iCloud Control Panel 歷史版本列表
更新時間：2019-04-22
更新細節：
What's new in this version:
Compatibility notes:
- Unpickling while loading requires explicit opt-in
- The functions np.load, and np.lib.format.read_array take an allow_pickle keyword which now defaults to False in response to CVE-2019-6446.
Improvements:
- Covariance in random.mvnormal cast to double
- This should make the tolerance used when checking the singular values of the covariance matrix more meaningful.
Changes:
- __array_interface__ offset now works as documented
- The interface may use an offset value that was previously mistakenly ignored.
更新時間：2019-03-26
更新細節：
What's new in this version:
iCloud Control Panel 7.11
- Change log not available for this version
iCloud Control Panel 7.10
- Change log not available for this version
iCloud Control Panel 7.9.0.9
Safari:
- Available for: Windows 7 and later
- Impact: Visiting a malicious website may lead to address bar spoofing
- Description: A logic issue was addressed with improved state management.
- CVE-2018-4440: Wenxu Wu of Tencent Security Xuanwu Lab (xlab.tencent.com)
Safari:
- Available for: Windows 7 and later
- Impact: Visiting a malicious website may lead to user interface spoofing
- Description: A logic issue was addressed with improved validation.
- CVE-2018-4439: xisigr of Tencent's Xuanwu Lab (tencent.com)
WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: Multiple memory corruption issues were addressed with improved memory handling.
- CVE-2018-4437: HyungSeok Han, DongHyeon Oh, and Sang Kil Cha of KAIST Softsec Lab, Korea
- CVE-2018-4464: HyungSeok Han, DongHyeon Oh, and Sang Kil Cha of KAIST Softsec Lab, Korea
WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: A memory corruption issue was addressed with improved memory handling.
- CVE-2018-4441: lokihardt of Google Project Zero
- CVE-2018-4442: lokihardt of Google Project Zero
- CVE-2018-4443: lokihardt of Google Project Zero
WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: A logic issue existed resulting in memory corruption. This was addressed with improved state management
iCloud Control Panel 7.8.1.12
- Change log not available for this version
iCloud Control Panel 7.8.0.7
- Change log not available for this version
iCloud Control Panel 7.7.0.27
WebKit:
- Impact: Unexpected interaction causes an ASSERT failure
- Description: A memory corruption issue was addressed with improved validation
- CVE-2018-4191: found by OSS-Fuzz
WebKit:
- Impact: Cross-origin SecurityErrors includes the accessed frame’s origin
- Description: The issue was addressed by removing origin information
- CVE-2018-4311: Erling Alf Ellingsen (@steike)
WebKit:
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: A memory corruption issue was addressed with improved state management
- CVE-2018-4316: crixer, Hanming Zhang (@4shitak4) of Qihoo 360 Vulcan Team
WebKit:
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: Multiple memory corruption issues were addressed with improved memory handling.
- CVE-2018-4299: Samuel Groβ (saelo) working with Trend Micro's Zero Day Initiative
- CVE-2018-4323: Ivan Fratric of Google Project Zero
- CVE-2018-4328: Ivan Fratric of Google Project Zero
- CVE-2018-4358: @phoenhex team (@bkth_ @5aelo @_niklasb) working with Trend Micro's Zero Day Initiative
- CVE-2018-4359: Samuel Groß (@5aelo)
WebKit:
- Available for: Windows 7 and later
- Impact: A malicious website may cause unexepected cross-origin behavior
- Description: A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins
- CVE-2018-4319: John Pettitt of Google
WebKit:
- Available for: Windows 7 and later
- Impact: A malicious website may be able to execute scripts in the context of another website
- Description: A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation
- CVE-2018-4309: an anonymous researcher working with Trend Micro's Zero Day Initiative
WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: A use after free issue was addressed with improved memory management
- CVE-2018-4197: Ivan Fratric of Google Project Zero
- CVE-2018-4306: Ivan Fratric of Google Project Zero
- CVE-2018-4312: Ivan Fratric of Google Project Zero
- CVE-2018-4314: Ivan Fratric of Google Project Zero
- CVE-2018-4315: Ivan Fratric of Google Project Zero
- CVE-2018-4317: Ivan Fratric of Google Project Zero
- CVE-2018-4318: Ivan Fratric of Google Project Zero
WebKit:
- Impact: A malicious website may exfiltrate image data cross-origin
- Description: A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation
- CVE-2018-4345: an anonymous researcher
WebKit:
- Impact: Unexpected interaction causes an ASSERT failure
- Description: A memory consumption issue was addressed with improved memory handling
- CVE-2018-4361: found by Google OSS-Fuzz
iCloud Control Panel 7.6.0.15
CFNetwork:
- A cookie management issue was addressed with improved checks
WebKit:
- A memory corruption issue was addressed with improved memory handling
WebKit:
- A type confusion issue was addressed with improved memory handling
- Sound fetched through audio elements may be exfiltrated cross-originThis issue was addressed with improved audio taint tracking
- A race condition was addressed with additional validation
- Multiple memory corruption issues were addressed with improved memory handling
- Multiple memory corruption issues were addressed with improved input validation
iCloud Control Panel 7.5.0.34
Security:
- An authorization issue was addressed with improved state management
WebKit:
- A permissions issue existed in the handling of web browser cookies. This issue was addressed with improved restrictions.
