Paul's Blog Entries for June 2015

Saturday 6th June 2015

Fedora Project

  • Updated perl-namespace-autoclean to 0.25 in Rawhide:

    • Load Moo::Role earlier in a test, to make a potential misconfiguration more visible

Local Packages

  • Updated curl (7.42.1) such that curl-config --libs now works on x86_64 without libcurl-devel.x86_64 (Bug #1228363)

  • Updated perl-Mouse (2.4.2) to disable use of Data::Dump::Streamer with Perl 5.22

  • Updated perl-namespace-autoclean to 0.25 as per the Fedora version

Sunday 7th June 2015

Fedora Project

  • Updated perl-IO-Socket-SSL to 2.016 in Rawhide:

    • Add flag X509_V_FLAG_TRUSTED_FIRST by default if available in OpenSSL (since 1.02) and available with Net::SSLeay (CPAN RT#104759)

    • Work around hanging prompt() with older perl in Makefile.PL (CPAN RT#104731)

    • Make t/memleak_bad_handshake.t work on cygwin and other systems having /proc/pid/statm (CPAN RT#104659)

    • Add better debugging
  • Updated perl-namespace-autoclean to 0.26 in Rawhide:

    • Mark all Mouse tests as TODO below perl 5.010, to enable installation despite apparent instability issues (see CPAN RT#101825)

  • Updated perl-Net-SSLeay to 1.69 in Rawhide:

    • Testing with OpenSSL 1.0.2, 1.0.2a OK
    • Completed LibreSSL compatibility
    • Improved compatibility with OpenSSL 1.0.2a
    • Added the X509_check_* functions introduced in OpenSSL 1.0.2

    • Added support for X509_V_FLAG_TRUSTED_FIRST constant

    • Allow get_keyblock_size to work correctly with OpenSSL 1.0.1 onwards

  • Updated perl-Test-Class to 0.50 in Rawhide:

    • Add links to Ovid's tutorial series on Test::Class (PR#19)

    • Add links to Test::Class::Most, Test::Class::Moose (PR#20)

    • List some distributions that use Test::Class in their test suite (PR#21)

    • Update documentation about running individual tests (PR#22)

    • Fix some tests to work with the new Test::Stream (PR#27)

    • Switch packaging to ExtUtils::MakeMaker

Local Packages

  • Updated perl-IO-Socket-SSL to 2.016 as per the Fedora version

  • Updated perl-Moose to 2.1405:

    • The native 'Array' trait 'sort' accessor now returns the number of elements in scalar context, instead of the undefined value (or a different, seemingly-random, value under 5.23.x)

  • Updated perl-namespace-autoclean to 0.26 as per the Fedora version

  • Updated perl-Net-SSLeay to 1.69 as per the Fedora version

Saturday 13th June 2015

Fedora Project

  • Updated perl-JSON-MaybeXS to 1.003005 in F-20 and F-21, needed for perl-CHI (Bug #1230120)

  • Updated perl-CPAN-Meta to 2.150005 in Rawhide:

    • Metadata merging now does deep hash merging as long as keys don't conflict
    • Serialized CPAN::Meta objects now include a x_serialization_backend entry

    • Declared extra developer prereq
    • Added test for 'x_deprecated' field in "provides"

    • Noted explicitly that historical META spec files are licensed under the same terms as Perl
    • Changed some test data from UTF-8 to ASCII
  • Updated perl-Devel-Symdump to 2.15 in Rawhide:

    • In the tests, always check for exists before checking for definedness
  • Updated perl-List-MoreUtils to 0.413 in Rawhide:

    • Fix compiling in c++ mode (deprecated, but some people seem to require it) (CPAN RT#104690)

Local Packages

  • Updated perl-CPAN-Meta to 2.150005 as per the Fedora version

  • Updated perl-Data-Dump to 1.23:

    • Avoid "Negative repeat count does nothing" warnings from perl-5.22

    • Typo fixes by David Steinbrunner
  • Updated perl-Devel-Symdump to 2.15 as per the Fedora version

