GeoGebra 歷史版本列表
更新時間：2019-09-05
更新細節：
What's new in this version:
Notable changes:
deps:
- Update npm to 6.10.3 (isaacs)
fs:
- Add recursive option to rmdir() (cjihrig)
- Allow passing true to emitClose option (Giorgos Ntemiris)
- Add *timeNs properties to BigInt Stats objects (Joyee Cheung)
net:
- Allow reading data into a static buffer
Commits:
- bootstrap: run preload prior to frozen-intrinsics
- buffer: correct indexOf() error message
- buffer: consolidate encoding parsing
- buffer: correct concat() error message
- buffer: improve equals() performance
- Revert "build: add full Python 3 tests to Travis CI"
- build: add full Python 3 tests to Travis CI
- build: hard code doctool in test-doc target
- build: integrate DragonFlyBSD into gyp build
- build: make --without-snapshot imply --without-node-snapshot
- build: test Python 3.6 and 3.7 on Travis CI
- build: move tooltest to before jstest target
- build: add Python 3 tests to Travis CI
- build,win: accept Python 3 if 2 is not available
- build,win: find Python in paths with spaces
- console: use getStringWidth() for character width calculation
- crypto: don't expose openssl internals
- crypto: simplify DSA validation in FIPS mode
- deps: V8: cherry-pick 597f885
- (SEMVER-MINOR) deps: update npm to 6.10.3
- doc: escape elements swallowed as HTML in markdown
- doc: add extends for derived classes
- doc: add blanks around code fences
- doc: format http2 anchor link and reference
- doc: remove multiple consecutive blank lines
- doc: add devnexen to collaborators
- doc: inconsistent indentation for list items
- doc: heading levels should only increment by one
- doc: add dco to github pr template
- doc: add https.Server extends tls.Server
- doc: fix nits in esm.md
- doc: add missing extends Http2Session
- doc: indicate that Http2ServerRequest extends Readable
- doc: indicate that Http2ServerResponse extends Stream
- (SEMVER-MINOR) doc: add emitClose option for fs streams
- doc,crypto: add extends for derived classes
- doc,errors: add extends to derived classes
- doc,fs: add extends for derived classes
- doc,http: add extends for derived classes
- doc,tls: add extends for derived classes
- errors: provide defaults for unmapped uv errors
- esm: support loading data URLs
- events: improve once() performance
- (SEMVER-MINOR) fs: add recursive option to rmdir()
- (SEMVER-MINOR) fs: allow passing true to emitClose option
- fs: fix (temporary) for esm package
- fs: document the Date conversion in Stats objects
- (SEMVER-MINOR) fs: add *timeNs properties to BigInt Stats objects
- gyp: remove semicolons (Python != JavaScript)
- gyp: futurize imput.py to prepare for Python 3
- http: simplify timeout handling
- lib: add ASCII fast path to getStringWidth()
- lib: consolidate lazyErrmapGet()
- module: avoid passing unnecessary loop reference
- (SEMVER-MINOR) net: allow reading data into a static buffer
- process: improve nextTick performance
- querystring: improve performance
- src: do not crash when accessing empty WeakRefs
- src: turn GET_OFFSET() into an inline function
- src: inline SLICE_START_END() in node_buffer.cc
- src: allow --interpreted-frames-native-stack in NODE_OPTIONS
- src: expose MaybeInitializeContext to allow existing contexts
- src: add large page support for macOS
- stream: don't deadlock on aborted stream
- stream: improve read() performance
- stream: async iterator destroy compat
- stream: do not emit drain if stream ended
- test: remove Windows skipping of http keepalive request GC test
- test: fix test-benchmark-net
- test: fix flaky test-http-server-keepalive-req-gc
- test: use print() function in both Python 2 and 3
- (SEMVER-MINOR) test: add emitClose: true tests for fs streams
- tools: update ESLint to 6.3.0
- tools: use 'from io import StringIO' in ninja.py
- tools: fix mksnapshot blob wrong freeing operator
- tools: update ESLint to 6.2.2
- tools: update babel-eslint to 10.0.3
- tools: fix Python 3 issues in inspector_protocol
- tools: fix mixup with bytes.decode() and str.encode()
- tools: fix Python 3 issues in tools/icu/icutrim.py
- tools: fix Python 3 issues in gyp/generator/make.py
- util: do not throw when inspecting detached ArrayBuffer
更新時間：2019-09-03
更新細節：
更新時間：2019-08-29
更新細節：
What's new in this version:
- Managesieve: Fix so "Create filter" option does not show up when Filters menu is disabled
- Enigma: Fix bug where revoked users/keys were not greyed out in key info
- Enigma: Fix error message when trying to encrypt with a revoked key
