#acl PaulHowarth:read,write,admin,revert,delete All:read === Friday 4th December 2015 === ==== Fedora Project ==== * Updated `libpng10` to 1.0.65 in F-22, F-23, Rawhide and EPEL-6: * Avoid potential pointer overflow in `png_handle_iTXt()`, `png_handle_zTXt()`, `png_handle_sPLT()`, and `png_handle_pCAL()` * Fixed incorrect implementation of `png_set_PLTE()` that uses `png_ptr`, not `info_ptr`, which left `png_set_PLTE()` open to the [[CVE:2015-8126|CVE-2015-8126]] vulnerability * Discontinued distributing `tar.bz2` archives * Discontinued distributing `libpng-`oldversion`-`newversion`-diff.txt` * Updated `perl-Math-BigInt-GMP` to 1.46 in Rawhide: * Add patch and new test file '`t/mbi-from-big-scalar.t`' regarding [[CPAN:103517|CPAN RT#103517]] * Fix spelling in `GMP.xs` ('modifing' → 'modifying') * Whitespace/formatting in `t/bigintg.t` to make it more readable and more in accordance with the 'perlstyle' manpage ==== Local Packages ==== * Rebuilt `curl` for [[RedHatBugzilla:1288529|Bug #1288529]] * Updated `libpng10` to 1.0.65 as per the Fedora version * Updated `perl-File-Find-Rule` to 0.34: * Add `canonpath` option to normalize file-path separators * Updated `perl-XML-Simple` to 2.21: * Improved diagnostics - `xml_in()` will now catch parse exceptions and add caller information via `Carp::croak` * Switch to use lexical warnings (suppress with either '`no warnings;`' or '`no warnings "XML::Simple";`', rather than `$^W = 0`) * POD fixes * Regex escaping fixes for Perl 5.22+ * Add workaround for test failures on RHEL/CentOS 6.5 ([[CPAN:102115|CPAN RT#102115]]) * Remove some '`eval`' calls from test suite that could mask root cause of test failures * Make each test script use unique filenames to allow tests to be run in parallel ([[CPAN:101362|CPAN RT#101362]]) * POD update: mention `XML::Twig` in '`STATUS`' section ([[CPAN:79228|CPAN RT#79228]]) ----