  • Updated perl-List-MoreUtils to 0.413 as per the Fedora version

  • Updated perl-Test-Exception to 0.40:

    • Updated for changes in Test::Stream (use Test::Stream::Sync)

Sunday 14th June 2015

Fedora Project

  • Updated GeoIP-GeoLite-data to the June 2015 databases in Rawhide

  • Updated libssh2 to 1.6.0 in Rawhide:

    • Added CMake build system
    • Added libssh2_userauth_publickey_frommemory()

    • wait_socket: Wrong use of difftime()

    • userauth: Fixed prompt text no longer being copied to the prompt's struct

    • MinGW build: Allow to pass custom CFLAGS

    • Let work regardless of where it is called from

    • Init HMAC_CTX before using it

    • direct_tcpip: Fixed channel write

    • WinCNG: Fixed backend breakage
    • OpenSSL: Fix bug caused by introducing libssh2_hmac_ctx_init

    • userauth.c: Fix possible dereferences of a null pointer

    • WinCNG: Added explicit clear memory feature to WinCNG backend
    • openssl.c: Fix possible segfault in case EVP_DigestInit fails

    • WinCNG: Fix return code of libssh2_md5_init()

    • kex: Do not ignore failure of libssh2_sha1_init()

    • scp: Fix that scp_send may transmit uninitialized memory

    • scp.c: Improved command length calculation

    • Non-blocking examples: Fix warning about unused tvdiff on Mac OS X

    • configure: Make clear-memory default but warn if backend unsupported

    • OpenSSL: Enable use of OpenSSL that doesn't have DSA

    • OpenSSL: Use correct no-blowfish #define

    • kex: Fix libgcrypt memory leaks of bignum

    • libssh2_channel_open: More detailed error message

    • WinCNG: Fixed memleak in (block) cipher destructor
  • Updated perl-Parse-CPAN-Meta to 1.4417 in Rawhide:

Local Packages

  • Updated GeoIP-GeoLite-data as per the Fedora version

  • Updated libssh2 to 1.6.0 as per the Fedora version

  • Updated perl-Module-Build to 0.4214:

    • Handle failure to guess license from key better
    • Output data in a stable order
  • Updated perl-Parse-CPAN-Meta to 1.4417 as per the Fedora version

Monday 15th June 2015

Fedora Project

  • Updated perl-File-Which (1.18) in Rawhide to remove redundant build dependencies that resulted in the package needing bootstrapping

Wednesday 17th June 2015

Fedora Project

  • Updated perl-DBM-Deep to 2.0012 in Rawhide:

    • Improved transaction validation and warnings (GH#12)

  • Updated perl-Text-CSV_XS to 1.19 in Rawhide:

    • Guard tests against $PERL_UNICODE

    • Numeric options were sometimes interpreted as boolean
    • Safer meta_info use

Local Packages

  • Updated curl to 7.43.0:

    • CVE-2015-3236: Lingering HTTP credentials in connection re-use

    • CVE-2015-3237: SMB send off unrelated memory contents



    • New curl option: --proxy-service-name

    • New curl option: --service-name

    • New curl option: --data-raw


    • Added support for multiplexing transfers using HTTP/2, and enable this with the new CURLPIPE_MULTIPLEX bit for CURLMOPT_PIPELINING

