diff --git a/NEWS b/NEWS index 148792f..36d7425 100644 --- a/NEWS +++ b/NEWS @@ -1,52 +1,42 @@ -Version 0.9.2 (Beta 6) +Version 0.9.2 ============= -* mdb-export: Implement a serial type and relations for MySQL (#257) -* libmdb: mdb_col_to_string now prints a warning and returns "" for any unsupported data type +MDB Tools 0.9.2 is a security and bug-fix release. Due to a number of memory +errors uncovered by OSS-Fuzz, all users who use MDB Tools to read data from +untrusted sources are encouraged to upgrade to 0.9.2 as soon as possible. -Version 0.9.2 (Beta 5) -============= +The release also includes some minor improvements and behavior changes, +described below. +libmdb: +* Fix infinite loop with malformed input (oss-fuzz/28789) +* Fix buffer overrun and some out of bounds memory accesses (oss-fuzz/28832 + oss-fuzz/28807) +* Fix potential memory leak (oss-fuzz/28791) +* Improved bounds and return value checking (oss-fuzz/29328 + oss-fuzz/29329) +* Add support for numeric scale/precision on JET3 databases and floating-point column types +* `mdb_col_to_string` now prints a warning and returns `""` for any unsupported data type +* Improved warning with invalid row data #253 + +Command-line tools: +* All CLI tools which accept string arguments are now locale-aware (#237) +* All CLI tools now accept a `--version` argument (#232) +* `mdb-export`: Fix issue where exported SQL field sizes were sometimes twice the necessary size (#112) +* `mdb-export`: Improved handling of BLOBs (#250) +* `mdb-export`: Implement a serial type and relations for MySQL (#257) +* `mdb-queries` now has long option names `--list`, `--newline`, and `--delimiter` +* `mdb-schema`: Exit with an error code if the requested table is not found + +ODBC: +* `SQLBindCol` now respects its TargetType (fCType) argument and converts bound data to the requested type (#23 #242) +* `SQLFetchCol` now returns `SQL_SUCCESS_WITH_INFO` if a bound column was truncated, and `SQL_ERROR` if a bound value is out of range of the target type. * Fix handling of numeric types in ODBC driver (#255) -* Add -DHAVE_GLIB to library's pkg-config --cflags if needed (#254) -* Improved warning with invalid row data (#253) - -Version 0.9.2 (Beta 4) -============= - -* Fix unused function warning when compiling without iconv (bug introduced in Beta 3) -* mdb-export: Improved handling of BLOBs (#250) - -Version 0.9.2 (Beta 3) -============= - -* String literals in SQL statements had an extra quotation mark added during evaluation (bug introduced in 0.9.1) -* Improved locale handling compared to earlier betas - -Version 0.9.2 (Beta 2) -============= +Build and documentation: * Updated man pages with new SQL features and correct `MDBOPTS` information (#203) * Add generated API documentation (#239) -* `mdb-export`: Fix issue where exported SQL field sizes were sometimes twice the necessary size (#112) -* `mdb-queries` now has long option names `--list`, `--newline`, and `--delimiter` -* All CLI tools which accept string arguments are now locale-aware -* All CLI tools now accept a `--version` argument (#232) -* libmdb: Add support for numeric scale/precision on JET3 databases and floating-point column types -* ODBC: `SQLBindCol` now respects its TargetType (fCType) argument and converts bound data to the requested type (#23 #242) -* ODBC: `SQLFetchCol` now returns `SQL_SUCCESS_WITH_INFO` if a bound column was truncated, and `SQL_ERROR` if a bound value is out of range of the target type. - - -Version 0.9.2 (Beta 1) -============= - -* Make command-line arguments aware of the user's locale (#237) -* `mdb-schema`: Exit with an error code if the requested table is not found +* Move `HACKING` to `HACKING.md` (with a relocation notice) and `TODO` to `TODO.md` * Fuzz-test all pull requests (#230) -* libmdb: Fix infinite loop with malformed input (oss-fuzz/28789) -* libmdb: Fix buffer overrun and some out of bounds memory accesses (oss-fuzz/28832 + oss-fuzz/28807) -* libmdb: Fix potential memory leak (oss-fuzz/28791) -* libmdb: Improved bounds and return value checking (oss-fuzz/29328 + oss-fuzz/29329) +* Add `-DHAVE_GLIB` to library's `pkg-config --cflags` if needed (#254) Version 0.9.1 diff --git a/configure.ac b/configure.ac index 79c3b3e..c802843 100644 --- a/configure.ac +++ b/configure.ac @@ -1,5 +1,5 @@ dnl Process this file with autoconf to produce a configure script. -AC_INIT([mdbtools],[0.9.2-beta6],[https://github.com/mdbtools/mdbtools/issues],[],[https://github.com/mdbtools/mdbtools]) +AC_INIT([mdbtools],[0.9.2],[https://github.com/mdbtools/mdbtools/issues],[],[https://github.com/mdbtools/mdbtools]) AC_CONFIG_MACRO_DIR([m4]) AC_CONFIG_AUX_DIR([build-aux]) AC_CONFIG_SRCDIR(src/extras/mdb-dump.c)