The changes in patch-ytnef.c has been applied upstream.
patch-ytnef.c has now been removed.
Changes from Changelog:
v1.9.2 - February 23, 2017
Thanks to @hannob for finding some Out-of-bound exceptions in memory handline.
* [SECURITY] An invalid memory access (heap overrun) in handling LONG datatypes (CVE-2017-6800)
* [SECURITY] Missing a check for fields of size 0 (CVE-2017-6801)
* [SECURITY] Potential buffer overrun on incoming Compressed RTF Streams (CVE-2017-6802)
This version & the previous 1.9.1 resolves the following CVEs:
* CVE-2017-6306
* CVE-2017-6305
* CVE-2017-6304
* CVE-2017-6303
* CVE-2017-6302
* CVE-2017-6301
* CVE-2017-6300
* CVE-2017-6299
* CVE-2017-6298
v1.9.1 - Feb 14, 2017
* BugFix for path handling- label both / and \ as invalid characters inattachments
* Remove lots of exit(-1)'s from the code that would crash calling programs
* [SECURITY] Thanks to EricSesterhennX41 for a patch to fix lots of invalid
memory allocation around corrupted files.
v1.9 - January 2, 2017
* Unify libytnef and ytnef tools into a single build & package (Thanks @jmallach)
* Fix applied for CVE-2010-5109
* Various fixes for errors found via Static Analysis (cppcheck)
* Various memory leaks plugged (Thanks @slonik-v-domene)
* Bugfix for a broken "uniqueness" checker
* Lots of formatting & documentation cleanups
Now that the two packages are unified into a single install & build, I've had
to choose a unifier of Version Numbers. I chose 1.9 .
DEPRECATIONS/CHANGES:
- PKI Root Generation: Calling `pki/root/generate` when a CA cert/key already
exists will now return a `204` instead of overwriting an existing root. If
you want to recreate the root, first run a delete operation on `pki/root`
(requires `sudo` capability), then generate it again.
FEATURES:
- Oracle Secret Backend: There is now an external plugin to support leased
credentials for Oracle databases (distributed separately).
- GCP IAM Auth Backend: There is now an authentication backend that allows
using GCP IAM credentials to retrieve Vault tokens. This is available as
both a plugin and built-in to Vault.
- PingID Push Support for Path-Baased MFA (Enterprise): PingID Push can
now be used for MFA with the new path-based MFA introduced in Vault
Enterprise 0.8.
- Permitted DNS Domains Support in PKI: The `pki` backend now supports
specifying permitted DNS domains for CA certificates, allowing you to
narrowly scope the set of domains for which a CA can issue or sign child
certificates.
- Plugin Backend Reload Endpoint: Plugin backends can now be triggered to
reload using the `sys/plugins/reload/backend` endpoint and providing either
the plugin name or the mounts to reload.
- Self-Reloading Plugins: The plugin system will now attempt to reload a
crashed or stopped plugin, once per request.
IMPROVEMENTS:
- auth/approle: Allow array input for policies in addition to comma-delimited
strings
- auth/aws: Allow using root credentials for IAM authentication
- plugins: Send logs through Vault's logger rather than stdout
- secret/pki: Add `pki/root` delete operation
- secret/pki: Don't overwrite an existing root cert/key when calling generate
BUG FIXES:
- aws: Don't prefer a nil HTTP client over an existing one
- core: If there is an error when checking for create/update existence, return
500 instead of 400
- secret/database: Avoid creating usernames that are too long for legacy MySQL
Fixes pkg/52488.
Release 3.6.5
- Fix for [pgpool-hackers: 2400] Garbage output
- Importing the latest changes in the MemoryManager API from PostgreSQL
code.
- Fixing 0000306: Pgpool steals back MASTER status.
- Fixing [pgpool-hackers: 2390]Problems with the relative paths in
daemon mode
- Adjust function name change in PostgreSQL 10 dev head.
- Fix a posible hang with streaming replication and extended protocol.
