Paul's Blog Entries for February 2015

Sunday 1st February 2015

Fedora Project

• Imported and built perl-Apache-Session-NoSQL (0.1) for F-20, F-21, Rawhide, EPEL-6 and EPEL-7

• Updated perl-B-Hooks-EndOfScope to 0.14 in Rawhide:

  • Line numbers in shipped code are now the same as the repository source, for easier debugging
  • More accurate dynamic prereq declarations

Local Packages

• Updated perl-B-Hooks-EndOfScope to 0.14 as per the Fedora version

• Updated perl-MCE to 1.600:

• Bug Fixes

  • Die handlers (in MCE::Signal and MCE::Core::Worker) are finally 100%; furthermore, eval { die ... } statements behave correctly while running MCE itself inside an eval block, so MCE on iPerl on top of iPython is possible via Devel::IPerl

  • Fixed queues stalling from running (MCE::Queue fast => 1) on Linux

  • MCE Models now set $MCE::FREEZE, $MCE::THAW, and $MCE::TMP_DIR when overriding freeze, thaw, and tmp_dir respectively at load time

  • Pressing CTRL-D now ends STDIN the first time

• Enhancements

  • Added seven names to CREDITS; David Farrell, Demian Riccardi, Hisham Eldai, Joel Berger, Oleksandr Kharchenko, Wei Shen, and Zakariyya Mughal

  • Refactored ->print, ->printf, and ->say; optimized ->print some more

  • Shorten $_queue to $_Q in Queue; ID is always sent first during IPC

  • The init method in MCE Models can now take an array of options

  • Optimized memory consumption in Handle.pm, Iterator.pm, and Request.pm

  • Optimized memory consumption for ->sendto, ->do, and ->gather

  • Optimized memory consumption for overall IPC in general

  • Refreshed the MCE->new method

• New Features

  • Added a new module; MCE::Mutex providing simple semaphore

  • Added ->relay_recv, ->relay, and ->relay_final methods to the Core API

  • Refreshed cat.pl and findnull.pl examples to relay the number of lines read; workers output exclusively and orderly to STDOUT in cat.pl

  • Added several examples; biofasta (folder), mutex.pl, and relay.pl

  • The FASTA examples process by records "\n>", not by lines

  • MCE applies additional logic when RS begins with a newline character; e.g. RS => "\n>"; it trims away characters after the newline and prepends them to the next record, which happens automatically when not slurping, and otherwise, the logic is applied to the first and last records only (this is illustrated in the Core API documentation)

  • Updated the Core API documentation (RS, added relay methods)

• Updated perl-Term-ReadLine-Gnu to 1.26:

  • Call ornaments() after rl_initialize() to set tty before calling rl_initialize() not to output some characters to STDIO (CPAN RT#96569, CPAN RT#101196)

  • Make handling of iostreams simple (make _rl_store_iostream() return void and remove _rl_fetch_iostream()) (CPAN RT#101078)

  • Fix the Prerequisites section to require Perl 5.8 (it was required since TRG 1.23)

  • t/callback.t: add some new Tk-tests from CPAN Testers' site

Monday 2nd February 2015

Fedora Project

• Updated bluefish to 2.2.7 in F-20, F-21, Rawhide and EPEL-7:

  • Fixes rare crashes in the autocompletion, the filebrowser, the htmlbar plugin preferences, and in file-load-cancel
  • Fixes a rare case of broken syntax highlighting after multiple search/replace actions
  • Displays better error/warning output when parsing language files
  • Finally fixes javascript regex syntax highlighting
  • Loading of files with corrupt encoding has been improved

  • Project loading over sftp has been improved

  • Various HTML5 tags have been added, and HTML5 is the default now for php, cfml and other languages that can include HTML syntax

  • Saving and loading of UTF-16 encoded files was broken and has been fixed
  • Various languages have better support, such as javascript, css, HTML, pascal/deplhi, and HTML has improved autocompletion
  • On OSX the keys for tab switching no longer confict with some keyboard layouts, and behaviour at shutdown was improved
  • The upload/download feature has a new option to ignore backup files
  • The home/end keys now work better on wrapped text
  • The search and replace dialog correctly shows the number of results when searching in files on disk

• Updated perl-CPAN-Meta-Check to 0.010 in Rawhide:

  • Bump Module::Metadata prereq for $VERSION parsing (CPAN RT#101095)

  • Consistently require same version of CPAN::Meta::Requirements

• Updated perl-Cpanel-JSON-XS to 3.0115 in Rawhide:

  • Fix stack corruption when encoding nested objects with FREEZE method (GH#35)

• Updated perl-Finance-Quote to 1.37 in F-20, F-21, Rawhide, EPEL-6 and EPEL-7:

  • MorningstarJP: changed dependency from Date::Calc to DateTime

  • Modified 00-use.t to show more info

  • Remove Crypt::SSLeay dependency in favour of LWP::Protocol::https

  • Updated HU.pm and test file to current website

• Updated perl-IO-Socket-SSL to 2.012 in Rawhide:

  • Fix t/ocsp.t - don't count on revoked.grc.com using OCSP stapling (CPAN RT#101855)

  • Added option 'purpose' to Utils::CERT_create to get better control of the certificate's purpose; default is 'server,client' for non-CA (contrary to only 'server' before)

  • Removed RC4 from default cipher suites on the server side (https://github.com/noxxi/p5-io-socket-ssl/issues/22)

  • Refactoring of some tests using Test::More

• Updated perl-Text-CSV_XS to 1.14 in Rawhide:

  • Move to github

  • Add csv (filter => {});

  • Change csv ()'s void context behaviour

Local Packages

• Updated bluefish to 2.2.7 as per the Fedora version

• Updated cdrtools to 3.01 alpha release 27

• Updated perl-CPAN-Meta-Check to 0.010 as per the Fedora version

• Updated perl-Cpanel-JSON-XS to 3.0115 as per the Fedora version

• Updated `perl-DateTime-TimeZone: update to 1.85:

  • This release is based on version 2015a of the Olson database
  • Contemporary changes for Quintana Roo and Chile

• Updated perl-IO-Socket-SSL to 2.012 as per the Fedora version

• Updated perl-Text-CSV_XS to 1.14 as per the Fedora version

• Updated python-twisted to 15.0.0 (see NEWS for details)

• Updated unrar to 5.21 beta 2

Tuesday 3rd February 2015

Local Packages

• New package geoipupdate (2.1.0)

• Updated GeoIP to 1.6.4

• Updated java-1.7.0-oracle to Java SE 7 Update 76 (see OracleJava7OnFedora)

• Updated java-1.8.0-oracle to Java SE 8 Update 31

Both of the Java packages include contributions from Benjamin Fischer:

• Improve support for building on EL-5
• Add the Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy

Wednesday 4th February 2015

Fedora Project

• Updated perl-Test-Perl-Critic to 1.03 in Rawhide:

  • all_critic_ok() will now run tests in parallel over multiple cores. So if you have 8 cores, your Perl::Critic tests could run 8x faster. However, the actual performance depends on the size and shape of your code base and your Perl::Critic configuration.

  • If you're using the critic_ok() function directly (perhaps because you want more control over which files are tested) then you won't see any performance boost. I recommend gathering your list of files first, and then passing the list to all_critic_ok().

  • The deprecated function all_code_files() has now been removed from Test::Perl::Critic. Use Perl::Critic::Utils::all_perl_files() instead.

Local Packages

• Removed getlive, which no longer works and has been retired upstream (I've been using getmail via pop3.live.com successfully for some time now)

• Updated perl-Email-Address to 1.907:

  • The test suite tests parses more directly, which eliminates a number of misleading (and possibly wrong) test cases

  • Escaped characters in a quoted string are now properly unescaped for the ->phrase method, which means things should round trip better from their decomposed form

• Updated perl-Net-CIDR to 0.18:

  • Leading 0s in IPv6 addresses are ok

• Updated perl-Test-Perl-Critic to 1.03 as per the Fedora version

Thursday 5th February 2015

Fedora Project

• Fixed FTBFS issue in perl-MouseX-Getopt in Rawhide, sending the resulting patch upstream

• Branched and built perl-Crypt-PasswdMD5 (1.3) for EPEL-6 (limited-arch support package for ppc64 - Bug #783740)

• Updated proftpd (1.3.5) in Rawhide:

  • Updated mod_vroot to 0.9.3

  • Anonymous upload directory specification needs to be slightly different if mod_vroot is in use (Bug #1045922, http://sourceforge.net/p/proftp/mailman/message/31728570/)