- A race condition was addressed with improved locking
- A memory corruption issue was addressed with improved input validation
- A memory corruption issue was addressed with improved memory handling
- A type confusion issue was addressed with improved memory handling
- A memory corruption issue was addressed with improved state management
- Multiple memory corruption issues were addressed with improved memory handling
- An inconsistent user interface issue was addressed with improved state management
- Credentials were unexpectedly sent when fetching CSS mask images. This was addressed by using a CORS-enabled fetch method
- A buffer overflow issue was addressed with improved memory handling
- An out-of-bounds read was addressed with improved input validation
iCloud Control Panel 7.4.0.111
Security:
- Impact: A malicious application may be able to elevate privileges
- Description: A buffer overflow was addressed with improved size validation
WebKit:
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: Multiple memory corruption issues were addressed with improved memory handling
WebKit:
- Impact: Unexpected interaction with indexing types causing an ASSERT failure
- Description: An array indexing issue existed in the handling of a function in javascript core. This issue was addressed through improved checks
WebKit:
- Impact: Processing maliciously crafted web content may lead to a denial of service
- Description: A memory corruption issue was addressed through improved input validation
WebKit:
- Impact: A malicious website may exfiltrate data cross-origin
- Description: A cross-origin issue existed with the fetch API. This was addressed through improved input validation
iCloud Control Panel 7.3.0.20
WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: Multiple memory corruption issues were addressed with improved memory handling
- CVE-2018-4088: Jeonghoon Shin of Theori
- CVE-2018-4096: found by OSS-Fuzz
iCloud Control Panel 7.2.0.67
- Change log not available for this verison
iCloud Control Panel 7.1.0.34
- Change log not available for this verison
iCloud Control Panel 7.0.1.210
- SQLite available for: Windows 7 and later
- A memory corruption issue was addressed through improved input validation.
- Multiple memory corruption issues were addressed with improved memory handling.
- A logic issue existed in the handling of parent-tab. This issue was addressed with improved state management.
- A permissions issue existed in the handling of web browser cookies. This issue was addressed by no longer returning cookies for custom URL schemes.
- An inconsistent user interface issue was addressed with improved state management.
- Application Cache policy may be unexpectedly applied
iCloud Control Panel 6.2.3.17
- Change log not available for this verison
iCloud Control Panel 6.2.2.39
- Multiple memory corruption issues were addressed with improved memory handling
iCloud Control Panel 6.2.1.67
- A client certificate was sent in plaintext. This issue was addressed through improved certificate handling
- Multiple memory corruption issues were addressed through improved memory handling
- Multiple memory corruption issues were addressed through improved memory handling
- A validation issue existed in element handling. This issue was addressed through improved validation
iCloud Control Panel 6.1.2.13
- Change log not available for this version
iCloud Control Panel 6.1.0.30
- Multiple memory corruption issues were addressed through improved memory handling
- A memory corruption issue was addressed through improved state management
- The iCloud desktop client failed to clear sensitive information in memory
iCloud Control Panel 6.0.2.10
- Change log not available for this version
iCloud Control Panel 6.0.1.41
- A memory corruption issue was addressed through improved memory handling
iCloud Control Panel 5.2.2.87
- Change log not available for this version
iCloud Control Panel 5.2.1.69
- Change log not available for this version
更新時間：2019-03-26
更新細節：
What's new in this version:
WebStorm 2019.1
Here are the features and improvements grouped by the WebStorm subsystems:
- JavaScript and TypeScript support: intentions for destructuring; convert function with Promise to async function; convert properties in constructor to class fields; inspections for switch statements; add or remove export; extended error messages in TypeScript
- Style sheets support: updated docs for CSS and browser compatibility check; extract CSS variable; camel case support for CSS Modules; support for Less 3.0 features
- HTML support: improved HTML documentation
- Development with Angular: new inspections for Angular projects; easier navigation in Angular projects
- Development with React: improved completion for merged props; Extract Method refactoring for custom React Hooks
- Development with Vue.js: better support for Vue projects with TypeScript
- Node.js and npm: completion for npm scripts; version range tooltip for dependencies; run and debug Node.js app when using Docker Compose; simple Node.js project template
- Linters integrations: improved support for ESLint and TSLint in complex projects; support for TSLint as TypeScript plugin
- Debugging: new debugger console
- Testing: highlighting for failed line in test; testing with Cucumber and TypeScript
- IDE improvements: Recent Locations popup; save project as a template; soft-wraps for selected file types
- Version Control: cherry-pick a file from a commit from the VCS log; incoming and outgoing commits
WebStorm 2018.3.5
- Change log not available for this version
WebStorm 2018.3.4
- Change log not available for this version
WebStorm 2018.3.3
New:
- Support for Set Literals in Dart
- Completion for attribute bindings in Angular (e.g. [atrr.foo] )
- Better coding assistance for some Ionic and @angular/flex-layout attributes
Fixed:
- Wrong indent after self-closing JSX tags in JavaScript and TypeScript files (WEB-36263)
- Decorators are now supported in the class expressions like let newTest = @test class Test or export default @observer class Test
- When using the bundled TypeScript service in Angular apps, the Angular language service is now disabled. Its current version is not compatible with TypeScript 3.2.1 and was reporting false errors in the template files
WebStorm 2018.3.2 Build 183.4886.41
New:
- Completion for Bootstrap Vue and Shards Vue components
- Better support for Prettier 1.15 and above
- The Extract interface refactoring now works for objects
- The IDE now bundles TypeScript 3.2
Fixed:
- The Optimize imports action now keeps the comment on top when ‘Sort imports
- by modules’ is on
- The usage of the Angular template reference variable in the ViewChild selector is now resolved
- The problem with using Hebrew in Find in path dialog was fixed
WebStorm 2018.3.1 Build 183.4588.47
- Change log not available for this version
WebStorm 2018.3 Build 183.4284.130
- Change log not available for this version
WebStorm 2018.2.6 Build 182.5107.19
Fixes
- The Search everywhere dialog on Linux no longer closes when you press Enter
- The usual UI for Find in path on Linux is now back
- On macOS Mojave, the input no longer freezes after adding the accented characters from the popup
WebStorm 2018.2.5 Build 182.4892.25
- Change log not available for this version
WebStorm 2018.2.4 Build 182.4505.50
- Change log not available for this version
WebStorm 2018.2.2 Build 182.4323.44
New:
- You can now pass additional option to Angular CLI when creating a new project from the IDE Welcome screen. As you start typing the option name or press Ctrl-Space, WebStorm will show you available options and their description
- We have also improved the way the new Add all missing TypeScript import action works: before, the action wasn’t available for symbols with multiple import options, and now, if you invoke the action for such symbol, WebStorm will add all unambiguous missing imports in this file and then will show you a popup where you can select the desired import for this symbol
Fixed:
- Vue component imports are now resolved correctly in the Vue CLI 3 apps located not in the root of the project
- The problem with the slash symbol in the CoffeeScript files has been fixed
- The Extract React Component refactoring now handles better the key attribute
WebStorm 2018.2.2 Build 182.4129.32
JavaScript and TypeScript:
New inspection tooltip:
- The new inspection tooltip now not only shows the description of an error or warning, but also the best quick fix for it
- Press Alt-Shift-Enter to apply it or press Alt-Enter to see a full list of the available automatic fixes that WebStorm offers there
Find unused code:
- With the new Code Coverage feature, you can find any unused code in your client-side app. Start a JavaScript Debug configuration with coverage in WebStorm, interact with your app in Chrome, and then stop the configuration. The report will show you what and how much code was used in each file and folder
New intentions:
- To make you even more productive when working with JavaScript and TypeScript, WebStorm has a bunch of new intentions that are available when you press Alt-Enter. Here are just some of them: Implement interface, Create derived class, Implement members of an interface or abstract class, Generate cases for 'switch', and Iterate with 'for..of'
TypeScript improvements:
- WebStorm now supports all the new language features that were added in the latest TypeScript 2.9 and the upcoming TypeScript 3.0 releases
- In addition to that, WebStorm now offers more quick fixes provided by the TypeScript language service itself, like Annotate with type from JSDoc
Frameworks:
Extract and convert React component:
- Need to refactor your React component into two? Forget copy and paste: select the JSX code in the render method and use Refactor - Extract Component
- And with the new intentions, you can now convert React class components into functional components and back again
New integrations with Angular CLI:
- Add features to your app with the New… | Angular Dependency… action. The IDE will use the Angular CLI ng add command which installs the dependency and updates the app with a special installation script
- You can now also generate the code with the Angular schematics defined in libraries like @angular/material using the New… | Angular Schematic… action
Completion for events in Vue.js:
- In Vue templates, WebStorm now provides code completion for events. Event names are suggested after v-on: or if you use the shorthand notation @event. There’s also code completion for event modifiers
Testing:
Rerun failed tests:
- When you run tests with Karma, Jest, or Mocha in WebStorm, you can now rerun only the failed tests, instead of running all the tests after you’ve made a fix
Diff view for Jest snapshots:
- If your Jest test has failed because of the mismatch in the snapshot, you can now see why using the familiar IDE side-by-side diff view
- It’s also now possible to quickly jump from the test file to the related snapshot by clicking on the new icon next to the test in the editor
Tools:
Support for Node.js on WSL:
- You can now use Node.js on Windows Subsystem for Linux to run and debug your Node.js application in WebStorm as well as for all other development tasks in the IDE, like running tests, using linters, and build tools
Reconnect Node.js debugger:
- Thanks to the new Reconnect automatically option in the Attach to Node.js/Chrome debug configuration, it is now easier to debug Node.js apps that use nodemon. When the node process is reloaded after the change, you don’t need to restart the debugger yourself to continue debugging
Global file watchers:
- You can now store the configured File Watchers in the IDE settings and use them in different projects. Before, a File Watcher could only be configured for a specific project. With File Watchers you can automatically run a command-line tool when you change or save a file in the IDE
Other improvements:
- New cleaner, simpler icons on the IDE toolbar and tool windows ensure readability and reduce visual clutter
- Run and debug your app, commit changes and update the project right from the Touch Bar on MacBook
- A new collection of over 50 code snippets for React development
- WebStorm now indexes a new Angular project two times faster, with no compromises affecting the quality of code completion and resolve
- You can now add custom templates for postfix completion in the JavaScript and TypeScript files
- With the new Drop frame action in the JavaScript and Node.js debuggers, you can re-enter a function if you missed a critical spot you would like to see again
- Press Alt-Enter on a line with a breakpoint and see the breakpoint-related actions in the list of intentions
- Support for JSON5 is now available in the files with the .json5 extension
- JSON Schemas files are now automatically downloaded from schemastore.org and applied to your files, based on the file name
- You can be logged into multiple GitHub accounts
- New Browse Repository at Revision action allows you to explore files in your project at any given revision without a checkout
