Paul's Blog Entries for June 2015

Saturday 6th June 2015

Fedora Project

• Updated perl-namespace-autoclean to 0.25 in Rawhide:

  • Load Moo::Role earlier in a test, to make a potential misconfiguration more visible

Local Packages

• Updated curl (7.42.1) such that curl-config --libs now works on x86_64 without libcurl-devel.x86_64 (Bug #1228363)

• Updated perl-Mouse (2.4.2) to disable use of Data::Dump::Streamer with Perl 5.22

• Updated perl-namespace-autoclean to 0.25 as per the Fedora version

Sunday 7th June 2015

Fedora Project

• Updated perl-IO-Socket-SSL to 2.016 in Rawhide:

  • Add flag X509_V_FLAG_TRUSTED_FIRST by default if available in OpenSSL (since 1.02) and available with Net::SSLeay (CPAN RT#104759)

  • Work around hanging prompt() with older perl in Makefile.PL (CPAN RT#104731)

  • Make t/memleak_bad_handshake.t work on cygwin and other systems having /proc/pid/statm (CPAN RT#104659)

  • Add better debugging

• Updated perl-namespace-autoclean to 0.26 in Rawhide:

  • Mark all Mouse tests as TODO below perl 5.010, to enable installation despite apparent instability issues (see CPAN RT#101825)

• Updated perl-Net-SSLeay to 1.69 in Rawhide:

  • Testing with OpenSSL 1.0.2, 1.0.2a OK
  • Completed LibreSSL compatibility
  • Improved compatibility with OpenSSL 1.0.2a

  • Added the X509_check_* functions introduced in OpenSSL 1.0.2

  • Added support for X509_V_FLAG_TRUSTED_FIRST constant

  • Allow get_keyblock_size to work correctly with OpenSSL 1.0.1 onwards

• Updated perl-Test-Class to 0.50 in Rawhide:

  • Add links to Ovid's tutorial series on Test::Class (PR#19)

  • Add links to Test::Class::Most, Test::Class::Moose (PR#20)

  • List some distributions that use Test::Class in their test suite (PR#21)

  • Update documentation about running individual tests (PR#22)

  • Fix some tests to work with the new Test::Stream (PR#27)

  • Switch packaging to ExtUtils::MakeMaker

Local Packages

• Updated perl-IO-Socket-SSL to 2.016 as per the Fedora version

• Updated perl-Moose to 2.1405:

  • The native 'Array' trait 'sort' accessor now returns the number of elements in scalar context, instead of the undefined value (or a different, seemingly-random, value under 5.23.x)

• Updated perl-namespace-autoclean to 0.26 as per the Fedora version

• Updated perl-Net-SSLeay to 1.69 as per the Fedora version

Saturday 13th June 2015

Fedora Project

• Updated perl-JSON-MaybeXS to 1.003005 in F-20 and F-21, needed for perl-CHI (Bug #1230120)

• Updated perl-CPAN-Meta to 2.150005 in Rawhide:

  • Metadata merging now does deep hash merging as long as keys don't conflict

  • Serialized CPAN::Meta objects now include a x_serialization_backend entry

  • Declared extra developer prereq

  • Added test for 'x_deprecated' field in "provides"

  • Noted explicitly that historical META spec files are licensed under the same terms as Perl
  • Changed some test data from UTF-8 to ASCII

• Updated perl-Devel-Symdump to 2.15 in Rawhide:

  • In the tests, always check for exists before checking for definedness

• Updated perl-List-MoreUtils to 0.413 in Rawhide:

  • Fix compiling in c++ mode (deprecated, but some people seem to require it) (CPAN RT#104690)

Local Packages

• Updated perl-CPAN-Meta to 2.150005 as per the Fedora version

• Updated perl-Data-Dump to 1.23:

  • Avoid "Negative repeat count does nothing" warnings from perl-5.22

  • Typo fixes by David Steinbrunner

• Updated perl-Devel-Symdump to 2.15 as per the Fedora version

• Updated perl-List-MoreUtils to 0.413 as per the Fedora version

• Updated perl-Test-Exception to 0.40:

  • Updated for changes in Test::Stream (use Test::Stream::Sync)