- Fix Pgpool-II hang when used by erlang applications.
- Fix bug with sending bind message to wrong target node.
- Fix query cache hang when used by node.js.
- Deal with PostgreSQL 10 in streaming replication delay checking.
- Fix query cache memory leak.
- Fix extended query hang in certain case.
- Fix for [pgpool-hackers: 2354] segfault with pg_md5.
- Fix descriptions of white/black_memcache_table_list.
- Fix corner case bug in Pgpool-II starting up.
Release 3.6.4
- Fixing a few corner cases in the failover request handling of the
watchdog.
- Tightening up the watchdog cluster membership criteria.
- Enhance document for load balancing.
- Add node 0 failover test.
- Fix Pgpool-II child process segfault reported in [pgpool-hackers:
2312].
Release 3.6.3
- Fix "show pool_cache" segfault when memcached is used.
- Fix for some more code warnings.
- Fixing some annoying compiler warnings.
- Removing the function defined but not used warnings from
pool_config_vatiable.c
- Removing the references of obsolete debug_level configuration
parameter.
- Fixing a mistake in the watchdog code.
- Fix for 0000299: Errors on the reloading of configuration.
- Add pgpool_adm English and Japanese docs.
- Fix document indentation.
- Fix for 0000289: Inconsistent backend state.
- Enhancing the handling of split-brain scenario by the watchdog.
- Enhancing the watchdog internal command mechanism to handle multiple
concurrent commands.
- Fix compiler warnings.
- Comment out unsupported Java method in new JDBC drivers to prevent
regression failure.
- Downgrade parse before bind log message to debug1.
- Fix coverity warnings.
- Fix for [pgpool-general: 5396] pam ldap failure.
- Mention that SQL type commands cannot be used in extended query mode.
- Consider SHOW command as kind of a read query.
- Fix memory leak problem caused by commit adcb636.
- Mega patch to fix "kind mismatch" (or derived) errors in streaming
replication mode.
- Fix for 0000296: PGPool v3.6.2 terminated by systemd because the
service Type has been set to 'forking'.
Release 3.6.2
- Add "Wants=network.target" to pgpool.service file.
- Fix pcp_promote_node bug that fails promoting node 0.
- Fix document error.
- Pgpool-IIshould not perform ping test after bringing down the VIP.
- Fix to release shared memory segments when Pgpool-IIexits.
- Fix for [pgpool-general: 5315] pg_terminate_backend
- Adding the missing ExecStop and ExecReload commands to the systemd
service configuration file.
- Fix for 281: "segmentation fault" when execute pcp_attach_node.
- Fix load balancing bug in streaming replication mode.
- Fix yet another kind mismatch error in streaming replication mode.
- Fix do_query()hangs after close message.
- Fixing stack smashing detected.
- Fixing the issue with the watchdog process restart.
- Fix query cache bug reported in pgpool-general-jp:1441.
- Remove elog/ereport calls from signal handlers.
- Fix bug failed to create INET domain socket in FreeBSD if
listen_addresses = '*'.
- Fix for 0000249: watchdog sometimes fails de-escalation.
- Fix connection_life_time broken by authentication_timeout.
- Fix authentication timeout that can occur right after client
connecttions.
Release 3.6.1
- Tightening up the watchdog security.
- Add pgpool_adm extension in Pgpool-II RPM.
- Fix occasional segfault when query cache is enabled.
- Fix packet kind does not match error in extended protocol.
- Fix a race condition in a signal handler.
- Fix wrong minimum configuration value for
client_idle_limit_in_recovery.
- Allow to execute "make xslthtml" under doc.ja.
## 0.9.2 (August 9, 2017)
BUG FIXES:
- agent: Fixed an issue where the old `-retry-join-{ec2,azure,gce}`
command line flags were not being honored.
- server: Reverted the change that made unauthorized KV queries return
403 instead of 404 because it had a minor bug that affected the
operation of Vault, and in addition to fixing the bug, we identified an
additional case that needed to be covered.
