Release 1.9.0 of the POCO C++ Libraries is available.
Major new features include additional text encodings, available in the PocoEncodings library, and support for Internationalized Domain Names in the Poco::Net::DNS class.
See the CHANGELOG for
the full list of all 20+ changes. Upgrading to this release is recommended.
1.8.1 is a bug fix/maintenance release containing a few fixes and improvements in the Foundation, XML, Data/SQLite and Net libraries. See the CHANGELOG for details. Upgrading is recommended.
Furthermore, release packages are now signed with GPG.
220.127.116.11 is a patch release for 1.8.0 that fixes a file corruption issue in the Zip library caused by a change to Poco::DeflatingStream in 1.8.0. Upgrading is strongly recommended.
POCO C++ Libraries release 1.8.0 is available. This release brings Unix Domain Socket support in the Net library, Zip64 support in the Zip library, an XML stream parser API, the new Redis client library, support for connection string URIs in the MongoDB client library and a couple of other improvements and bugfixes. This release still supports C++03 compilers, including Visual C++ 2008. Support for OpenVMS has finally been removed, though.
Release 1.7.9p2 of the POCO C++ Libraries is available. This is a minor bugfix release that fixes the Zip testsuite build for non-static builds on Windows platforms. Note that the previous release, 1.7.9p1, fixed a potential vulnerability in the Zip library.
Release 1.7.9p1 fixes a potential vulnerability in the Zip library. The checks Poco::Zip::Decompress performs on an Zip archive entry file name before extracting that file were insufficient. This would allow an attacker to craft a malicious Zip archive containing files with absolute paths, or paths relative to the current user’s home directory on Linux/Unix platforms. A Poco::Zip::Decompress instance running in a process with sufficient privileges would then extract that file to that specified path. This could be used to overwrite important system files. We recomment to upgrade to this release if your application uses Poco::Zip::Decompress to extract Zip files of potentially unknown origin.
Release 1.7.9 is available. This release upgrades the bundled Expat XML parser to release 2.2.3 and also fixes a few issues in the XML library. There have also been changes to Poco::Util::LayeredConfiguration, PageCompiler and Poco::NamedEvent/Poco::NamedMutex.
Please see the Changelog for details.
Release 1.7.8p3 upgrades the bundled Expat XML parser to release 2.2.1 which fixes some
vulnerabilities. Upgrading from earlier releases is highly recommended.
As it happened in my case, the Visual Studio 2017 installer (Community Edition, but maybe also other editions) may break an existing Visual Studio 2008 installation. Specifically, when you run Visual Studio 2008 under WoW64 (e.g., from a TeamCity agent or similar), the Visual Studio $(WindowsSdkDir) variable will be undefined after running the 2017 installer, causing builds to fail as the toolchain cannot find the Windows SDK. A fix that worked for me can be found here. Took me some time to fix the issue (specifically, because it only happened under TeamCity), and happened again after upgrading from VS2017 RC to final.
Release 1.7.8 of the POCO C++ Libraries is available.
This is a maintenance release containing significant improvements and bugfixes in the Foundation, Net, Zip and MongoDB libraries. Furthermore, the bundled SQLite, zlib, PCRE and double-conversion libraries have been upgraded to current releases.
Incidentally, release 1.7.8 marks the 12th anniversary of the first public POCO C++ Libraries release on February 21, 2005, as evident from the CHANGELOG, which obviously also lists all changes in this latest release.