diff --git a/AUTHORS b/AUTHORS index d52df1e5..fca5e31b 100644 --- a/AUTHORS +++ b/AUTHORS @@ -40,6 +40,7 @@ Benjamin Wuethrich Benoit de Chezelles Bernard Niset Bhargava Mummadireddy +Binbin Qian Bradley Skaggs Brahm Lower Brendan Macmillan @@ -181,6 +182,7 @@ Steven Ihde Steven Maude Steven Penny Thalia Archibald +TheOdd Thomas Bozeman th026106 Thomas R. Hall Thomas Sibley @@ -229,3 +231,4 @@ wellweek <148746285+wellweek@users.noreply.github.com> wllm-rbnt zstadler наб +엄태용 diff --git a/NEWS.md b/NEWS.md index bbdd6304..8d7816e3 100644 --- a/NEWS.md +++ b/NEWS.md @@ -1,3 +1,36 @@ +# 1.8.1 + +This is a patch release to fix security, performance, and build issues found in 1.8.0. +Full commit log can be found at . + +## Security fixes + +- CVE-2025-49014: Fix heap use after free in `f_strftime`, `f_strflocaltime`. + @wader 499c91bca9d4d027833bc62787d1bb075c03680e +- GHSA-f946-j5j2-4w5m: Fix stack overflow in `node_min_byte_len` of oniguruma. + @wader 5e159b34b179417e3e0404108190a2ac7d65611c + +## CLI changes + +- Fix assertion failure when syntax error happens at the end of the query. @itchyny #3350 + +## Changes to existing functions + +- Fix portability of `strptime/1` especially for Windows. @itchyny #3342 + +## Language changes + +- Revert the change of `reduce`/`foreach` state variable in 1.8.0 (#3205). + This change was reverted due to serious performance regression. @itchyny #3349 + +## Documentation changes + +- Add LICENSE notice of NetBSD's `strptime()` to COPYING. @itchyny #3344 + +## Build improvements + +- Fix build on old Mac with old sed. @qianbinbin #3336 + # 1.8.0 We are pleased to announce the release of version 1.8.0.