WebStorm 2018.2.1 Build 182.3911.37
New:
- Auto imports now work better in projects that use lerna, yarn workspaces or TypeScript 3.0 project references
- The bundled TypeScript version was update to 3.0
- “Surround selection on typing quote or brace” option is now on by default
- Support for the Nullish Coalescing proposal in JavaScript
Fixed:
- JavaScript code completion now works better in webpack configuration files
- Changing the opening tag of the Vue component now updates the closing tag as well
WebStorm 2018.2 Build 182.3684.70
Here are the features and improvements grouped by the WebStorm subsystems:
- Development with React: Extract React Component refactoring, convert class components into functional components, code snippets, and improved completion for props in React and React Native apps
- Development with Angular: faster project startup, add new features using the integration with ng add, and run schematics from the IDE
- Development with Vue.js: completion for Vue events and event modifiers
- Node.js development: support for Node.js on Windows Subsystem for Linux, an ability to automatically reconnect the debugger to the running node process, and remote mappings in Attach to Node.js configuration
- Built-in tools: find unused code in the client-side app with Code Coverage reports, global File Watchers
- Editor: new UI for inspection tooltip
- JavaScript and TypeScript support: custom templates for postfix completion, and TypeScript 2.9 and 3.0 supported
- JSON support: JSON5, and Iimproved support for JSON Schemas
- Linters integrations: different highlighting for TSLint errors and warnings, and an ability to automatically apply code style rules from all types of ESLint and TSLint configuration files
- Debugging: breakpoint intentions, Drop Frame action, and debugging JavaScript scratch files
- Testing: rerun failed tests, navigate to Jest snapshot, compare Jest snapshots, and debugging Karma tests using Chrome Headless
- Version Control: Browse Repository at Revision action, completion for tags, register roots automatically
- Other IDE improvements: Touch Bar support
WebStorm 2018.1.5 Build 181.5281.31
- JavaScript Bug WEB-32790 WebStorm decides to stop accessing .d.ts files for es features for a project
- Node.js Bug WEB-32719 Add v8 to Node.js core modules
- TypeScript Bug WEB-32634 False positive Type mismatch error inside Angular Injectable
- No subsystem Bug IDEA-193747 Clicking Help | Register does nothing in a Toolbox-installed PhpStorm
- User Interface Bug IDEA-192713 focus is lost on opening Find Usages tool window
- Performance IDEA-192184 Goto Class/File/Symbol popups leak via native window and focus traversal policy
- Version Control Performance IDEA-192017 Unshelving creates a thread for each shelved file
- Version Control. Git Bug IDEA-191656 Git commit history with control characters causes intellij to spin, consuming CPU and repeating the same stack in the idea.log
WebStorm 2018.1.4 Build 181.5087.27
- It’s now possible to run and debug tests using Karma run/debug configurations in projects generated with Angular CLI 6 (WEB-32653)
- In Flow files, you can now press Cmd/Ctrl and hover over a symbol to see its type info. That works in projects where Flow server is used for navigation, code completion, and type hinting – the corresponding checkbox in Preferences | Languages and Frameworks | JavaScript should be checked. Navigation to the definition in Flow now works significantly faster than before
WebStorm 2018.1.3 Build 181.4892.44
- Change log not available for this version
WebStorm 2018.1.2 Build 181.4668.60
- Change log not available for this version
WebStorm 2018.1.1 Build 181.4445.68
New:
- Better support for Yarn workspaces: WebStorm now provides proper code completion for the dependencies listed in the workspace’s package.json
- In the JavaScript and TypeScript code style settings you can now configure whether to add file extensions in imports or not
- The bundled TypeScript package has been updated to version 2.8
- Stylelint now works in the Vue single-file components and the HTML files
Fixed:
- Move statement up and down now works for the JSX code (Shift-Cmd-Up/Down on macOS or Ctrl-Shift-Up/Down on Windows and Linux)
- The code completion for methods and properties defined in the CommonJS modules has been improved
- The problem with editing the Pug files is now fixed
- There is more about some of the improvements below
Support for Yarn workspaces:
- Yarn workspaces help you organize multiple packages into a single repo. When using Yarn workspaces, the dependencies of all the packages are installed together and are put into the node_modules folder at the root of your project and not next to the package.json file of each workspace
WebStorm 2017.3.3 Build 173.4301.22
New:
- Responses from the new REST Client are now formatted automatically
- Node.js debugger now supports –experimental-modules flag
Fixed:
- False positive errors from the eslint-plugin-import ESLint plugin were fixed
- Debug for apps created with Angular CLI 1.5.5+
- Debugging the app’s main process with Electron 1.8.1+
- Meteor debugger now uses –inspect by default
WebStorm 2017.3.1 Build 173.3942.31
New:
- Support for Fragments in React 16.2
- Configuration for the auto-completion after the = sign in JSX attributes is now available in the HTML Code Style preferences
- Customizable syntax highlighting for TypeScript decorators
- Extended error messages in the Flow tool window
- New option "Start template string interpolation on $"
Fixed:
- Unresolved React props when using @types/react
- Slow code completion for CSS classes in HTML files
- Optimize imports in Vue files
- Updating tasks from the issue trackers in the IDE
- Extend selection inside the script tag
WebStorm 2017.3 Build 173.3727.108
- Enjoy improved code completion and documentation for standard JavaScript objects and methods
- Move class methods up the class hierarchy safely with the new ‘Pull member up’ refactoring
- Use the new ‘Extract type’ and ‘Extract interface’ refactorings in TypeScript
- Enjoy better code completion and navigation and new code snippets for Vue.js
- Run tests with Jest in watch mode, update failing snapshots in one click, and explore code coverage reports in the IDE
- Test REST APIs right from the editor
更新時間：2019-02-26
更新細節：
What's new in this version:
- TST: fix vmImage dispatch in Azure
- MAINT: remove complicated test of multiarray import failure mode
- BUG: fix signed zero behavior in npy_divmod
- MAINT: Add functions to parse shell-strings in the platform-native...