    • HTTP/2: Requires nghttp2 1.0.0 or later

    • scripts: Add for generating zsh completion

    • curl.h: Add CURL_HTTP_VERSION_2

    • nss: Fix compilation failure with old versions of NSS

    • curl_easy_getinfo.3: Document 'internals' in CURLINFO_TLS_SESSION

    • schannel.c: Fix possible SEC_E_BUFFER_TOO_SMALL error

    • Curl_ossl_init: Load built-in modules

    • configure: Follow-up fix for krb5-config

    • sasl_sspi: Populate domain from the realm in the challenge

    • netrc: Support 'default' token

    • README: Convert to UTF-8

    • cyassl: Implement public key pinning

    • nss: Implement public key pinning for NSS backend

    • MinGW build: Add arch -m32/-m64 to LDFLAGS

    • schannel: Fix out of bounds array

    • configure: Remove autogenerated files by autoconf

    • configure: Remove --automake from libtoolize call

    • acinclude.m4: Fix shell test for default CA cert bundle/path

    • schannel: Fix regression in schannel_recv

    • openssl: Skip trace outputs for ssl_ver == 0

    • gnutls: Properly retrieve certificate status

    • netrc: Read in text mode when cygwin

    • winbuild: Document the option used to statically link the CRT

    • FTP: Make EPSV use the control IP address rather than the original host

    • FTP: fIx dangling conn->ip_addr dereference on verbose EPSV

    • conncache: Keep bundles on host+port bases, not only host names

    • Use 'h2c' now, no -14 any more

    • curlver: Introducing new version number (checking) macros

    • openssl: boringssl build breakage, use SSL_CTX_set_msg_callback

    • CURLOPT_POSTFIELDS.3: Correct variable names

    • curl_easy_unescape.3: Update RFC reference

    • gnutls: Don't fail on non-fatal alerts during handshake

    • Allow source to be in an arbitrary directory

    • CURLOPT_HTTPPROXYTUNNEL.3: Only works with a HTTP proxy

    • SSPI-error: Change SEC_E_ILLEGAL_MESSAGE description

    • parse_proxy: Switch off tunnelling if non-HTTP proxy

    • share_init: Fix OOM crash

    • perl: Remove subdir, not touched in 9 years

    • CURLOPT_COOKIELIST.3: Add example

    • CURLOPT_COOKIE.3: Explain that the cookies won't be modified

    • CURLOPT_COOKIELIST.3: Explain Set-Cookie without a domain

    • FAQ: How do I port libcurl to my OS?

    • openssl: Use TLS_client_method for OpenSSL 1.1.0+

    • HTTP-NTLM: Fail auth on connection close instead of looping
    • curl_setup: Add macros for FOPEN_READTEXT, FOPEN_WRITETEXT

    • curl_getdate.3: Update RFC reference

    • curl_multi_info_read.3: Added example

    • curl_multi_perform.3: Added example

    • curl_multi_timeout.3: Added example

    • cookie: Stop exporting any-domain cookies

    • openssl: Remove dummy callback use from SSL_CTX_set_verify()

    • openssl: Remove SSL_get_session()-using code

    • openssl: Removed USERDATA_IN_PWD_CALLBACK kludge

    • openssl: Removed error string #ifdef

    • openssl: Fix verification of server-sent legacy intermediates

    • docs: man page indentation and syntax fixes
    • docs: Spelling fixes
    • fopen.c: Fix a few compiler warnings

    • CURLOPT_OPENSOCKETFUNCTION: Return error at once

    • schannel: Add support for optional client certificates

    • build: Properly detect OpenSSL 1.0.2 when using configure

    • urldata: Store POST size in state.infilesize too

    • security: choose_mech: Remove dead code

    • rtsp_do: Remove dead code

    • docs: Many HTTP URIs changed to HTTPS
    • schannel: schannel_recv overhaul

  • Updated perl-DBM-Deep to 2.0012 as per the Fedora version

  • Updated perl-Module-CoreList to 5.20150520:

    • Updated for v5.22.0
  • Updated perl-Text-CSV_XS to 1.19 as per the Fedora version

  • Rebuilt bluefish, GeoIP, GeoIP-GeoLite-data, geoipupdate, gtkwave and Judy for the Fedora_23_Mass_Rebuild

Thursday 18th June 2015

Fedora Project

  • Updated gnome-libs (1.4.2) in Rawhide to fix FTBFS with libjpeg-turbo ≥ 1.3.90

Local Packages

  • Updated gnome-libs as per the Fedora version

  • Updated perl-Archive-Zip to 1.47:

    • Zip file with a deflated directory could not be written out again
    • Add missing test data to MANIFEST

  • Rebuilt libpng10, libssh2 and mod_fcgid for the Fedora_23_Mass_Rebuild

Friday 19th June 2015

Fedora Project

  • Updated perl-CPAN-Meta-Check to 0.012 in Rawhide:

    • Drop dependency on Exporter 5.57

Local Packages

  • Updated dovecot (2.2.18) to fix build for s390x and ppc64 (Bug #1232650)

  • Updated perl-Archive-Zip to 1.48:

    • Wrap skip in a SKIP: block

  • Updated perl-CPAN-Meta-Check to 0.012 as per the Fedora version

  • Rebuilt check, nmap, proftpd, rbldnsd, smbldap-tools, spamass-milter for the Fedora_23_Mass_Rebuild

  • I had to change nmap to always use the bundled liblua for the time being, as lua 5.3 in F-22 onwards is incompatible with nmap

Saturday 20th June 2015

Fedora Project

  • Updated pari to 2.7.4 (cumulative bugfix update) in F-21, F-22 and Rawhide

  • Updated perl-Apache-Session-Browseable to 1.1 in Rawhide

  • Updated perl-Apache-Session-LDAP to 0.4 in Rawhide

Local Packages

  • Rebuilt libgcrypt, libgpg-error, libidn, libmetalink, libspf2, sendmail and xz for the Fedora_23_Mass_Rebuild

Sunday 21st June 2015

Fedora Project

  • Updated perl-Test-Deep to 0.116 in Rawhide:

    • On its own, :preload options uses default group of exports

Local Packages

  • New package perl-Canary-Stability (2001)

  • Updated perl-EV to 4.20:

    • Added stability canary support
    • Truly rely on automatic configuration for clock_gettime and others; unfortunately, this doesn't help with activeperl and similar perls, which define _POSIX_TIMERS without actually implementing any of it

    • (libev, ecb) Make it compile as C++ again

    • (libev) Fix a potential aliasing issue when accessing watcher callbacks

  • Updated perl-Module-CoreList to 5.20150620:

    • Updated for v5.23.0
  • Updated perl-Module-Info to fix the bundled B::Utils to build with Perl 5.22

  • Updated perl-Test-Deep to 0.116 as per the Fedora version

  • Rebuilt c-ares, libnet, libxml2 and libxslt for the Fedora_23_Mass_Rebuild

Monday 22nd June 2015

Fedora Project

  • Updated perl-CPAN-Changes to 0.400002 in Rawhide:

    • Revert whitespace changes that were inadvertently included in the previous release
    • Escape curly brackets in test to avoid warning in perl 5.22
  • Updated perl-Test-Deep to 0.117 in Rawhide:

  • Updated perl-Tree-DAG_Node (1.26) in Rawhide to specify all dependencies (Bug #1234366)

Local Packages

  • Updated perl-autodie to 2.28:

    • Deprecate the use of "Fatal qw(:lexical)"; it is an implementation detail of autodie and is about to change

    • Use octal numbers in error messages for CORE subroutines taking a "mode" parameter, e.g. mkdir and chmod (GH#65, GH#66)

    • Allow wrappers for CORE::exec and CORE::system to be reused as they are not dependent on the calling package

    • Avoid hard-coded directory separator in t/system.t (GH#62)

    • Add missing "require autodie" in import-into test and ensure Import::Into remains an optional test dependency

    • Travis: set "sudo: false" to gain access to the Travis container based infrastructure

    • Bump version of Import::Into to 1.002004 as older versions are insufficient for our test (CPAN RT#101377)

    • Properly skip the Import::Into test if the version of Import::Into is insufficient (GH#67)

  • Updated perl-CPAN-Changes to 0.400002 as per the Fedora version

  • Updated perl-DBD-SQLite to 1.48:

  • Changes That May Possibly Break Your Old Applications

    • Commented OPTIMIZE out of WriteMakefile (CPAN RT#94207); if your perl is not compiled with -O2, your DBD::SQLite may possibly behave differently under some circumstances

  • Other Changes

    • Updated to SQLite 3.8.10 (CPAN RT#35449)

    • Added DBD::SQLite::Constants, from which you can import any "useful" constants into your applications