  • Use systemd rather than xinetd for inetd mode activation (Bug #737707); to use this mode, set "ServerType inetd" in /etc/proftpd.conf and do "systemctl enable proftpd.socket" (and "systemctl start proftpd.socket" to start listening for connections)

Local Packages

• Updated proftpd as per the Fedora version, though pre-systemd releases stick with xinetd

• Updated xz for F-22 to depend on grep that contains grepconf.sh (Bug #1189120)

Friday 6th February 2015

Fedora Project

• Updated GeoIP only to require geoipupdate prior to F-22, for back-compatibility; going forward there will be no dependency

• Updated geoipupdate in Rawhide to add a cron6 subpackage, equivalent to the old GeoIP-update6 package

Monday 9th February 2015

Fedora Project

• Branched and built perl-Sys-Hostname-Long (1.5) for EPEL-7

Local Packages

• Updated dovecot (2.2.15) to fix mbox istream crashes (Bug #1189198, Bug #1186504)

• Updated perl-File-chdir to 0.1010:

  • Updated distribution metadata and repo layout
  • Changed bugtracker to github

• Updated perl-Test-DistManifest to 1.013:

  • Tests are now made against a small sample dist, rather than ourselves, to avoid errors with newer ExtUtils::MakeMaker, as well as enable running in the raw git repository (CPAN RT#78760, CPAN RT#101287)

  • Many tooling and metadata updates

• Updated perl-XML-LibXML to 2.0118:

  • Add $Config{incpath} to the include paths on Win32 (CPAN RT#101944)

Tuesday 10th February 2015

Fedora Project

• Updated GeoIP (1.6.4) in Rawhide to sub-package the data; going forward, this would be better as a separate package, since it has separate upstream releases than the library

• Updated geoipupdate in Rawhide to include a new geoipupdate6 cron script written in Perl that doesn't download the data if it hasn't changed

• Updated glib (1.2.10) in Rawhide to work around different inline semantics between GNU89 and C99

• Updated ORBit (0.5.17) in Rawhide to build with -fno-strict-aliasing

• Updated proftpd in F-21 to fix proftpd.conf to support a working anonymous upload directory whilst mod_vroot is loaded (Bug #1045922) and to address a very strange issue with the mysql plugin (Bug #1190496)

Local Packages

• New package perl-PerlIO-gzip (0.18)

• Updated GeoIP as per the Fedora version

• Updated geoipupdate as per the Fedora version

• Updated glib as per the Fedora version

• Updated ORBit as per the Fedora version

Wednesday 11th February 2015

Fedora Project

• Updated perl-Spellunker to 0.4.0 in F-21 to fix FTBFS of perl-Test-LeakTrace 0.15 there:

  • Added more stopwords

  • Support &

  • Show correct test line number if all_pod_files_spelling_ok fails

  • Documentation fixes

  • Test "bin" and "script" directories if "blib" does not exist

  • Allow git sha1 hash

  • Fix overly-recursive regex

  • Added clear_stopwords method

• Updated perl-Text-CSV_XS to 1.15 in F-22 and Rawhide:

  • Remove perl recommendation from META as it breaks cpan clients

Local Packages

• Branched my development repository for Fedora 22, as per upstream Fedora

• Updated perl-Capture-Tiny to 0.28:

  • Remove test that optionally used Inline::C to avoid spurious test failures; also, Inline::C had become a fairly heavy (if optional) dependency

  • Clarify in docs that PERL_CAPTURE_TINY_TIMEOUT is an internal control, not a timeout of the code reference being captured

• Updated perl-DBD-CSV to 0.47:

  • Updated copyright to 2015
  • Make test-tablename unique for parallel testing

  • Remove perl recommendation from META as it breaks cpan clients

• Updated perl-Net-FTPSSL to 0.26:

  • The deprecated SSL_Advanced option now causes new() to call croak; all remaining references to it will be removed in v0.27 or v0.28

  • The POD text no longer mentions the SSL_Advanced option at all

  • Added to README the new environment variable created for the test scripts in the previous release

  • The RFC links in the SEE ALSO section had all expired

  • Enhanced _debug_print_hash() to work with regular hashes as well as just GLOBs, and also fixed to follow SCALAR references

