Thursday 13th March 2014
Fedora Project
Updated perl-IO-Socket-SSL to 1.968 in Rawhide:
Behaviour Change: removed implicit defaults of certs/server-{cert,key}.pem for SSL_{cert,key}_file and ca/certs/my-ca.pem for SSL_ca_file; these defaults were deprecated since 1.951 (July 2013)
- Usable CA verification path on Windows etc.:
Do not use Net::SSLeay::CTX_set_default_verify_paths any longer to set system/build dependent default verification path, because there was no way to retrieve these default values and check if they contained usable CA
Instead, re-implement the same algorithm and export the results with public function default_ca() and make it possible to overwrite it
Also check for usable verification path during build; if no usable path is detected, require Mozilla::CA at build and try to use it at runtime
Local Packages
New package perl-Exporter-Tiny (0.036)
New package perl-Test-API (0.003)
Updated perl-IO-Socket-SSL to 1.968 as per the Fedora version
Updated perl-Perl-Tidy to fix insecure temporary file usage (CVE-2014-2277)
Updated perl-Text-CSV_XS to 1.05:
Allow case insensitive attributes and attribute aliases (quote_always = always_quote)
Enhanced the csv() function (diagnostics)
- Start callbacks support
- Minor doc fixes
- Make subclassing safer
Updated perl-XML-LibXML to 2.0112:
Fix segfaults when accessing attributes of DTD nodes (CPAN RT#71076)
Make $schema->validate work with elements; this uses xmlSchemaValidateOneElement under the hood (CPAN RT#93496)
Passing { recover => 2 } directly to load_html didn't work (CPAN RT#93429)
Apply patch to build with MSVC on Windows (CPAN RT#90064)
Updated php-Smarty to 3.1.17:
Bugfix: Smarty_CacheResource_Custom did not handle template resource type specifications on clearCache() calls (Issue 169)
Bugfix: SmartyBC.class.php should use require_once to load Smarty.class.php (Forum Topic 24683)
Bugfix: "* }" (spaces before right delimiter) was interpreted by mistake as comment end tag (Issue 170)
- Internals: content cache should be clear when updating cache file
Bugfix: the compiler failed when using template inheritance and recursive {include} (smarty-developers group)
Bugfix: undo block nesting checks for {nocache} for reasons like Forum Topic 23280 (Forum Topic 24762)
Bugfix: $smarty->debugging = true; showed the variable of the $smarty object, not the variables used in display() call (Forum Topic 24764)
Bugfix: clearCompiledTemplate(), clearAll() and clear() should use realpath to avoid possible exception from RecursiveDirectoryIterator (Issue 171)
Bugfix: shared.literal_compiler_param.php threw an exception when literal contained a '-' (smarty-developers group)
Bugfix: a '//' or '\\' in template_dir path could produce wrong path on relative filepath in {include} (Issue 175)
Bugfix: Smarty failed when executing PHP on HHVM (Hip Hop 2.4) because uniqid('',true) returns string with ',' (Forum Topic 20343)
Bugfix: relative file path {include} within {block} of child templates threw exception on first call (Issue 177)