[LyX/2.5.x] Refresh status.25x
Pavel Sanda <[email protected]>
| Newsgroups | gmane.editors.lyx.cvs |
|---|---|
| Message-ID | <[email protected]> |
commit f4e2c9459bbd5b327d3da612f190791fb70130f6 Author: Pavel Sanda <[email protected]> Date: Tue Aug 18 02:19:51 2026 +0200 Refresh status.25x --- status.25x | 91 ++------------------------------------------------------------ 1 file changed, 2 insertions(+), 89 deletions(-) diff --git a/status.25x b/status.25x index 3803f0fe4d..006e04c43a 100644 --- a/status.25x +++ b/status.25x @@ -1,6 +1,6 @@ -*- text -*- -This file describes what has been done in the preparation of LyX 2.5.2. +This file describes what has been done in the preparation of LyX 2.5.3. All comments are welcome. We try to group things by topic and in decreasing order of importance. @@ -13,59 +13,17 @@ What's new ** Updates: *********** -* SECURITY HARDENING FIXES - -- Load-triggered arbitrary command execution vulnerabilities fixes: - - 00a: kpsewhich shell injection via filename - - 00b: lyx2lyx shell injection via filename - - 00c: graphics-extension name shell injection - - 00h: import-path filename shell injection into converters - -- Export/View triggered arbitrary command execution vulnerabilities fixes: - - 00d: bibtex command shell injection - - 00e: index command shell injection - - 00g: mangled filenames shell injection - - 00i: convert-pdf helper shell injection - - 00k: paperwidth/height injection causing arbitrary files rewrite - -- New consent authorization gate for unpatched external tools - - 00de: processing gate prompts before running a code-capable bib/index tools - (biber/xindy/xindex) on an untrusted document, - The real fixes are upstream (biber 2.22, xindex 1.07, xindy from up-to-date - TL tree), while the gate is LyX's interim guard. - For biber 2.22 the gate automatically relaxes to no-op. - - 00de-2: xindex version check relaxing the gate above. - - * DOCUMENT INPUT/OUTPUT -- Issue an error on @ catcode mismatch by layout definitions (bug 13275) - * MISCELLANEOUS -- LyX now supports the Elsevier CAS classes. * TEX2LYX IMPROVEMENTS -- Add support for \colorlet if the second arg is a known LaTeX or custom - color (bug 13310). - * USER INTERFACE -- Implement LFUN_REFERENCE_TO_PARAGRAPH for mathed (bug 13206). - -- It is now possible in the tabular creation dialog (Inset > Table) to - insert a multi-page table (optionally with caption) directly. - -- Simple search within selection now remembers the initial selection - beyond the first match (bug 13293). - -- Fix session information not being properly restored. This regression - introduced was introduced in 2.5.1 as a side effect of fixing macOS - crash on exit and new fix should fix both issues. - * DOCUMENTATION AND LOCALIZATION @@ -74,9 +32,7 @@ What's new * BUILD/INSTALLATION -- Use inkscape as fallback png->eps converter if ImageMagick is not - available or IM policy does not allow for png->eps conversion. - +- make check issue introducec in 2.5.2 was fixed. ** Bug fixes: @@ -84,46 +40,9 @@ What's new * DOCUMENT INPUT/OUTPUT -- Fix problem with nesting of languages. - -- Fix closing of local CJK language with polyglossia (bug 13315). - -- Prevent duplicate theorem definitions (bug 13302). - -- Fix case where the colortbl package has been loaded unnecessarily - (bug 13306). - -- Fix order of theorem definitions for pandoc processing (bug 13307). - -- Fix support for import/export of ODT documents using pandoc. - * USER INTERFACE -- Fix crash when selecting inset (bug 13294). - -- Fix assertion when closing buffer with listings settings dialog open. - -- Consider longtable caption when adding new column (bug 13299). - -- Load externally referred buffers and initialize their labels. - -- Fix pasting of cross-references in math (bug 13290). - -- Fix pasting from LaTeX with keepEmpty environment in first paragraph - (bug 13295). - -- Fix casing of strings in English localization (bug 13304). - -- Fix background color drawing for non-center aligned tabular cells. - -- Fix on-screen representation of "pagewidth" length (bug 13309). - -- Fix sorting of colors in preferences. - -- Fix zoom-in/out functions so that the inverse (e.g. with the mouse wheel) - end up at the exact same value (bug 13327). - * INTERNALS @@ -139,12 +58,6 @@ What's new * TEX2LYX -- Fix import of table with linebreak in column specification. - -- Fix parsing of more complex column specification. - -- Error if TeX file has a preamble but no (accessible) \begin{document} - (bug 13297). * LYXHTML -- lyx-cvs mailing list [email protected] https://lists.lyx.org/mailman/listinfo/lyx-cvs