh-add(1), ssh-agent(1): allow pin-required FIDO keys to be added
to ssh-agent(1). $SSH_ASKPASS will be used to request the PIN at
authentication time.
* ssh-keygen(1): allow selection of hash at sshsig signing time
(either sha512 (default) or sha256).
* ssh(1), sshd(8): read network data directly to the packet input
buffer instead of indirectly via a small stack buffer. Provides a
modest performance improvement.
* ssh(1), sshd(8): read data directly to the channel input buffer,
providing a similar modest performance improvement.
* ssh(1): extend the PubkeyAuthentication configuration directive to
accept yes|no|unbound|host-bound to allow control over one of the
protocol extensions used to implement agent-restricted keys.
Bugfixes
--------
* sshd(8): document that CASignatureAlgorithms, ExposeAuthInfo and
PubkeyAuthOptions can be used in a Match block. PR#277.
* sshd(8): fix possible string truncation when constructing paths to
.rhosts/.shosts files with very long user home directory names.
* ssh-keysign(1): unbreak for KEX algorithms that use SHA384/512
exchange hashes
* ssh(1): don't put the TTY into raw mode when SessionType=none,
avoids ^C being unable to kill such a session. bz3360
* scp(1): fix some corner-case bugs in SFTP-mode handling of
~-prefixed paths.
* ssh(1): unbreak hostbased auth using RSA keys. Allow ssh(1) to
select RSA keys when only RSA/SHA2 signature algorithms are
configured (this is the default case). Previously RSA keys were
not being considered in the default case.
* ssh-keysign(1): make ssh-keysign use the requested signature
algorithm and not the default for the key type. Part of unbreaking
hostbased auth for RSA/SHA2 keys.
* ssh(1): stricter UpdateHostkey signature verification logic on
the client- side. Require RSA/SHA2 signatures for RSA hostkeys
except when RSA/SHA1 was explicitly negotiated during initial
KEX; bz3375
* ssh(1), sshd(8): fix signature algorithm selection logic for
UpdateHostkeys on the server side. The previous code tried to
prefer RSA/SHA2 for hostkey proofs of RSA keys, but missed some
cases. This will use RSA/SHA2 signatures for RSA keys if the
client proposed these algorithms in initial KEX. bz3375
* All: convert all uses of select(2)/pselect(2) to poll(2)/ppoll(2).
This includes the mainloops in ssh(1), ssh-agent(1), ssh-agent(1)
and sftp-server(8), as well as the sshd(8) listen loop and all
other FD read/writability checks. On platforms with missing or
broken poll(2)/ppoll(2) syscalls a select(2)-based compat shim is
available.
* ssh-keygen(1): the "-Y find-principals" command was verifying key
validity when using ca certs but not with simple key lifetimes
within the allowed signers file.
* ssh-keygen(1): make sshsig verify-time argument parsing optional
* sshd(8): fix truncation in rhosts/shosts path construction.
* ssh(1), ssh-agent(1): avoid xmalloc(0) for PKCS#11 keyid for ECDSA
keys (we already did this for RSA keys). Avoids fatal errors for
PKCS#11 libraries that return empty keyid, e.g. Microchip ATECC608B
"cryptoauthlib"; bz#3364
* ssh(1), ssh-agent(1): improve the testing of credentials against
inserted FIDO: ask the token whether a particular key belongs to
it in cases where the token supports on-token user-verification
(e.g. biometrics) rather than just assuming that it will accept it.
Will reduce spurious "Confirm user presence" notifications for key
handles that relate to FIDO keys that are not currently inserted in at
least some cases. bz3366
* ssh(1), sshd(8): correct value for IPTOS_DSCP_LE. It needs to
allow for the preceding two ECN bits. bz#3373
* ssh-keygen(1): add missing -O option to usage() for the "-Y sign"
option.
* ssh-keygen(1): fix a NULL deref when using the find-principals
function, when matching an allowed_signers line that contains a
namespace restriction, but no restriction specified on the
command-line
* ssh-agent(1): fix memleak in process_extension(); oss-fuzz
issue #42719
* ssh(1): suppress "Connection to xxx closed" messages when LogLevel
is set to "error" or above. bz3378
* ssh(1), sshd(8): use correct zlib flags when inflate(3)-ing
compressed packet data. bz3372
* scp(1): when recursively transferring files in SFTP mode, create the
destination directory if it doesn't already exist to match scp(1) in
legacy RCP mode behaviour.
* scp(1): many improvements in error message consistency between scp(1)
in SFTP mode vs legacy RCP mode.