- BUG: Fix regression in parsing of F90 and F77 environment variables
- BUG: parse shell escaping in extra_compile_args and extra_link_args
- BLD: Windows absolute path DLL loading
更新時間：2019-02-01
更新細節：
What's new in this version:
Enhancements
- Add mm->q floordiv
- Port np.core.overrides to C for speed
- Add np.ctypeslib.as_ctypes_type(dtype), improve np.ctypeslib.as_ctypes
- Add "max difference" messages to np.testing.assert_array_equal...
- Add mm->qm divmod
- Add _dtype_ctype to namespace for freeze analysis
Compatibility notes:
- The changed error message emited by array comparison testing functions may affect doctests. See below for detail.
- Casting from double and single denormals to float16 has been corrected. In some rare cases, this may result in results being rounded up instead of down, changing the last bit (ULP) of the result.
更新時間：2019-01-23
更新細節：
What's new in this version:
iCloud Control Panel 7.10
- Change log not available for this version
iCloud Control Panel 7.9.0.9
Safari:
- Available for: Windows 7 and later
- Impact: Visiting a malicious website may lead to address bar spoofing
- Description: A logic issue was addressed with improved state management.
- CVE-2018-4440: Wenxu Wu of Tencent Security Xuanwu Lab (xlab.tencent.com)
Safari:
- Available for: Windows 7 and later
- Impact: Visiting a malicious website may lead to user interface spoofing
- Description: A logic issue was addressed with improved validation.
- CVE-2018-4439: xisigr of Tencent's Xuanwu Lab (tencent.com)
WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: Multiple memory corruption issues were addressed with improved memory handling.
- CVE-2018-4437: HyungSeok Han, DongHyeon Oh, and Sang Kil Cha of KAIST Softsec Lab, Korea
- CVE-2018-4464: HyungSeok Han, DongHyeon Oh, and Sang Kil Cha of KAIST Softsec Lab, Korea
WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: A memory corruption issue was addressed with improved memory handling.
- CVE-2018-4441: lokihardt of Google Project Zero
- CVE-2018-4442: lokihardt of Google Project Zero
- CVE-2018-4443: lokihardt of Google Project Zero
WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: A logic issue existed resulting in memory corruption. This was addressed with improved state management
iCloud Control Panel 7.8.1.12
- Change log not available for this version
iCloud Control Panel 7.8.0.7
- Change log not available for this version
iCloud Control Panel 7.7.0.27
WebKit:
- Impact: Unexpected interaction causes an ASSERT failure
- Description: A memory corruption issue was addressed with improved validation
- CVE-2018-4191: found by OSS-Fuzz
WebKit:
- Impact: Cross-origin SecurityErrors includes the accessed frame’s origin
- Description: The issue was addressed by removing origin information
- CVE-2018-4311: Erling Alf Ellingsen (@steike)
WebKit:
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: A memory corruption issue was addressed with improved state management
- CVE-2018-4316: crixer, Hanming Zhang (@4shitak4) of Qihoo 360 Vulcan Team
WebKit:
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: Multiple memory corruption issues were addressed with improved memory handling.
- CVE-2018-4299: Samuel Groβ (saelo) working with Trend Micro's Zero Day Initiative
- CVE-2018-4323: Ivan Fratric of Google Project Zero
- CVE-2018-4328: Ivan Fratric of Google Project Zero
- CVE-2018-4358: @phoenhex team (@bkth_ @5aelo @_niklasb) working with Trend Micro's Zero Day Initiative
- CVE-2018-4359: Samuel Groß (@5aelo)
WebKit:
- Available for: Windows 7 and later
- Impact: A malicious website may cause unexepected cross-origin behavior
- Description: A cross-origin issue existed with "iframe" elements. This was addressed with improved tracking of security origins
- CVE-2018-4319: John Pettitt of Google
WebKit:
- Available for: Windows 7 and later
- Impact: A malicious website may be able to execute scripts in the context of another website
- Description: A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation
- CVE-2018-4309: an anonymous researcher working with Trend Micro's Zero Day Initiative
WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: A use after free issue was addressed with improved memory management
- CVE-2018-4197: Ivan Fratric of Google Project Zero
- CVE-2018-4306: Ivan Fratric of Google Project Zero
- CVE-2018-4312: Ivan Fratric of Google Project Zero
- CVE-2018-4314: Ivan Fratric of Google Project Zero
- CVE-2018-4315: Ivan Fratric of Google Project Zero
- CVE-2018-4317: Ivan Fratric of Google Project Zero
- CVE-2018-4318: Ivan Fratric of Google Project Zero
WebKit:
- Impact: A malicious website may exfiltrate image data cross-origin
- Description: A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation
- CVE-2018-4345: an anonymous researcher
WebKit:
- Impact: Unexpected interaction causes an ASSERT failure
- Description: A memory consumption issue was addressed with improved memory handling
- CVE-2018-4361: found by Google OSS-Fuzz
iCloud Control Panel 7.6.0.15
CFNetwork:
- A cookie management issue was addressed with improved checks
WebKit:
- A memory corruption issue was addressed with improved memory handling
WebKit:
- A type confusion issue was addressed with improved memory handling
- Sound fetched through audio elements may be exfiltrated cross-originThis issue was addressed with improved audio taint tracking
- A race condition was addressed with additional validation
- Multiple memory corruption issues were addressed with improved memory handling
- Multiple memory corruption issues were addressed with improved input validation
iCloud Control Panel 7.5.0.34
Security:
- An authorization issue was addressed with improved state management
WebKit:
- A permissions issue existed in the handling of web browser cookies. This issue was addressed with improved restrictions.
