POCO C++ Libraries

Release 1.7.9p1 fixes a potential vulnerability in the Zip library. The checks Poco::Zip::Decompress performs on an Zip archive entry file name before extracting that file were insufficient. This would allow an attacker to craft a malicious Zip ... [More] archive containing files with absolute paths, or paths relative to the current user’s home directory on Linux/Unix platforms. […] [Less]

Release 1.7.9 is available. This release upgrades the bundled Expat XML parser to release 2.2.3 and also fixes a few issues in the XML library. There have also been changes to Poco::Util::LayeredConfiguration, PageCompiler and Poco::NamedEvent/Poco::NamedMutex. Please see the Changelog for details.

Release 1.7.8p3 upgrades the bundled Expat XML parser to release 2.2.1 which fixes some vulnerabilities. Upgrading from earlier releases is highly recommended. Changelog

As it happened in my case, the Visual Studio 2017 installer (Community Edition, but maybe also other editions) may break an existing Visual Studio 2008 installation. Specifically, when you run Visual Studio 2008 under WoW64 (e.g., from a TeamCity ... [More] agent or similar), the Visual Studio $(WindowsSdkDir) variable will be undefined after running the 2017 installer, […] [Less]

Release 1.7.8 of the POCO C++ Libraries is available. This is a maintenance release containing significant improvements and bugfixes in the Foundation, Net, Zip and MongoDB libraries. Furthermore, the bundled SQLite, zlib, PCRE and double-conversion ... [More] libraries have been upgraded to current releases. Incidentally, release 1.7.8 marks the 12th anniversary of the first public POCO C++ […] [Less]

Release 1.7.7 of the POCO C++ Libraries is available. This maintenance release contains bugfixes and improvements in the Foundation, JSON, Net, NetSSL, Data/ODBC, Data/SQLite and Zip libraries. On Apple platforms, the latest Xcode 8.2 toolchains are ... [More] supported and an IPv6 DNS issue on iOS and related platforms causing rejection of apps during App Store validation […] [Less]

Release 1.7.6 of the POCO C++ Libraries is available. This release contains bugfixes and improvements in the Foundation, XML, Util, Net, Data/MySQL and Zip libraries. A special focus of this release was correcting a couple of non-critical issues reported by static code analysis tools. As usual, the full list of changes in in the CHANGELOG. […]

I recently did a review of our project with regards to the Core Infrastructure Initiative (CII) Best Practices, in order to ensure we’re following industry best practices with POCO. Things looked very good, with only a few best practices missing, which I have fixed in the meantime: Updated the CONTRIBUTING.md file to include a statement […]

Release 1.7.5 of the POCO C++ Libraries is available. This release fixed a potential dangling pointer issue in Poco::JSON::Object, upgrades bundled SQLite to 3.14.1 and contains a few other minor improvements. Please see the CHANGELOG for the details.

Release 1.7.5 of the POCO C++ Libraries is available. This release fixed a potential dangling pointer issue in Poco::JSON::Object, upgrades bundled SQLite to 3.14.1 and contains a few other minor improvements. Please see the CHANGELOG for the details.