* sshd(8): fix potential race in SIGTERM handling PR#289
* ssh(1), ssh(8): since DSA keys are deprecated, move them to the
end of the default list of public keys so that they will be tried
last. PR#295
* ssh-keygen(1): allow 'ssh-keygen -Y find-principals' to match
wildcard principals in allowed_signers files
Portability
-----------
* ssh(1), sshd(8): don't trust closefrom(2) on Linux. glibc's
implementation does not work in a chroot when the kernel does not
have close_range(2). It tries to read from /proc/self/fd and when
that fails dies with an assertion of sorts. Instead, call
close_range(2) directly from our compat code and fall back if
that fails. bz#3349,
* OS X poll(2) is broken; use compat replacement. For character-
special devices like /dev/null, Darwin's poll(2) returns POLLNVAL
when polled with POLLIN. Apparently this is Apple bug 3710161 -
not public but a websearch will find other OSS projects
rediscovering it periodically since it was first identified in
2005.
* Correct handling of exceptfds/POLLPRI in our select(2)-based
poll(2)/ppoll(2) compat implementation.
* Cygwin: correct checking of mbstowcs() return value.
* Add a basic SECURITY.md that refers people to the openssh.com
website.
* Enable additional compiler warnings and toolchain hardening flags,
including -Wbitwise-instead-of-logical, -Wmisleading-indentation,
-fzero-call-used-regs and -ftrivial-auto-var-init.
* HP/UX. Use compat getline(3) on HP-UX 10.x, where the libc version
is not reliable.
libstrophe is a minimal XMPP library written in C. It has almost no external
dependencies, only an XML parsing library (expat or libxml are both supported).
It is designed for both POSIX and Windows systems.
Summary of Changes
use C99 types instead of the angband special types
Single Combat maybe finally bug-free
improvements to the birth process
improvements to the NDS port
many improvements to auto-building and all the front ends
improvements to changing of background colours
adding of a panic directory for panic saves
new tests, and improvements to current ones
re-organisation of effects code
add a player argument to a lot of functions that needed it
import a lot of historical documentation
lots of tidying and neatening
Summary of changes between Frotz 2.53 and Frotz 2.54:
=====================================================
Frotz 2.54 was released on Wednesday April 13, 2022.
This release's main attractions are official support for TOPS20 and
cross-compilation to DOS.
NEW FEATURES
- Added changes to allow for compilation on a DEC PDP-10 mainframe
running TOPS20. See INSTALL_PDP10.
- Added a means to cross-compile to DOS by way of Open Watcom C version
2 and later. See INSTALL_DOS.
- Added a quiet mode to dumb interface to quell startup messages.
BUG FIXES
- Fixed several problems with compilation under macOS.
- Fixed wrong glyphs in DOS Frotz's Amiga font mode. 1/2 and 1/4 were
there instead of the oe and OE ligatures.
- Fixed a failure of the -q flag to actually silence sound effects.
- Fixed an oversight in SDL Frotz that prevented some sounds from
playing in Lurking Horror.
- Made the dumb and curses interfaces read the resolution chunk from
Blorb files. Previously they would assume a resolution of 320x200.
This is a maintenance release of cbmconvert, with no new features.
What's Changed
- REL files are correctly written to Lynx archives.
- 1571 images can be actually created.
- Most code is now covered by CTest.
- ARC/SDA, Arkive, T64 are not covered at all yet.
Full Changelog: https://github.com/dr-m/cbmconvert/commits/cbmconvert-2.1.5
This is a new semi-major release, with the following changes:
Added preliminary PlusROM support for saving high scores.
Added preliminary support for 'MVC' bankswitching scheme by Rob Bairos.
Added web links for many games.
Added dead zone and linearity settings for analog controllers.
Added 'Check for Update' button to Help dialog.
Added different mask patterns for scanline emulation.
Fixed MindLink controller.
Fixed SaveKey not working with QuadTari.
Added TIA randomization on startup option.
Added different debug color luminances for player and missile copies.
Added hotkeys for TV roll speed and toggling 'Developer settings' sets.
Debugger: enhanced prompt's auto complete and history.
Debugger: added optional logging of breaks and traps.
Debugger: added Thumb cycle counting.
5.1. Changes in 0.94.4
o Fixed getting stuck with loading plaque upon attempting to load a
bad save from the menu
o Fixed SZ_GetSpace server crashes, e.g. in ad_magna or ad_mountain
o Fixed intermission camera angles during demo playback
o Don't reset onground flag on every new server message
o Re-enabled title demos by default (turn off with cl_startdemos 0)
o Don't autoplay next demo after a timedemo
o Fixed bad parsing of cdtrack in hipdemo1 from Scourge of Armagon
o Fixed serverinfo off-by-one nummodels/numsounds for protocol 15
o Support for Quake 2021 update 3
o Implemented quad/pentagram dlights for Quake 2021 rerelease
o Implemented 2021 rerelease localsound builtin & svc_localsound (56)
o Several other improvements to Quake 2021 rerelease support
o Several other small fixes and improvements all over the code
o Updated third party code (SDL, lodepng, miniz, some of the codecs,
etc.)
o Thanks to Andrei Drexler, 'atsb' and 'temx' for their several
patches.
