PaulHowarth/Blog/2015-12-04

Friday 4th December 2015

Fedora Project

  • Updated libpng10 to 1.0.65 in F-22, F-23, Rawhide and EPEL-6:

    • Avoid potential pointer overflow in png_handle_iTXt(), png_handle_zTXt(), png_handle_sPLT(), and png_handle_pCAL()

    • Fixed incorrect implementation of png_set_PLTE() that uses png_ptr, not info_ptr, which left png_set_PLTE() open to the CVE-2015-8126 vulnerability

    • Discontinued distributing tar.bz2 archives

    • Discontinued distributing libpng-oldversion-newversion-diff.txt

  • Updated perl-Math-BigInt-GMP to 1.46 in Rawhide:

    • Add patch and new test file 't/mbi-from-big-scalar.t' regarding CPAN RT#103517

    • Fix spelling in GMP.xs ('modifing' → 'modifying')

    • Whitespace/formatting in t/bigintg.t to make it more readable and more in accordance with the 'perlstyle' manpage

Local Packages

  • Rebuilt curl for Bug #1288529

  • Updated libpng10 to 1.0.65 as per the Fedora version

  • Updated perl-File-Find-Rule to 0.34:

    • Add canonpath option to normalize file-path separators

  • Updated perl-XML-Simple to 2.21:

    • Improved diagnostics - xml_in() will now catch parse exceptions and add caller information via Carp::croak

    • Switch to use lexical warnings (suppress with either 'no warnings;' or 'no warnings "XML::Simple";', rather than $^W = 0)

    • POD fixes
    • Regex escaping fixes for Perl 5.22+
    • Add workaround for test failures on RHEL/CentOS 6.5 (CPAN RT#102115)

    • Remove some 'eval' calls from test suite that could mask root cause of test failures

    • Make each test script use unique filenames to allow tests to be run in parallel (CPAN RT#101362)

    • POD update: mention XML::Twig in 'STATUS' section (CPAN RT#79228)


Recent