|
1 | 1 | This is the changelog file for the POCO C++ Libraries. |
2 | 2 |
|
3 | 3 |
|
| 4 | +Release 1.15.1 (YYYY-MM-DD) |
| 5 | +=========================== |
| 6 | + |
| 7 | +Summary of Changes: |
| 8 | + |
| 9 | +This is a bugfix release. |
| 10 | + |
| 11 | +Security Fixes: |
| 12 | + |
| 13 | +- GH #5255 Upgrade bundled libexpat to release 2.7.5 |
| 14 | + - CVE-2026-32776 (NULL function pointer dereference) |
| 15 | + - CVE-2026-32777 (infinite loop) |
| 16 | + - CVE-2026-32778 (NULL dereference on OOM retry) |
| 17 | +- PR #5232 enh(deps): upgrade bundled zlib, utf8proc, double-conversion, and wepoll |
| 18 | + - zlib inflateCopy() OOB fix |
| 19 | + - utf8proc out-of-bounds memory access fix |
| 20 | +- GH #5207 Upgrade bundled dependencies to latest versions |
| 21 | + - libpng CVE-2026-22801 (heap over-read) |
| 22 | + - libpng CVE-2026-25646 (heap buffer overflow) |
| 23 | + |
| 24 | +Bundled Third-Party Library Upgrades: |
| 25 | + |
| 26 | +- libpng 1.6.53 → 1.6.55 |
| 27 | +- SQLite 3.51.1 → 3.51.2 - deadlock fix, query optimizer bug fixes |
| 28 | +- zlib 1.3.1 → 1.3.2 |
| 29 | +- utf8proc 2.11.0 → 2.11.3 |
| 30 | +- LZMA SDK 25.01 → 26.00 - format improvements, sparse file TAR fix |
| 31 | +- double-conversion 3.3.1 → 3.4.0 |
| 32 | +- wepoll 1.5.4 → 1.5.8 |
| 33 | +- cpptrace ~0.6.x → 1.0.4 |
| 34 | +- libexpat 2.7.4 → 2.7.5 |
| 35 | + |
| 36 | +Features, Enhancements and Third Party Updates: |
| 37 | + |
| 38 | +- GH #5253 Add `!include` directive support to PropertyFileConfiguration |
| 39 | +- PR #5233 Extract tessil into dependencies/ |
| 40 | +- PR #5231 Add WinGet instructions to README |
| 41 | +- PR #5229 feat(CppUnit): add ENABLE_INSTALL_CPPUNIT option to control installation |
| 42 | +- PR #5219 Extract and upgrade cpptrace to dependencies/ |
| 43 | +- PR #5215 fix(MinGW): update ODBCVER to 0x0350 for SQL_GUID support |
| 44 | +- GH #5201 ProcessRunner: add PROCESS_KILL_TREE option |
| 45 | +- GH #5195 clang-cl support |
| 46 | + |
| 47 | +Bug Fixes and Improvements: |
| 48 | + |
| 49 | +- PR #5245 fix(ODBC): defensive UTF-16 length handling in makeUTF8 for Informix |
| 50 | +- GH #5237 Constify X509* usage where needed and use ASN1_STRING accessors |
| 51 | +- GH #5236 ServerApplication: Windows SCM does not forward ImagePath arguments to ServiceMain |
| 52 | +- GH #5228 deadlock when app exit if AsyncChannel is used in the logging system |
| 53 | +- PR #5227 fix(Net): reactor-based HTTP server not responding to requests with body |
| 54 | +- GH #5225 Building Data samples fails with CMake - SQLite support disabled but still required |
| 55 | +- GH #5220 Poco::Data::Statement should not be in ST_DONE state after addBinding() call |
| 56 | +- GH #5217 RedisStreamBuf: SIGSEGV when socket dies during std::getline() |
| 57 | +- GH #5213 NotificationQueue::wakeUpAll() lost-wakeup race causes deadlock on shutdown |
| 58 | +- GH #5210 File::getExecutablePath() returns directory instead of executable |
| 59 | +- PR #5204 fix(MongoDB): Add timeout support and harden replica set connections |
| 60 | +- GH #5200 1.15.0: linker errors with MSVC link-time-code-generation |
| 61 | +- GH #5199 ProcessRunner::stop() termination signal lost on Windows due to NamedEvent race |
| 62 | +- GH #5198 ServerApplication::hasConsole() returns false when stdout is closed (Windows) |
| 63 | +- GH #5196 1.15.0 CMake build failure with -DENABLE_PDF:BOOL=FALSE |
| 64 | +- GH #5176 Build error when cross-compiling for Win32 from Debian12 |
| 65 | +- GH #5157 Accessing array with JSONConfiguration |
| 66 | + |
| 67 | + |
4 | 68 | Release 1.15.0 (2026-02-10) |
5 | 69 | =========================== |
6 | 70 |
|
|
0 commit comments