Thursday 21st July 2016
Fedora Project
Updated perl-CPAN-Meta-Check to 0.013 in Rawhide:
- Make tests more resilient against dev versions of dependencies
Updated svnmailer (1.0.9) in Rawhide to modernize the spec in line with current python packaging standards:
- Drop support for old Fedora and EL releases
Use %license
Use new %py2_build and %py2_install macros
- Include egg-info unconditionally
Drop redundant Group: and BuildRoot: tags
Drop redundant %python_sitelib definition
- Drop redundant buildroot cleaning
Updated perl-Net-SSLeay (1.74), perl-Package-Anon (0.05) and perl-Package-Stash-XS (0.28) to fix FTBFS when perl isn't in the SRPM build root
Local Packages
Updated curl to 7.50.0
http: Add CURLINFO_HTTP_VERSION and %{http_version}
memdebug: Fix MSVC crash with -DMEMDEBUG_LOG_SYNC
openssl: Fix build with OPENSSL_NO_COMP
mbedtls: Removed unused variables
cmake: Added missing mbedTLS support
- URL parser: Allow URLs to use one, two or three slashes
curl: Fix -q [regression]
openssl: Use correct buffer sizes for error messages
curl: Fix SIGSEGV while parsing URL with too many globs
schannel: Add CURLOPT_CERTINFO support
vtls: Fix ssl session cache race condition
http: Fix HTTP/2 connection reuse [regression]
checksrc: Add LoadLibrary to the banned functions list
schannel Disable ALPN on Windows < 8.1
configure: Occasional ignorance of --enable-symbol-hiding with GCC
http2: test17xx are the first real HTTP/2 tests
resolve: Add support for IPv6 DNS64/NAT64 Networks on OS X + iOS
curl_multi_socket_action.3: Rewording
CURLOPT_POSTFIELDS.3: Clarify what happens when set empty
cmake: Fix build with winldap
openssl: Fix cert check with non-DNS name fields present
curl.1: Mention the units for the progress meter
openssl: Use more 'const' to fix build warnings with 1.1.0 branch
cmake: Now using BUILD_TESTING=ON/OFF
vtls: Only call add/getsession if session id is enabled
headers: Forward declare CURL, CURLM and CURLSH as structs
configure: Improve detection of CA bundle path on FreeBSD
- SFTP: Set a generic error when no SFTP one exists
curl_global_init.3: Expand on the SSL and WIN32 bits purpose
conn: Don't free easy handle data in handler->disconnect
cookie.c: Fix misleading indentation
- library: Fix memory leaks found during static analysis
CURLMOPT_SOCKETFUNCTION.3: Fix typo
curl_global_init: Moved the "IPv6 works" check here
connect: Disable TFO on Linux when using SSL
vauth: Fixed memory leak due to function returning without free
winbuild: Fix embedded manifest option
I also added patches to fix HTTPS and FTPS tests (work around stunnel bug Bug #1358810) and added an explicit dependency on nss-pem because it is no longer included in the nss package in Rawhide (Bug #1347336)
Updated libgcrypt to 1.6.5:
Mitigate side-channel attack on ECDH with Weierstrass curves (CVE-2015-7511); see http://www.cs.tau.ac.il/~tromer/ecdh/ for details
- Fix build problem on Solaris
Updated libidn to 1.33:
libidn: Fix out-of-bounds stack read in idna_to_ascii_4i
idn: Solve out-of-bounds-read when reading one zero byte as input; also replaced fgets with getline
libidn: stringprep_utf8_nfkc_normalize now rejects invalid UTF-8; it was always documented to only accept UTF-8 data, but now it doesn't crash when presented with such data
- Dropped valgrind suppressions file, should no longer be needed
Updated perl-CPAN-Meta-Check to 0.013 as per the Fedora version
Updated perl-Module-CoreList to 5.20160720:
- Updated for v5.25.3
Updated perl-Package-Stash-XS (0.28) to fix FTBFS when perl is not in the SRPM build root