Sunday 14th June 2015

Fedora Project

• Updated GeoIP-GeoLite-data to the June 2015 databases in Rawhide

• Updated libssh2 to 1.6.0 in Rawhide:

  • Added CMake build system

  • Added libssh2_userauth_publickey_frommemory()

  • wait_socket: Wrong use of difftime()

  • userauth: Fixed prompt text no longer being copied to the prompt's struct

  • MinGW build: Allow to pass custom CFLAGS

  • Let mansyntax.sh work regardless of where it is called from

  • Init HMAC_CTX before using it

  • direct_tcpip: Fixed channel write

  • WinCNG: Fixed backend breakage

  • OpenSSL: Fix bug caused by introducing libssh2_hmac_ctx_init

  • userauth.c: Fix possible dereferences of a null pointer

  • WinCNG: Added explicit clear memory feature to WinCNG backend

  • openssl.c: Fix possible segfault in case EVP_DigestInit fails

  • WinCNG: Fix return code of libssh2_md5_init()

  • kex: Do not ignore failure of libssh2_sha1_init()

  • scp: Fix that scp_send may transmit uninitialized memory

  • scp.c: Improved command length calculation

  • Non-blocking examples: Fix warning about unused tvdiff on Mac OS X

  • configure: Make clear-memory default but warn if backend unsupported

  • OpenSSL: Enable use of OpenSSL that doesn't have DSA

  • OpenSSL: Use correct no-blowfish #define

  • kex: Fix libgcrypt memory leaks of bignum

  • libssh2_channel_open: More detailed error message

  • WinCNG: Fixed memleak in (block) cipher destructor

• Updated perl-Parse-CPAN-Meta to 1.4417 in Rawhide:

  • Outputs the version of backends used
  • Updated repo metadata and boilerplate files

  • Pointed issue tracker to the Perl-Toolchain-Gang Github repo

Local Packages

• Updated GeoIP-GeoLite-data as per the Fedora version

• Updated libssh2 to 1.6.0 as per the Fedora version

• Updated perl-Module-Build to 0.4214:

  • Handle failure to guess license from key better
  • Output data in a stable order

• Updated perl-Parse-CPAN-Meta to 1.4417 as per the Fedora version

Monday 15th June 2015

Fedora Project

• Updated perl-File-Which (1.18) in Rawhide to remove redundant build dependencies that resulted in the package needing bootstrapping

Wednesday 17th June 2015

Fedora Project

• Updated perl-DBM-Deep to 2.0012 in Rawhide:

  • Improved transaction validation and warnings (GH#12)

• Updated perl-Text-CSV_XS to 1.19 in Rawhide:

  • Guard tests against $PERL_UNICODE

  • Numeric options were sometimes interpreted as boolean

  • Safer meta_info use

Local Packages

• Updated curl to 7.43.0:

  • CVE-2015-3236: Lingering HTTP credentials in connection re-use

  • CVE-2015-3237: SMB send off unrelated memory contents

  • Added CURLOPT_PROXY_SERVICE_NAME

  • Added CURLOPT_SERVICE_NAME

  • New curl option: --proxy-service-name

  • New curl option: --service-name

  • New curl option: --data-raw

  • Added CURLOPT_PIPEWAIT

  • Added support for multiplexing transfers using HTTP/2, and enable this with the new CURLPIPE_MULTIPLEX bit for CURLMOPT_PIPELINING