- A race condition was addressed with improved locking
- A memory corruption issue was addressed with improved input validation
- A memory corruption issue was addressed with improved memory handling
- A type confusion issue was addressed with improved memory handling
- A memory corruption issue was addressed with improved state management
- Multiple memory corruption issues were addressed with improved memory handling
- An inconsistent user interface issue was addressed with improved state management
- Credentials were unexpectedly sent when fetching CSS mask images. This was addressed by using a CORS-enabled fetch method
- A buffer overflow issue was addressed with improved memory handling
- An out-of-bounds read was addressed with improved input validation
iCloud Control Panel 7.4.0.111
Security:
- Impact: A malicious application may be able to elevate privileges
- Description: A buffer overflow was addressed with improved size validation
WebKit:
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: Multiple memory corruption issues were addressed with improved memory handling
WebKit:
- Impact: Unexpected interaction with indexing types causing an ASSERT failure
- Description: An array indexing issue existed in the handling of a function in javascript core. This issue was addressed through improved checks
WebKit:
- Impact: Processing maliciously crafted web content may lead to a denial of service
- Description: A memory corruption issue was addressed through improved input validation
WebKit:
- Impact: A malicious website may exfiltrate data cross-origin
- Description: A cross-origin issue existed with the fetch API. This was addressed through improved input validation
iCloud Control Panel 7.3.0.20
WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: Multiple memory corruption issues were addressed with improved memory handling
- CVE-2018-4088: Jeonghoon Shin of Theori
- CVE-2018-4096: found by OSS-Fuzz
iCloud Control Panel 7.2.0.67
- Change log not available for this verison
iCloud Control Panel 7.1.0.34
- Change log not available for this verison
iCloud Control Panel 7.0.1.210
- SQLite available for: Windows 7 and later
- A memory corruption issue was addressed through improved input validation.
- Multiple memory corruption issues were addressed with improved memory handling.
- A logic issue existed in the handling of parent-tab. This issue was addressed with improved state management.
- A permissions issue existed in the handling of web browser cookies. This issue was addressed by no longer returning cookies for custom URL schemes.
- An inconsistent user interface issue was addressed with improved state management.
- Application Cache policy may be unexpectedly applied
iCloud Control Panel 6.2.3.17
- Change log not available for this verison
iCloud Control Panel 6.2.2.39
- Multiple memory corruption issues were addressed with improved memory handling
iCloud Control Panel 6.2.1.67
- A client certificate was sent in plaintext. This issue was addressed through improved certificate handling
- Multiple memory corruption issues were addressed through improved memory handling
- Multiple memory corruption issues were addressed through improved memory handling
- A validation issue existed in element handling. This issue was addressed through improved validation
iCloud Control Panel 6.1.2.13
- Change log not available for this version
iCloud Control Panel 6.1.0.30
- Multiple memory corruption issues were addressed through improved memory handling
- A memory corruption issue was addressed through improved state management
- The iCloud desktop client failed to clear sensitive information in memory
iCloud Control Panel 6.0.2.10
- Change log not available for this version
iCloud Control Panel 6.0.1.41
- A memory corruption issue was addressed through improved memory handling
iCloud Control Panel 5.2.2.87
- Change log not available for this version
iCloud Control Panel 5.2.1.69
- Change log not available for this version
更新時間：2019-01-23
更新細節：
What's new in this version:
Justinmind Prototyper Pro 8.7.0
- Change log not available for this version
Justinmind Prototyper Pro 8.6.1
- Change log not available for this version
Justinmind Prototyper Pro 8.6.0
- Change log not available for this version
Justinmind Prototyper Pro 8.4.3
- Change log not available for this version
Justinmind Prototyper Pro 8.4.2
- Change log not available for this version
Justinmind Prototyper Pro 8.4.0
- Change log not available for this version
Justinmind Prototyper Pro 8.3.1
- Change log not available for this version
Justinmind Prototyper Pro 8.3.0
- Change log not available for this version
Justinmind Prototyper Pro 8.2.2
- Change log not available for this version
Justinmind Prototyper Pro 8.2.1
- Change log not available for this version
Justinmind Prototyper Pro 8.2.0
- Change log not available for this version
更新時間：2019-01-23
更新細節：
What's new in this version:
Mipony 3.0.3
- Fixed priorities
- Save the column used to sort
- Download speed limit for Direct downloads is more accurate
- Reduced CPU use on high speed downloads
- Improved stability
- Fixed download Youtube videos with high quality
- Audio from Youtube videos now is saved in mp3 format
- Show in green color the links detected that already have been downloaded
- Fixed, torrent subfiles were downloaded even if they were excluded in the Add torrent window
- Fixed, the list of the last folders selected didn't save new folders for torrents
- Fixed, could not stop sharing several items at the same time
- Fixed problem adding torrent when Mipony was closed
- Fixed, Mega now can be used with unrestrictors
- Updated mexashare
- Fixed some Mega accounts could not login
Mipony 3.0.1
- Fixed notifications were shown for complted files even with notifications disabled
- Fixed error showing Options Window
- Fixed change targer folder did not work for direct downloads
- Updated Chinese translation
- Updated Korean translation
- Updated Japanese translation
- Updated Brazilian Portuguese translation
- Updated French translation
Mipony 3.0.0
- New interface
- Version pro with torrents and online video support
- Visualization filters in the Download window
- Interface ready for high resolution monitors HDPI
- .NET 4.0 ó más nuevas es requerido
Mipony 2.5.6
- Mipony will run under .NET Framework 4.x if it is installed. It is recommended to install .NET Framework 4.6 or newer. Some downloads could not work if it is not installed.