- Enigma: Fix "decryption oracle" bug [CVE-2019-10740]
- Fix compatibility with kolab/net_ldap3 > 1.0.7
- Fix bug where bmp images couldn't be displayed on some systems
- Fix bug in parsing vCard data using PHP 7.3 due to an invalid regexp
- Fix bug where bold/strong text was converted to upper-case on html-to-text conversio
- Fix bug in rcube_utils::parse_hosts() where %t, %d, %z could return only tld
- Fix bug where Next/Prev button in mail view didn't work with multi-folder search result
- Fix bug where selection of columns on messages list wasn't working
- Fix bug in converting multi-page Tiff images to Jpeg
- Fix wrong messages order after returning to a multi-folder search result
- Fix PHP 7.4 deprecation: implode() wrong parameter order
- Fix bug where it was possible to bypass the position:fixed CSS check in received messages
- Fix bug where some strict remote URIs in url() style were unintentionally blocked
- Fix bug where it was possible to bypass the CSS jail in HTML messages using :root pseudo-class
- Fix bug where it was possible to bypass href URI check with data:application/xhtml+xml URIs
更新時間：2019-08-27
更新細節：
更新時間：2019-08-27
更新細節：
更新時間：2019-08-21
更新細節：
What's new in this version:
Fixed:
– Image Carousel does not work on Windows
– Unable to use the audio channel mixer with a Studio license
更新時間：2019-08-21
更新細節：
What's new in this version:
Changes:
Crypto:
- Added an oaepHash option to asymmetric encryption which allows users to specify a hash function when using OAEP padding
Deps:
- Updated V8 to 7.6.303.29
- Improves the performance of various APIs such as JSON.parse and methods called on frozen arrays
- Adds the Promise.allSettled method
- Improves support of BigInt in Intl methods
- Updated libuv to 1.31.0
- UV_FS_O_FILEMAP has been added for faster access to memory mapped files on Windows
- uv_fs_mkdir() now returns UV_EINVAL for invalid filenames on Windows. It previously returned UV_ENOENT
- The uv_fs_statfs() API has been added
- The uv_os_environ() and uv_os_free_environ() APIs have been added
Fs:
- Added fs.writev, fs.writevSync and filehandle.writev (promise version) methods. They allow to write an array of ArrayBufferViews to a file descriptor
Http:
- Added three properties to OutgoingMessage.prototype: writableObjectMode, writableLength and writableHighWaterMark
Stream:
- Added an new property readableEnded to readable streams. Its value is set to true when the 'end' event is emitted
- Added an new property writableEnded to writable streams. Its value is set to true after writable.end() has been called
更新時間：2019-08-16
更新細節：
What's new in this version:
Fixed:
- “Data Dribble”: The attacker requests a large amount of data from a specified resource over multiple streams. They manipulate window size and stream priority to force the server to queue the data in 1-byte chunks. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both, potentially leading to a denial of service.
- “Ping Flood”: The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both, potentially leading to a denial of service.
- “Resource Loop”: The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU, potentially leading to a denial of service.
- “Reset Flood”: The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both, potentially leading to a denial of service.
- “Settings Flood”: The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both, potentially leading to a denial of service.
- “0-Length Headers Leak”: The attacker sends a stream of headers with a 0-length header name and 0-length header value, optionally Huffman encoded into 1-byte or greater headers. Some implementations allocate memory for these headers and keep the allocation alive until the session dies. This can consume excess memory, potentially leading to a denial of service.
- “Internal Data Buffering”: The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually write (many of) the bytes on the wire. The attacker then sends a stream of requests for a large response object. Depending on how the servers queue the responses, this can consume excess memory, CPU, or both, potentially leading to a denial of service.
C- “Empty Frames Flood”: The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSH_PROMISE. The peer spends time processing each frame disproportionate to attack bandwidth. This can consume excess CPU, potentially leading to a denial of service.
更新時間：2019-08-14
更新細節：
更新時間：2019-08-13
更新細節：