  • HTTP/2: Requires nghttp2 1.0.0 or later

  • scripts: Add zsh.pl for generating zsh completion

  • curl.h: Add CURL_HTTP_VERSION_2

  • nss: Fix compilation failure with old versions of NSS

  • curl_easy_getinfo.3: Document 'internals' in CURLINFO_TLS_SESSION

  • schannel.c: Fix possible SEC_E_BUFFER_TOO_SMALL error

  • Curl_ossl_init: Load built-in modules

  • configure: Follow-up fix for krb5-config

  • sasl_sspi: Populate domain from the realm in the challenge

  • netrc: Support 'default' token

  • README: Convert to UTF-8

  • cyassl: Implement public key pinning

  • nss: Implement public key pinning for NSS backend

  • MinGW build: Add arch -m32/-m64 to LDFLAGS

  • schannel: Fix out of bounds array

  • configure: Remove autogenerated files by autoconf

  • configure: Remove --automake from libtoolize call

  • acinclude.m4: Fix shell test for default CA cert bundle/path

  • schannel: Fix regression in schannel_recv

  • openssl: Skip trace outputs for ssl_ver == 0

  • gnutls: Properly retrieve certificate status

  • netrc: Read in text mode when cygwin

  • winbuild: Document the option used to statically link the CRT

  • FTP: Make EPSV use the control IP address rather than the original host

  • FTP: fIx dangling conn->ip_addr dereference on verbose EPSV

  • conncache: Keep bundles on host+port bases, not only host names

  • runtests.pl: Use 'h2c' now, no -14 any more

  • curlver: Introducing new version number (checking) macros

  • openssl: boringssl build breakage, use SSL_CTX_set_msg_callback

  • CURLOPT_POSTFIELDS.3: Correct variable names

  • curl_easy_unescape.3: Update RFC reference

  • gnutls: Don't fail on non-fatal alerts during handshake

  • testcurl.pl: Allow source to be in an arbitrary directory

  • CURLOPT_HTTPPROXYTUNNEL.3: Only works with a HTTP proxy

  • SSPI-error: Change SEC_E_ILLEGAL_MESSAGE description

  • parse_proxy: Switch off tunnelling if non-HTTP proxy

  • share_init: Fix OOM crash

  • perl: Remove subdir, not touched in 9 years

  • CURLOPT_COOKIELIST.3: Add example

  • CURLOPT_COOKIE.3: Explain that the cookies won't be modified

  • CURLOPT_COOKIELIST.3: Explain Set-Cookie without a domain

  • FAQ: How do I port libcurl to my OS?

  • openssl: Use TLS_client_method for OpenSSL 1.1.0+

  • HTTP-NTLM: Fail auth on connection close instead of looping

  • curl_setup: Add macros for FOPEN_READTEXT, FOPEN_WRITETEXT

  • curl_getdate.3: Update RFC reference

  • curl_multi_info_read.3: Added example

  • curl_multi_perform.3: Added example

  • curl_multi_timeout.3: Added example

  • cookie: Stop exporting any-domain cookies

  • openssl: Remove dummy callback use from SSL_CTX_set_verify()

  • openssl: Remove SSL_get_session()-using code

  • openssl: Removed USERDATA_IN_PWD_CALLBACK kludge

  • openssl: Removed error string #ifdef

  • openssl: Fix verification of server-sent legacy intermediates

  • docs: man page indentation and syntax fixes
  • docs: Spelling fixes

  • fopen.c: Fix a few compiler warnings

  • CURLOPT_OPENSOCKETFUNCTION: Return error at once

  • schannel: Add support for optional client certificates

  • build: Properly detect OpenSSL 1.0.2 when using configure

  • urldata: Store POST size in state.infilesize too

  • security: choose_mech: Remove dead code

  • rtsp_do: Remove dead code

  • docs: Many HTTP URIs changed to HTTPS

  • schannel: schannel_recv overhaul

• Updated perl-DBM-Deep to 2.0012 as per the Fedora version

• Updated perl-Module-CoreList to 5.20150520:

  • Updated for v5.22.0

• Updated perl-Text-CSV_XS to 1.19 as per the Fedora version

• Rebuilt bluefish, GeoIP, GeoIP-GeoLite-data, geoipupdate, gtkwave and Judy for the Fedora_23_Mass_Rebuild

Thursday 18th June 2015

Fedora Project

• Updated gnome-libs (1.4.2) in Rawhide to fix FTBFS with libjpeg-turbo ≥ 1.3.90

Local Packages

• Updated gnome-libs as per the Fedora version

• Updated perl-Archive-Zip to 1.47:

  • Zip file with a deflated directory could not be written out again

  • Add missing test data to MANIFEST

• Rebuilt libpng10, libssh2 and mod_fcgid for the Fedora_23_Mass_Rebuild

Friday 19th June 2015

Fedora Project

• Updated perl-CPAN-Meta-Check to 0.012 in Rawhide:

  • Drop dependency on Exporter 5.57

Local Packages

• Updated dovecot (2.2.18) to fix build for s390x and ppc64 (Bug #1232650)

• Updated perl-Archive-Zip to 1.48:

  • Wrap skip in a SKIP: block

• Updated perl-CPAN-Meta-Check to 0.012 as per the Fedora version

• Rebuilt check, nmap, proftpd, rbldnsd, smbldap-tools, spamass-milter for the Fedora_23_Mass_Rebuild

• I had to change nmap to always use the bundled liblua for the time being, as lua 5.3 in F-22 onwards is incompatible with nmap

Saturday 20th June 2015

Fedora Project

• Updated pari to 2.7.4 (cumulative bugfix update) in F-21, F-22 and Rawhide

• Updated perl-Apache-Session-Browseable to 1.1 in Rawhide

• Updated perl-Apache-Session-LDAP to 0.4 in Rawhide

Local Packages

• Rebuilt libgcrypt, libgpg-error, libidn, libmetalink, libspf2, sendmail and xz for the Fedora_23_Mass_Rebuild

Sunday 21st June 2015

Fedora Project

• Updated perl-Test-Deep to 0.116 in Rawhide:

  • On its own, :preload options uses default group of exports

Local Packages

• New package perl-Canary-Stability (2001)

• Updated perl-EV to 4.20:

  • Added stability canary support

  • Truly rely on automatic configuration for clock_gettime and others; unfortunately, this doesn't help with activeperl and similar perls, which define _POSIX_TIMERS without actually implementing any of it

  • (libev, ecb) Make it compile as C++ again

  • (libev) Fix a potential aliasing issue when accessing watcher callbacks

• Updated perl-Module-CoreList to 5.20150620:

  • Updated for v5.23.0

• Updated perl-Module-Info to fix the bundled B::Utils to build with Perl 5.22

• Updated perl-Test-Deep to 0.116 as per the Fedora version

• Rebuilt c-ares, libnet, libxml2 and libxslt for the Fedora_23_Mass_Rebuild

Monday 22nd June 2015

Fedora Project

• Updated perl-CPAN-Changes to 0.400002 in Rawhide:

  • Revert whitespace changes that were inadvertently included in the previous release
  • Escape curly brackets in test to avoid warning in perl 5.22

• Updated perl-Test-Deep to 0.117 in Rawhide:

  • Do not lose argument(s) to import (https://github.com/rjbs/Test-Deep/issues/29)

• Updated perl-Tree-DAG_Node (1.26) in Rawhide to specify all dependencies (Bug #1234366)

Local Packages

• Updated perl-autodie to 2.28:

  • Deprecate the use of "Fatal qw(:lexical)"; it is an implementation detail of autodie and is about to change

  • Use octal numbers in error messages for CORE subroutines taking a "mode" parameter, e.g. mkdir and chmod (GH#65, GH#66)

  • Allow wrappers for CORE::exec and CORE::system to be reused as they are not dependent on the calling package

  • Avoid hard-coded directory separator in t/system.t (GH#62)

  • Add missing "require autodie" in import-into test and ensure Import::Into remains an optional test dependency

  • Travis: set "sudo: false" to gain access to the Travis container based infrastructure

  • Bump version of Import::Into to 1.002004 as older versions are insufficient for our test (CPAN RT#101377)

  • Properly skip the Import::Into test if the version of Import::Into is insufficient (GH#67)

• Updated perl-CPAN-Changes to 0.400002 as per the Fedora version

• Updated perl-DBD-SQLite to 1.48:

• Changes That May Possibly Break Your Old Applications

  • Commented OPTIMIZE out of WriteMakefile (CPAN RT#94207); if your perl is not compiled with -O2, your DBD::SQLite may possibly behave differently under some circumstances

• Other Changes

  • Updated to SQLite 3.8.10 (CPAN RT#35449)

  • Added DBD::SQLite::Constants, from which you can import any "useful" constants into your applications

  • Added :all to EXPORT_TAGS in ::Constants

  • Used MY_CXT instead of a global variable

• I now need to use the bundled SQLite unless the system version is at least 3.8.10.2, as it fails to build with older Fedora system versions