    • Added :all to EXPORT_TAGS in ::Constants

    • Used MY_CXT instead of a global variable

  • I now need to use the bundled SQLite unless the system version is at least, as it fails to build with older Fedora system versions

  • Updated perl-Net-SMTP-SSL to 1.03:

    • $net_smtp_ssl->isa('Net::SMTP') is now true

  • Updated perl-Test-Deep to 0.117 as per the Fedora version

  • Updated perl-Test-Prereq (1.038) to incorporate changes from upstream development release 1.038_05, add a workaround for FTBFS in Perl 5.22 (CPAN RT#105398), and add another workaround for Module::CoreList issues with Perl 5.8

  • Updated perl-Tree-DAG_Node as per the Fedora version

Tuesday 23rd June 2015

Local Packages

  • Updated perl-DateTime-TimeZone to 1.92:

    • This release is based on version 2015e of the Olson database
    • Contemporary changes for Morocco and Cayman Islands
    • This distro now depends on DateTime::TimeZone::Local::Win32 when it is being installed on a Windows OS (CPAN RT#103275)

  • Updated perl-HTTP-SimpleLinkChecker to use links that actually work for the test suite

  • Updated perl-Test-File to 1.43:

    • Fix problem with META* specifying requirements (CPAN RT#105210)

    • Don't install README.pod

  • Updated perl-Test-Harness for Fedora 14 and 15 to include App::CPAN as per the Fedora versions, as it's not in perl-CPAN there (Bug #854577)

  • Updated perl-Test-Mojibake to disable use of Test::Vars with Perl 5.22 (

  • Updated perl-Test-Version to disable use of Test::Vars with Perl 5.22 (

  • Rebuilt tidy for the Fedora_23_Mass_Rebuild

Wednesday 24th June 2015

Fedora Project

  • Updated perl-Sysadm-Install to 0.46 in Rawhide:

    • ask() and pick() now support getting the user's response on the tty, instead of stdin, so they can be used from within a pipe

Local Packages

  • Updated perl-Exporter-Declare to 0.114:

    • Add methods for getting lists of meta items
    • Documentation updates
  • Updated php-Smarty to 3.1.27 (mainly bug fixes and optimizations)

  • Rebuilt pptp for the Fedora_23_Mass_Rebuild

Friday 26th June 2015

Fedora Project

  • Updated perl-Class-Load to 0.23 in Rawhide:

    • Remove use of namespace::clean

  • Updated perl-MIME-Types to 2.11 in Rawhide:

  • Updated perl-Net-SSLeay to 1.70 in Rawhide:

    • The new OpenSSL 1.0.2 X509_check_* functions are not available in current LibreSSL, so disable them in SSLeay.xs

    • Fixed a problem with building against OSX homebrew's openssl

    • Removed a test in t/local/33_x509_create_cert.t that fails due to changes in 1.0.1n and later

  • Updated perl-URI to 1.68 in Rawhide:

    • Sort hash keys to make generated query predictable
    • Add new tests for path segments
    • Add sftp scheme

Local Packages

  • Updated perl-Class-Load to 0.23 as per the Fedora version

  • Updated perl-MIME-Types to 2.11 as per the Fedora version

  • Updated perl-Net-SSLeay to 1.70 as per the Fedora version

  • Updated perl-Params-Validate to 1.19:

    • Fixed an uninitialized value warning from the pure Perl implementation under 5.8.8 (CPAN RT#105198)

  • Updated perl-Software-License-CCpack to disable use of Test::Vars with Perl 5.22 (

Saturday 27th June 2015

Local Packages

  • Updated libidn (1.30) to merge emacs-libidn with main package (Bug #1234563)

  • Updated perl-Coro to 6.43:

    • Use stability canary
    • Port to stableperl-5.22.0-1.001

    • Update libecb

  • Updated perl-Pod-Spell (1.17) to disable use of Test::Vars with Perl 5.22 (

Sunday 28th June 2015

Local Packages

  • Updated perl-Canary-Stability to 2006:

    • The year when things were in good shape still
    • The compatibility version test for 5.22 was wrong and erroneously took 5.20.1+ as unsupported
    • Fix URLs
  • Updated perl-Pod-Wordlist-hanekomu (1.132680) to disable use of Test::Vars with Perl 5.22 (

Monday 29th June 2015

Fedora Project

  • Updated perl-common-sense to 3.7.4 in Rawhide:

    • The generated README file was empty

  • Updated perl-Path-Tiny to 0.070 in Rawhide:

    • The 'copy' method now returns the object for the copied file

    • The 'visit' method only dereferences the callback return value for scalar refs, avoiding some common bugs

  • Updated perl-strictures to 2.000001 in Rawhide:

    • Update for perl 5.22 warning categories
    • Avoid using goto &UNIVERSAL::VERSION on perl 5.8, since it segfaults some builds

    • Also detect development directories based on .bzr directory

    • Various test clean-ups
  • Updated perl-Test-Version to 2.03 in Rawhide:

    • Added 'multiple' option to check each version inside a .pm file with multiple packages

    • Remove annoying warnings when version_ok called by itself (GH#5)

Local Packages

  • Updated perl-common-sense to 3.7.4 as per the Fedora version

  • Updated perl-DateTime-Format-Strptime (1.56) to get rid of tabs in the code, which somehow hadn't been spotted by the Test::NoTabs release test earlier

  • Updated perl-Params-Validate to 1.20:

    • Fixed a bug with stack handling in the XS code (GH#5)

    • Fixed use of inlining in the XS code to work when "gcc -std=c89" is specified (GH#6)

    • Previously, Params::Validate would eagerly stringify all values it was validating, even though this stringification was only needed for error messages that are used when a parameter fails; for objects that overload stringification and do real work, this added an unnecessary slowdown, so stringification is now delayed until it is needed (CPAN RT#105326)

  • Updated perl-Path-Tiny to 0.070 as per the Fedora version

  • Updated perl-strictures to 2.000001 as per the Fedora version

  • Updated perl-Test-Synopsis (0.11) to disable use of Test::Vars with Perl 5.22 (

  • Updated perl-Test-Version to 2.03 as per the Fedora version

Tuesday 30th June 2015

Fedora Project

  • Updated perl-Child to 0.012 in Rawhide:

    • Switch to Dist::Zilla

    • Switch to new Changes Layout

    • Fix destructor bug (#12)

  • Updated perl-Devel-CheckCompiler to 0.06 in Rawhide:

    • More strict C99 check code
    • Fix for older GCC(< 5.0)

  • Updated perl-Module-Build-XSUtil to 0.16 in Rawhide:

    • Fix regexp of _gcc_version for Ubuntu and Debian

    • Set -std=c99 explicitly for older GCC

Local Packages

  • Updated perl-Child to 0.012 as per the Fedora version

  • Updated perl-Coro to 6.46:

    • Avoid segfaulting (or worse) when tracing a cancelled thread
    • The Event module silently broke its public hook API, causing failures on perls compiled with -Duselongdouble; now requiring the latest version of Event because I don't know which release changed this (it's not mentioned in the ChangeLog)

    • Allow xs level enter/leave hooks via CoroAPI

  • Updated perl-Data-Visitor (0.30) not to pull in Data::Alias for the test suite in Perl 5.22+ as it's broken there (CPAN RT#100944)

  • Updated perl-DateTime-Format-Builder (0.81) to avoid the Test::NoTabs release test as the code is full of tabs (how did it ever pass?)

  • Updated perl-Devel-CheckCompiler to 0.06 as per the Fedora version

  • Updated perl-Exception-Base (0.25) to fix the test suite failure for Perl 5.21.2 and higher

  • Updated perl-Module-Build-XSUtil to 0.16 as per the Fedora version

  • Updated perl-Mouse (2.4.2) to fix interaction with threads in Perl 5.22 (Bug #1235938)

  • Updated perl-Pod-Coverage-Moose (0.05) to disable use of Test::Vars with Perl 5.22 (

Previous Month: May 2015
Next Month: July 2015