## 0.9.1 (August 9, 2017)
FEATURES:
- Secure ACL Token Introduction: It's now possible to manage Consul's
ACL tokens without having to place any tokens inside configuration
files.
* A new `/v1/agent/token` API allows an agent's ACL tokens to be
* introduced without placing them into config files, and to update
* them without restarting the agent.
* A new `/v1/acl/bootstrap` allows a cluster's first management
* token to be created without using the `acl_master_token`
* configuration.
- Metrics Viewing Endpoint: A new `/v1/agent/metrics` API displays the
current values of internally tracked metrics.
IMPROVEMENTS:
- agent: Retry Join for Amazon AWS, Microsoft Azure, Google Cloud, and
(new) SoftLayer is now handled through the
https://github.com/hashicorp/go-discover library.
- agent: Reports a more detailed error message if the LAN or WAN Serf
instance fails to bind to an address.
- agent: Added NS records and corrected SOA records to allow Consul's
DNS interface to work properly with zone delegation.
- agent: Added support for sending metrics with labels/tags to supported
backends.
- agent: Added a new `prefix_filter` option in the `telemetry` config to
allow fine-grained allowing/blocking the sending of certain metrics by
prefix.
- cli: Added a `-child-exit-code` option to `consul lock` so that it
propagates an error code of 2 if the child process exits with an
error.
- docs: Added a new Geo Failover Guide showing how to use prepared
queries to implement geo failover policies for services.
- docs: Added a new Consul with Containers Guide showing critical
aspects of operating a Consul cluster that's run inside containers.
- server: Added a `RemoveEmptyTags` option to prepared query templates
which will strip out any empty strings in the tags list before
executing a query.
- server: Implemented a much faster recursive delete algorithm for the
KV store.
BUG FIXES:
- agent: Clean up temporary files during disk write errors when
persisting services and checks.
- agent: Fixed an issue where DNS and client bind address templates were
not being parsed via the go-sockaddr library.
- agent: Fixed status code on all KV store operations that fail due to
an ACL issue. They now return a 403 status code, rather than a 404.
- agent: Fixed quoting issues in script health check on Windows.
- agent: Fixed an issue where `consul monitor` would exit on any empty
log line.
- server: Updated raft library to fix issue with machine crashes causing
snapshot files to not get saved to disk
pkgsrc change: Drop dependency to php-mysqli.
Quote from release announce:
The bugfix release fixes several issues including problems with the back end
referer management and the front end preview.
This release fix some old bugs (see release note for more informations
about this) and take care of some small overfull hbox that was
present in some particular combination of options and packages.
In particular it fixes an annoying unbalanced brace that could cause some
troubles.
- New \hbox_set_to_wd:Nnw and \vbox_set_to_ht:Nnw functions
- Revised l3file module to give better defined
path/file/extension split
- New experimental functions in l3file: \file_input_stop:,
\file_get_mdfive_hash:nN, \file_get_size:nN and
\file_get_timestamp:nN; currently XeTeX does not support
getting file size/timestamp
- New experimental \mode_leave_vertical: as a code-level
equivalent of \leavevmode
- New experimental support for shell escape in l3sys module
- New mechanism for checking variable declarations locally:
see option "enable-debug" and
\debug_check_declarations_(on|off):
- More invalid regex patterns trapped with warning
- More regex documentation examples
- Bug fix for \tl_mixed_case:n(n) with pdfTeX when the first
character is outside the ASCII range
- Fix nesting of selective setting in l3keys
Internal change: the main support for French is now in file
french.ldf; portemanteau files frenchb.ldf, francais.ldf,
acadian.ldf, canadien.ldf have been added.
This change is meant for Babel's future releases, but frenchb
v3.3b still works with current Babel (v3.12).
Recommended options to use with Babel are *french* or *acadian*
(for Canadian French currently identical to French), all others
are *deprecated*.