• Updated perl-Net-SMTP-SSL to 1.03:

  • $net_smtp_ssl->isa('Net::SMTP') is now true

• Updated perl-Test-Deep to 0.117 as per the Fedora version

• Updated perl-Test-Prereq (1.038) to incorporate changes from upstream development release 1.038_05, add a workaround for FTBFS in Perl 5.22 (CPAN RT#105398), and add another workaround for Module::CoreList issues with Perl 5.8

• Updated perl-Tree-DAG_Node as per the Fedora version

Tuesday 23rd June 2015

Local Packages

• Updated perl-DateTime-TimeZone to 1.92:

  • This release is based on version 2015e of the Olson database
  • Contemporary changes for Morocco and Cayman Islands

  • This distro now depends on DateTime::TimeZone::Local::Win32 when it is being installed on a Windows OS (CPAN RT#103275)

• Updated perl-HTTP-SimpleLinkChecker to use links that actually work for the test suite

• Updated perl-Test-File to 1.43:

  • Fix problem with META* specifying requirements (CPAN RT#105210)

  • Don't install README.pod

• Updated perl-Test-Harness for Fedora 14 and 15 to include App::CPAN as per the Fedora versions, as it's not in perl-CPAN there (Bug #854577)

• Updated perl-Test-Mojibake to disable use of Test::Vars with Perl 5.22 (https://github.com/gfx/p5-Test-Vars/issues/11)

• Updated perl-Test-Version to disable use of Test::Vars with Perl 5.22 (https://github.com/gfx/p5-Test-Vars/issues/11)

• Rebuilt tidy for the Fedora_23_Mass_Rebuild

Wednesday 24th June 2015

Fedora Project

• Updated perl-Sysadm-Install to 0.46 in Rawhide:

  • ask() and pick() now support getting the user's response on the tty, instead of stdin, so they can be used from within a pipe

Local Packages

• Updated perl-Exporter-Declare to 0.114:

  • Add methods for getting lists of meta items
  • Documentation updates

• Updated php-Smarty to 3.1.27 (mainly bug fixes and optimizations)

• Rebuilt pptp for the Fedora_23_Mass_Rebuild

Friday 26th June 2015

Fedora Project

• Updated perl-Class-Load to 0.23 in Rawhide:

  • Remove use of namespace::clean

• Updated perl-MIME-Types to 2.11 in Rawhide:

  • Accept field 'q' weights

  • Introduce PERL_MIME_TYPE_DB (CPAN RT#104945)

  • Strict Perl 5.8 (CPAN RT#105267)

• Updated perl-Net-SSLeay to 1.70 in Rawhide:

  • The new OpenSSL 1.0.2 X509_check_* functions are not available in current LibreSSL, so disable them in SSLeay.xs

  • Fixed a problem with building against OSX homebrew's openssl

  • Removed a test in t/local/33_x509_create_cert.t that fails due to changes in 1.0.1n and later

• Updated perl-URI to 1.68 in Rawhide:

  • Sort hash keys to make generated query predictable
  • Add new tests for path segments

  • Add sftp scheme

Local Packages

• Updated perl-Class-Load to 0.23 as per the Fedora version

• Updated perl-MIME-Types to 2.11 as per the Fedora version

• Updated perl-Net-SSLeay to 1.70 as per the Fedora version

• Updated perl-Params-Validate to 1.19:

  • Fixed an uninitialized value warning from the pure Perl implementation under 5.8.8 (CPAN RT#105198)

• Updated perl-Software-License-CCpack to disable use of Test::Vars with Perl 5.22 (https://github.com/gfx/p5-Test-Vars/issues/11)

Saturday 27th June 2015

Local Packages

• Updated libidn (1.30) to merge emacs-libidn with main package (Bug #1234563)

• Updated perl-Coro to 6.43:

  • Use stability canary

  • Port to stableperl-5.22.0-1.001

  • Update libecb

• Updated perl-Pod-Spell (1.17) to disable use of Test::Vars with Perl 5.22 (https://github.com/gfx/p5-Test-Vars/issues/11)

Sunday 28th June 2015

Local Packages

• Updated perl-Canary-Stability to 2006:

  • The year when things were in good shape still
  • The compatibility version test for 5.22 was wrong and erroneously took 5.20.1+ as unsupported
  • Fix URLs

• Updated perl-Pod-Wordlist-hanekomu (1.132680) to disable use of Test::Vars with Perl 5.22 (https://github.com/gfx/p5-Test-Vars/issues/11)

Monday 29th June 2015

Fedora Project

• Updated perl-common-sense to 3.7.4 in Rawhide:

  • The generated README file was empty

• Updated perl-Path-Tiny to 0.070 in Rawhide:

  • The 'copy' method now returns the object for the copied file

  • The 'visit' method only dereferences the callback return value for scalar refs, avoiding some common bugs

• Updated perl-strictures to 2.000001 in Rawhide:

  • Update for perl 5.22 warning categories

  • Avoid using goto &UNIVERSAL::VERSION on perl 5.8, since it segfaults some builds

  • Also detect development directories based on .bzr directory

  • Various test clean-ups

• Updated perl-Test-Version to 2.03 in Rawhide:

  • Added 'multiple' option to check each version inside a .pm file with multiple packages

  • Remove annoying warnings when version_ok called by itself (GH#5)

Local Packages

• Updated perl-common-sense to 3.7.4 as per the Fedora version

• Updated perl-DateTime-Format-Strptime (1.56) to get rid of tabs in the code, which somehow hadn't been spotted by the Test::NoTabs release test earlier

• Updated perl-Params-Validate to 1.20:

  • Fixed a bug with stack handling in the XS code (GH#5)

  • Fixed use of inlining in the XS code to work when "gcc -std=c89" is specified (GH#6)

  • Previously, Params::Validate would eagerly stringify all values it was validating, even though this stringification was only needed for error messages that are used when a parameter fails; for objects that overload stringification and do real work, this added an unnecessary slowdown, so stringification is now delayed until it is needed (CPAN RT#105326)

• Updated perl-Path-Tiny to 0.070 as per the Fedora version

• Updated perl-strictures to 2.000001 as per the Fedora version

• Updated perl-Test-Synopsis (0.11) to disable use of Test::Vars with Perl 5.22 (https://github.com/gfx/p5-Test-Vars/issues/11)

• Updated perl-Test-Version to 2.03 as per the Fedora version

Tuesday 30th June 2015

Fedora Project

• Updated perl-Child to 0.012 in Rawhide:

  • Switch to Dist::Zilla

  • Switch to new Changes Layout

  • Fix destructor bug (#12)

• Updated perl-Devel-CheckCompiler to 0.06 in Rawhide:

  • More strict C99 check code

  • Fix for older GCC(< 5.0)

• Updated perl-Module-Build-XSUtil to 0.16 in Rawhide:

  • Fix regexp of _gcc_version for Ubuntu and Debian

  • Set -std=c99 explicitly for older GCC

Local Packages

• Updated perl-Child to 0.012 as per the Fedora version

• Updated perl-Coro to 6.46:

  • Avoid segfaulting (or worse) when tracing a cancelled thread

  • The Event module silently broke its public hook API, causing failures on perls compiled with -Duselongdouble; now requiring the latest version of Event because I don't know which release changed this (it's not mentioned in the ChangeLog)

  • Allow xs level enter/leave hooks via CoroAPI

• Updated perl-Data-Visitor (0.30) not to pull in Data::Alias for the test suite in Perl 5.22+ as it's broken there (CPAN RT#100944)

• Updated perl-DateTime-Format-Builder (0.81) to avoid the Test::NoTabs release test as the code is full of tabs (how did it ever pass?)

• Updated perl-Devel-CheckCompiler to 0.06 as per the Fedora version

• Updated perl-Exception-Base (0.25) to fix the test suite failure for Perl 5.21.2 and higher

• Updated perl-Module-Build-XSUtil to 0.16 as per the Fedora version

• Updated perl-Mouse (2.4.2) to fix interaction with threads in Perl 5.22 (Bug #1235938)

• Updated perl-Pod-Coverage-Moose (0.05) to disable use of Test::Vars with Perl 5.22 (https://github.com/gfx/p5-Test-Vars/issues/11)