  • Now dumps to the log file the contents of the SSL_Client_Certificate hash if provided; it was difficult to debug logic when it wasn't logged

  • Fixed CPAN RT#101388, reusing SSL_Client_Certificate options on the data channel; added additional options to go with SSL_reuse_ctx to resolve this issue

• Updated perl-Test-DistManifest to 1.014:

  • Fix tests that fail when ExtUtils::Manifest's version is not new enough for the build output during installation (CPAN RT#102017)

• Updated perl-Text-CSV_XS to 1.15 as per the Fedora version

Thursday 12th February 2015

Fedora Project

• Updated perl-Error to 0.17023 in F-22 and Rawhide:

  • Minimal version of Module-Build reduced to 0.280801 (CPAN RT#102062)

• Updated perl-IO-AIO to 4.32 in F-22 and Rawhide:

  • Replace off_t by STRLEN where appropriate; should not result in user-visible changes

  • Update ecb.h for C11 compatibility

Local Packages

• Updated perl-Coro to 6.42:

  • Coro::SemaphoreSet->try did not actually work

  • Upgrade libecb to be C11 compliant

• Updated perl-DBD-CSV to 0.48:

  • Update list of valid Text::CSV_XS attributes

• Updated perl-Error to 0.17023 as per the Fedora version

• Updated perl-IO-AIO to 4.32 as per the Fedora version

Friday 13th February 2015

Fedora Project

• Updated trac-accountmanager-plugin (0.4.4) in F-22 and Rawhide to include an enhancement from upstream to allow a question as alternative BotTrapCheck field description (which cut the spam account registrations on my local trac instance from about 50/day to 0 straight away), and to fix the test suite so that it works with trac 1.0.2

Local Packages

• Updated trac-accountmanager-plugin as per the Fedora version

Saturday 14th February 2015

Local Packages

• Updated perl-Params-Validate to 1.18:

  • We no longer attempt to save and restore an existing $SIG{__DIE__} hook before calling a validation callback; this used undocumented black magic poking at the Perl interpreter guts, which seems to cause sporadic segfaults (CPAN RT#102112)

Sunday 15th February 2015

Fedora Project

• Updated perl-List-MoreUtils to 0.405 in F-22 and Rawhide:

  • Fix CPAN RT#78527 - first_val/last_val in documentation

  • Fix CPAN RT#102055 - ExtUtils::MakeMaker required version absurdly high

  • Fix compiler issue for older/ansi-c89 compilers

  • Remove local compat workarounds in favour of ppport.h

Local Packages

• Updated perl-List-MoreUtils to 0.405 as per the Fedora version

• Updated perl-Module-CoreList to 5.20150214:

  • Updated for v5.20.2

Monday 16th February 2015

Fedora Project

• Updated perl-Config-Tiny to 2.21 in F-22 and Rawhide:

  • Patch Makefile.PL to refer to the current repo, which is on github, and not the original one, which is on Adam's web site (CPAN RT#102125)

  • Remove Build.PL (CPAN RT#102126)

  • Edit line lengths in the Changes file to a maximum of 100 characters

  • Edit line lengths in the docs the same way

  • Expand the SEE ALSO section of the docs

• Updated perl-ExtUtils-InstallPaths to 0.011 in F-22 and Rawhide:

  • Make EU::IP compatible with perl 5.6

  • Declare dependency on File::Spec 0.83 for case_sensitive

• Updated proftpd to 1.3.4e (last upstream maintenance release for the 1.3.4 series) in F-20, also fixing the configuration file to properly support the anonymous upload directory when mod_vroot is loaded (Bug #1045922):

  • Spurious log messages at session close (bug 3945)

  • LogFormat %f variable not resolved properly for SFTP renames (bug 3947)

  • mod_delay allows too-large values, leading to client hang on authentication (bug 3858)

  • Null pointer dereference for mod_ldap logins when LDAPDefaultAuthScheme not configured (bug 3951)

  • scp downloads result in segfault (bug 3954)

  • ProFTPD configuration with thousands of <Directory>/<Limit> sections leads to slow logins (bug 3957)

  • mod_sftp does not honour <Directory>/<Limit> sections when symlinks are involved (bug 3959)

  • Directory creation does not honour single-parameter Umask setting (bug 3958)