- Updated rapidgator.com
- Updated Yandex disk.
- Updated tezfiles.com
- Updated diskokosmiko.mx
- Added dbr.ee
- Added upload4earn.com
- Updated box.com
- Updated Bulgarian translation (thanks to Pavel).
- Updated userscloud.com
Mipony 2.5.5
- Added linkifier premium support
- Added uploadgig premium support
- Updated alfafile.net
- Updated upstore.net
- Updated jeodrive.com
- Updated Yandex
- Updated inclouddrive
- Updated dropbox
- Updated file-upload.com
- Updated uplod.cc
- Updated filefox.cc
- Updated filejoker.net
- Updated prefiles.com
- Updated wholecloud
- Updated extmatrix.com
- Updated gavitex.com
- Updated dropbox.com
- Updated file-space.org
- Updated redfile.eu
- Updated workupload.com
- Updated up07.me
- Updated share4web.com
- Removed unlimitzone
- Removed abelhas
- Removed livecloudz
- Removed vidlockers
- Removed ddlstorage
- Removed gulfup
- Removed uploadrocket
- Removed filemoney
- Removed mediafree
- Removed uplea
- Removed hugefiles
- Removed uploadex
- Removed bytewhale
- Removed Uploadingsite
- Removed Br2share
- Removed Uploadx
- Removed copiapop
- Removed MegaFileUpload
- Removed Putfiles
- Removed uploadz
- Removed avatarshare
- Removed datasbit
- Removed bitload
- Removed freakshare.com
- Removed Bitshare.com
- Removed crocko.com
- Removed debfile.com
- Removed putdrive.com
- Removed nodefiles.com
Mipony 2.5.4
- Updated filefactory.com
- Updated keep2share.cc
- Updated depfile.com
- Updated upera.co
- Added zapfile.net premium
- Added filenext.com premium
- Added katfile.com premium
- Added rapidrar.com premium
- Added userscloud.com premium
- Added clicknupload.net premium
- Added brupload.net premium
- Updated 1fichier.com
- Updated rockfile.eu
- Updated putfiles.in
- Updated uplod.ws
- Updated uploadgig.com
- Updated turbobit.net premium
- Updated clicknupload.net
- Updated yadi.sk
- Added crazyshare.cc
- Added uploadbits.com
- Added zapfile.net
- Added cloudyfiles.com
- Added file.al
- Removed fileserve.com
Mipony 2.5.3
- Added icerbox.com
- Added some icons
- Proxy password is now hidden
- Turbobit updated
- Updated tezfiles.com
- Updated suprafiles.co
- Added putfiles.in
- Added uploadz.co
- Added bitload.org
- Updated tusfiles.net
- Updated depositfiles.com
- Updated uploads.to
- Added wickedcloud.io
- Updated keep2share
- Updated Yandex (yadi.sk)
- Updated 4shared.com
- Updated rapidrar.com
- Updated katfile.com
- Updated file-upload.net
- Updated katfile.com
- Added megadrive.tv
- Added uploadify.net
- Updated linksnappy.com
- Updated data.hu
- Udated wholecloud.net
- Updated rgho.st
- Updated gavitex.com
- Updated mega-debrid.eu
- Updated dropbox.com
- Added nodefiles.com
- Added datasbit.com
- Added uploadbank.com
- Removed sockshare.com
- Removed ziddu.com
- Removed uploadc.com
- Removed vodlocker.com
- Removed erafile.com
- Removed ulnow.com
- Removed city-upload.com
- Removed sharingmaster.com
- Removed neodrive.co
- Removed upl.one
- Removed datoteke.com
- Removed joinfile.com
- Removed lafiles.com
- Removed promptfile.com
- Removed junocloud.me
- Removed sfshare.se
- Removed kingfiles.net
- Removed tigerfiles.net
- Removed loadus.net
- Removed gboxes.com
- Removed filepi.com
Mipony 2.5.2
- Added Rarefile.net premium support
- Added copiapop.com account support
- Added filejoker premium support
- Added backin.net premium support
- Updated upstore.net
- Updated katfile.com
- Updated dfiles.eu
- Updated uploads.to
- Added glbupload.com
- Added ausfile.com
- Added uplod.ws
- Added suprafiles.net
- Added file-upload.cc
- Added filenext.com
- Added uploadgig.com
- Added up-4ever.com
- Updated katfile.com
- Updated uplea.com
- Updated bezsms.org
- Updated yadi.sk
- Updated share-online.biz
- Updated webshare.cz
- Updated vidup.me
- Removed cloudsix.me
- Removed letitbit.net
- Removed secureupload.eu
- Removed uploading.com
- Removed sharesix.com
Mipony 2.5.1
- Fixed in some computers the captcha window was out of the screen
- When many links were detected Mipony was frozen in some computers
- Updated mega.nz
- Updated bigfile.to
- Updated rusfolder.com
- Added debfile.com
- Added mexashare.com
Mipony 2.5.0
- Show Windows 10 style notification when files are completed or links are detected
- New option to change the destination folder for links in the downloads list
- Press enter/Escape in the window for when we add an existing file
- Avoid closing Mipony when it is decrypting a file
- Remember and restore captcha window position
- When the download folder does not extist, Mipony will create it instead of changing to the default folder
- Network paths are not reseted to the default download path when the network path is not found
- Sorting downloads by status now sorts the downloading files first,then waiting, etc. and not alphabetically
- Sorting downloads by priority now sorts higher priority first instead of alphabetically
- Show the speed in the title bar before the version number, so you can easily see the speed in the Windows task bar
- Double click a completed download will open the file
- Use Ctrl+F to search for files in the downloads list
- Downloads history now can be saved for up to 2 years period
- Keep selection when moved a group of files to the first or the last position
- Removed download file segments limit for Rapidgator premium downloads
- Fixed some downloads were corrupted
- CaptchaBrotherhood Plugin loading has been disabled since it no longer works
- Mipony can now download from uploaded.net using more segments
- Now the referer url can be set to many downloads at the same time
- Updated uploaded.net
- Updated Google Drive.