  • Directory creation fails (chmod(2) EPERM) when root privs are used in some cases (bug 3962)

  • Authentication error on Cygwin due to bad code (bug 3972)

  • mod_sftp can be forced to allocate too much memory for keyboard-interactive authentication (bug 3973, CVE-2013-4359)

  • PathDenyFilter directive does not work as expected for SFTP sessions (bug 3974)

  • Improve permission setting when creating directories (bug 3963)

  • Null pointer dereference in mod_exec with ExecOption useStdin (bug 3981)

  • Support filesystems that do not support chmod(2)/chown(2), e.g. FAT/ExFAT (bug 3986)

  • SSL session caching modules use incorrect OpenSSL cache mode flags, breaking session caching (bug 3991)

  • ProFTPD should not use fd 2 (stderr) for files (bug 3970)

  • RSA signature issue when connecting using PuTTY/WinSCP (bug 3992)

  • mod_sftp fails key exchange for 8192-bit DH group (bug 4001)

  • IgnoreSCPUploadPerms SFTPOption not honoured properly for SCP directory upload (bug 4004)

  • RADIUS "service-type" attribute encoded with wrong length on 64-bit system (bug 4006)

  • SCP upload of shorter file does not completely overwrite existing file of same name (bug 4013)

  • "Directory not empty" error when creating directory is misleading (bug 4022)

  • Restarting proftpd with mod_sftp fails due to permissions on SFTPHostKey file (bug 4032)

  • SSH publickey authentication fails with "MaxLoginAttempts 1" (bug 4034)

  • ALLO command failed because of bad size check (bug 4046)

  • Race condition in mod_ban can lead to segfault of all new connections (bug 4048)

  • MIC command between RNFR and RNTO should not be rejected (bug 4042)

  • mod_facl prevents a normal SIGHUP reload (bug 4044)

• Updated trac-spamfilter-plugin in F-22 and Rawhide to subversion revision 13735 from upstream (current)

Local Packages

• Updated perl-Config-Tiny to 2.21 as per the Fedora version

• Updated perl-ExtUtils-InstallPaths to 0.011 as per the Fedora version

Tuesday 17th February 2015

Fedora Project

• Updated perl-Config-Tiny to 2.22 in F-22 and Rawhide:

  • Fix licence info in Makefile.PL to say Perl (CPAN RT#102141)

Local Packages

• Updated perl-Config-Tiny to 2.22 as per the Fedora version

• Updated perl-Term-ReadLine-Gnu to fix regression with Debug::Client (Bug #1189459, CPAN RT#101078)

• Updated unrar to 5.21

Wednesday 18th February 2015

Local Packages

• Updated all moin theme packages to drop support for old distributions prior to FC-5 and to move static content from /usr/share/moin/htdocs/... to the python site library as wanted by moin ≥ 1.9.0, removing any old compat symlink with a lua %pretrans script:

• %global moin_static_content_dir %{python_sitelib}/MoinMoin/web/static/htdocs
  %pretrans -p <lua>
  -- Remove old compat symlink, if present
  path = "%{moin_static_content_dir}/theme-name"
  st = posix.stat(path)
  if st and st.type == "link" then
    os.remove(path)
  end

Thursday 19th February 2015

Fedora Project

• Updated pari to 2.7.3 in F-21, F-22 and Rawhide (see CHANGES for details)

Local Packages

• Updated ppp (2.4.7) to prevent running into issues caused by undefined behaviour (pointers of incompatible types aliasing the same object), i.e. use -fno-strict-aliasing

Friday 20th February 2015

Fedora Project

• Submitted a GeoIP-GeoLite-data package for review, an unbundling of the legacy GeoLite data from the GeoIP package

Local Packages

• New package GeoIP-GeoLite-data (2015.02), an unbundling of the legacy GeoLite data from the GeoIP package

• Updated GeoIP to remove the GeoLite data, which is now in its own package

• Updated libxml2 to include a python3 sub-package where possible

Sunday 22nd February 2015

Fedora Project

• Updated perl-B-Keywords to 1.14 in F-22 and Rawhide:

  • Removed err from Barewords (CPAN RT#102259)

Local Packages

• Updated perl-B-Keywords to 1.14 as per the Fedora version

• Rebuilt curl, libgcrypt, libidn, libxml2 and libxslt for the Fedora 23 Change Changes/Harden_all_packages_with_position-independent_code

Monday 23rd February 2015

Fedora Project

• Updated perl-BerkeleyDB to 0.55 in F-22 and Rawhide:

  • Error opening ErrFile with PerlIO_findFILE (CPAN RT#101883)

  • Minor updates for BDB 6.1

• Updated perl-CPAN-Meta-Requirements to 2.133 in F-22 and Rawhide:

  • In fixing preservation of "0.00", some Module => 0 optimizations were lost; this restores those optimizations

• Updated perl-Test-LeakTrace to 0.15 in F-21, resolving FTBFS on PPC

Local Packages

• Updated perl-BerkeleyDB to 0.55 as per the Fedora version

• Updated perl-CPAN-Meta-Requirements to 2.133 as per the Fedora version

• Updated perl-Module-CoreList to 5.20150220:

  • Updated for v5.21.9

Tuesday 24th February 2015

Local Packages

• Updated curl to fix a spurious connect failure on dual-stacked hosts (Bug #1187531)

• Updated perl-Pod-Simple to 3.30:

  • Tightened up the first pass at recognizing a Pod command so that fewer invalid Pod lines will be recognized

  • Fixed bug where Pod::Simple would attempt to call utf8::unicode_to_native on Perl 5.6, where that function does not exist

  • Typos and minor wordsmithing changes in Pod::Simple::Subclassing

  • The Pod::Simple::Search survey() and find() methods now use the same code for determining @INC directories to search; the only difference is that find() also includes $Config::Config{'scriptdir'}

  • Removed "Caveats" from the docs: Pod::Simple has been out of beta for years

  • The survey() method in Pod::Simple::Search no longer assumes that files ending in '.pod' are actually Pod; like .pm and .pl files, .pod files must contain at least one valid POD command, as documented, which brings the behaviour in line with find(), which already required that .pod files contain Pod

  • The survey() method in Pod::Simple::Search now ignores duplicate files with varying lettercasing on case-insensitive file systems

  • When pondering files in a given directory, the survey() method in Pod::Simple::Search now prefers files with extensions in the following order: no extension, .pod, .pm, .plx, .pl

  • The find() method in Pod::Simple::Search now records the './pod' subdirectory of each directory it considers in such a way as to preserve its case on the filesystem

  • The find() method in Pod::Simple::Search now tries harder to find the proper file on case-insensitive file systems when searching for modules starting with "Pod", e.g. when searching for 'Pod::Perldoc', it now returns a file ending in 'Pod/Perldoc.pm' instead of 'Pod/perldoc.pod', as the latter is actually the documentation for the 'perldoc' program

Wednesday 25th February 2015

Fedora Project

• Updated perl-Finance-Quote in F-20, F-21, F-22, Rawhide, EPEL-6 and EPEL-7 to fix some UK fund sources:

  • Fix GBX pricing in FTfunds (CPAN RT#99783)

  • Fix MStaruk quote retrieval (CPAN RT#99784)

• Updated perl-Module-Metadata to 1.000025 in F-20 and F-21, and perl-Test-Version to 1.004001 in F-20; these updates fix an FTBFS issue in perl-Params-Validate for F-20

• Updated perl-UNIVERSAL-require to 0.18 in F-22 and Rawhide:

  • Skip the taint test if Perl was compiled without taint support

  • Changed use of "use vars" to "our"

  • Added strict and warnings to PREREQ_PM

• Updated perl-URI to 1.67 in F-22 and Rawhide:

  • Reorganize .pm files under lib/ (GH#20)

• Updated smbldap-tools in F-20, F-21, F-22, Rawhide and EPEL-7 to fix smbldap-usermod -u (Bug #1138608)

• Updated spamass-milter in F-20, F-21, F-22, Rawhide and EPEL-7 to add a new '-R' option to specify the SMTP rejection text (Bug #1131667)

Local Packages

• Updated curl to 7.41.0:

  • NetWare build: added TLS-SRP enabled build

  • winbuild: Added option to build with c-ares

  • Added --cert-status

  • Added CURLOPT_SSL_VERIFYSTATUS

  • sasl: Implement EXTERNAL authentication mechanism

  • sasl_gssapi: Fixed build on NetBSD with built-in GSS-API

  • FTP: Fix IPv6 host using link-local address

  • FTP: If EPSV fails on IPv6 connections, bail out

  • gssapi: Remove need for duplicated GSS_C_NT_HOSTBASED_SERVICE definitions

  • NSS: Fix compiler error when built http2-enabled

  • mingw build: allow to pass custom CFLAGS

  • Add -m64 CFLAGS when targeting mingw64, add -m32/-m64 to LDFLAGS

  • curl_schannel.c: Mark session as removed from cache if not freed

  • Curl_pretransfer: Reset expected transfer sizes

  • curl.h: Remove extra space

  • curl_endian: Fixed build when 64-bit integers are not supported

  • checksrc.bat: Better detection of Perl installation

  • build-openssl.bat: Added check for Perl installation

  • http_negotiate: Return CURLcode in Curl_input_negotiate() instead of int

  • http_negotiate: Added empty decoded challenge message info text

  • vtls: Removed unimplemented overrides of curlssl_close_all()

  • sasl_gssapi: Fixed memory leak with local SPN variable

  • http_negotiate: Use dynamic buffer for SPN generation

  • ldap: Renamed the CURL_LDAP_WIN definition to USE_WIN32_LDAP

  • openssl: Do public key pinning check independently

  • timeval: Typecast for better type (on Amiga)

  • ipv6: Enclose AF_INET6 uses with proper #ifdefs for ipv6

  • SASL: Common URL option and auth capabilities decoders for all protocols
  • BoringSSL: Fix build

  • BoringSSL: Detected by configure, switches off NTLM

  • openvms: Handle openssl/0.8.9zb version parsing

  • configure: Detect libresssl

  • configure: Remove detection of the old yassl emulation API

  • curl_setup: Disable SMB/CIFS support when HTTP only

  • imap: Remove automatic password setting: it breaks external sasl authentication

  • sasl: Remove XOAUTH2 from default enabled authentication mechanism

  • runtests: Identify BoringSSL and libressl

  • Security: Avoid compiler warning

  • ldap: Build with BoringSSL

  • des: Added Curl_des_set_odd_parity()

  • CURLOPT_SEEKFUNCTION.3: also when server closes a connection

  • CURLOPT_HTTP_VERSION.3: CURL_HTTP_VERSION_2_0 added in 7.33.0

  • build: Removed unused Visual Studio bscmake settings

  • build: Enabled DEBUGBUILD in Visual Studio debug builds

  • build: Renamed top level Visual Studio solution files

  • build: Removed Visual Studio SuppressStartupBanner directive for VC8+

  • libcurl-symbols: First basic shot for auto-generated docs

  • Makefile.am: fix 'make distcheck'

  • getpass_r: Read from stdin, not stdout!

  • getpass: Protect include with proper #ifdef

  • opts: CURLOPT_CAINFO availability depends on SSL engine

  • More clean-up of 'CURLcode result' return code

  • MD4: Replace implementation
  • MD5: Replace implementation

  • openssl: SSL_SESSION->ssl_version no longer exists

  • md5: use axTLS's own MD5 functions when available

  • schannel: Removed curl_ prefix from source files

  • curl.1: Add warning when using -H and redirects

  • curl.1: Clarify that -X is used for all requests

  • gskit: Fix exclusive SSLv3 option

  • polarssl: Fix exclusive SSL protocol version options

  • http2: Fix bug that associated stream cancelled on PUSH_PROMISE

  • ftp: Accept all 2xx responses to the PORT command

  • configure: Allow both --with-ca-bundle and --with-ca-path

  • cmake: Install the dll file to the correct directory

  • nss: Fix NPN/ALPN protocol negotiation

  • polarssl: Fix ALPN protocol negotiation

  • cmake: Fix generation of tool_hugehelp.c on windows

  • cmake: Fix winsock2 detection on Windows

  • gnutls: Fix build with HTTP2

  • connect: Fix a spurious connect failure on dual-stacked hosts

  • Test: Test 530 is now less timing dependent

  • telnet: Invalid use of custom read function if not set

• Updated libgcrypt (1.6.2) not to initialize secure memory during the self-test (Bug #1195850)

• Updated perl-Pod-Spell to 1.16:

  • podspell script: set output encoding from locale CTYPE

• Updated perl-UNIVERSAL-require to 0.18 as per the Fedora version

• Updated smbldap-tools as per the Fedora version

• Updated spamass-milter as per the Fedora version

Thursday 26th February 2015

Fedora Project

• Updated perl-strictures to 2.000000 in F-22 and Rawhide:

• Incompatible Change:

  • strictures 2 fatalizes only a subset of warnings; some warning categories are not safe to catch, or just inappropriate to have fatal

  • Existing code looking like 'use strictures 1;' will continue to get the old behaviour of fatalizing all errors; the new behaviour will take effect when no version or version 2 is specified

• Updated spamass-milter to 0.4.0 in F-20, F-21, F-22, Rawhide and EPEL-7:

  • New options:

    • -C option to change the default reject code

    • -S option to specify a path to sendmail (for the -x option)

    • -R option to specify the rejection message

    • -a option to skip messages that were authenticated

  • IPv6 address support
  • Syntax clean-ups

Local Packages

• Updated getmail to 4.47.0:

  • Try to work around pathological breakage in one random POP server implementation

  • Remove dead marc.theaimsgroup.com list archive from docs

  • Bugfix: if you combined IMAP IDLE mode with delete_after, getmail would, after remaining connected to the server for the number of days configured, begin deleting messages immediately after retrieval instead of after the configured delay

• Updated perl-Role-Tiny to 2.000000:

• Incompatible Change:

  • Role::Tiny no longer applies fatal warnings to roles created with it; strict and non-fatal warnings will continue to be applied

• Updated perl-strictures to 2.000000 as per the Fedora version

• Updated spamass-milter to 0.4.0 as per the Fedora version

Friday 27th February 2015

Fedora Project

• Updated libpng10 to 1.0.63 in F-20, F-21, F-22, Rawhide and EPEL-6:

  • Issue a png_error() instead of a png_warning() when width is potentially too large for the architecture, in case the calling application has overridden the default 1,000,000-column limit (fixes CVE-2014-9495 and CVE-2015-0973)

  • Quieted some harmless warnings from Coverity-scan

  • Display user limits in the output from pngtest (not packaged)

  • Changed PNG_USER_CHUNK_MALLOC_MAX from unlimited to 8,000,000; it only affects the maximum memory that can be allocated to an ancillary chunk, and does not limit the size of IDAT data, which is instead limited by PNG_USER_WIDTH_MAX

  • Rebuilt configure scripts with automake-1.15 and libtool-2.4.6

• Rebuilt perl-Compress-Raw-Lzma for xz-5.2.1 in Rawhide

Local Packages

• Updated libpng10 to 1.0.63 as per the Fedora version

• Rebuilt perl-Compress-Raw-Lzma for xz-5.2.1

• Updated perl-Net-DNS to 0.83:

  • Fix CPAN RT#101798: AUTOLOAD error confusing w/o reference to object class

  • Fix CPAN RT#101709: Provide separate control of IPv6 tests

  • Fix CPAN RT#101675: MX record with 0 preference fails to parse

  • Fix CPAN RT#101405: Install tests fail for v0.81 on Perl 5.21.7

• Rebuilt sendmail (8.15.1) to keep in sync with Rawhide

• Updated xz to 5.2.1 in F-22 and Rawhide:

  • Fixed a compression-ratio regression in fast mode of LZMA1 and LZMA2; the bug is present in 5.1.4beta and 5.2.0 releases

  • Fixed a portability problem in xz that affected at least OpenBSD

  • Fixed xzdiff to be compatible with FreeBSD's mktemp, which differs from most other mktemp implementations

  • Changed CPU core count detection to use cpuset_getaffinity() on FreeBSD

Saturday 28th February 2015

Fedora Project

• Updated perl-Perl-Critic to 1.124 in F-22 and Rawhide:

  • The ProhibitUnusedPrivateSubroutines policy can now ignore files that use particular modules with the 'skip_when_using' option, which allows, for example, skipping the policy for roles

  • The RequireUseStrict and RequireUseWarnings policies now regard Moose, Moo, Mouse, Dancer, Mojolicious, and several other modules as equivalent to the strict and warnings pragma

  • The RequireChecked* family of policies has been fixed to accommodate version numbers when use-ing the autodie pragma (GH #612)

Local Packages

• Updated perl-Perl-Critic to 1.124 as per the Fedora version