- Updated solidfiles.com
- Updated keep2share.cc
- Updated downace.com
- Updated sdilej.cz
- Updated androidfilehost.com
- Updated box.com
- Updated uploadocean.com
- Updated hitfile.com
- Updated turbobit.net
- Updated backin.net
- Updated upstore.net premium
- Updated downace.com
- Updated uloz.to
- Added dropbox.com
- Added up07.net
- Added gavitex.com
- Added bdupload.info
- Added erafile.com
- Added cloudup.com
- Added vodlocker.com
- Added filetrip.net
- Added megafileupload.com
- Removed fileswap.com
- Removed shareflare.net
- Removed revclouds.com
- Removed minus.com
- Removed filesin.com
- Removed filesuniverse.com
- Removed uploadbaz.com
- Removed 24uploading.com
- Removed zorofiles.com
- Removed myupload.dk
- Removed speedyshare.com
- Removed sharing.zone
更新時間：2019-01-23
更新細節：
What's new in this version:
Windows Repair 4.4.2
- Updated default registry and file permissions for Windows 7, 8.1 and 10 as of Jan 22nd 2019
- Small code changes and tweaks
Windows Repair 4.4.1
- Updated default registry and file permissions for Windows 7, 8.1 and 10 as of Jan 1st 2019
Windows Repair 4.4.0
Critical Update:
- There is a bug in Windows 10 build 1809 where using the bcdedit command to reboot the system into safe mode doesn't clear the registry keys for the safe boot option after the command has been removed
- Because of this when you reboot into normal mode many services wont start because Windows thinks it is still in safe mode even though it isn't. This kept almost everything from working correctly
- The program has been updated to auto remove these keys so Windows doesn't get stuck thinking it is in safe mode
- I have also added the file "remove_stuck_safemode.reg" under the program folder, filesregfiles folder. You can use this file manually if needed
Windows Repair 4.3.1
- Updated default registry and file permissions for Windows 7, 8.1 and 10 as of Nov 7th 2018
- Fixed bug that caused the program to crash on Windows XP
- Multiple code changes and improvements
Windows Repair 4.3.0
- Major update, added the registry files and service startup commands to support Windows 10 build 1809
- Updated default registry and file permissions for Windows 10 as of Oct 2nd 201
- Fixed bug that caused the program to crash on Windows XP
- Fixed bug where the proper mouse icon didn't show when over the resize window section on the resizable windows in the program
- Updated the window borders of the program with better graphics
- Multiple other small changes and fixes
更新時間：2019-01-14
更新細節：
What's new in this version:
Highlights:
- Experimental support for overriding numpy functions, see __array_function__ below.
- The matmul function is now a ufunc. This provides better performance and allows overriding with __array_ufunc__.
- Improved support for the ARM and POWER architectures.
- Improved support for AIX and PyPy.
- Improved interop with ctypes.
- Improved support for PEP 3118.
New functions:
- New functions added to the numpy.lib.recfuntions module to ease the structured assignment changes: assign_fields_by_name, structured_to_unstructured, unstructured_to_structured, apply_along_fields, require_fields
New deprecations:
- The type dictionaries numpy.core.typeNA and numpy.core.sctypeNA are deprecated. They were buggy and not documented and will be removed in the 1.18 release. Usenumpy.sctypeDict instead.
- The numpy.asscalar function is deprecated. It is an alias to the more powerful numpy.ndarray.item, not tested, and fails for scalars.
- The numpy.set_array_ops and numpy.get_array_ops functions are deprecated.
- As part of NEP 15, they have been deprecated along with the C-API functions :c:func:PyArray_SetNumericOps and :c:func:PyArray_GetNumericOps. Users who wish to override the inner loop functions in built-in ufuncs should use :c:func:PyUFunc_ReplaceLoopBySignature.
- The numpy.unravel_index keyword argument dims is deprecated, use shape instead.
- The numpy.histogram normed argument is deprecated. It was deprecated previously, but no warning was issued.
- The positive operator (+) applied to non-numerical arrays is deprecated. See below for details.
- Passing an iterator to the stack functions is deprecated
Expired deprecations:
- NaT comparisons now return False without a warning, finishing a deprecation cycle begun in NumPy 1.11.
- np.lib.function_base.unique was removed, finishing a deprecation cycle begun in NumPy 1.4. Use numpy.unique instead.
- multi-field indexing now returns views instead of copies, finishing a deprecation cycle begun in NumPy 1.7. The change was previously attempted in NumPy 1.14 but reverted until now.
- np.PackageLoader and np.pkgload have been removed. These were deprecated in 1.10, had no tests, and seem to no longer work in 1.15.
Future changes:
NumPy 1.17 will drop support for Python 2.7