#acl PaulHowarth:read,write,admin,revert,delete All:read === Thursday 21st July 2016 === ==== Fedora Project ==== * Updated `perl-CPAN-Meta-Check` to 0.013 in Rawhide: * Make tests more resilient against dev versions of dependencies * Updated `svnmailer` (1.0.9) in Rawhide to modernize the spec in line with current python packaging standards: * Drop support for old Fedora and EL releases * Use `%license` * Use new `%py2_build` and `%py2_install` macros * Include egg-info unconditionally * Drop redundant `Group:` and `BuildRoot:` tags * Drop redundant `%python_sitelib` definition * Drop redundant buildroot cleaning * Updated `perl-Net-SSLeay` (1.74), `perl-Package-Anon` (0.05) and `perl-Package-Stash-XS` (0.28) to fix FTBFS when `perl` isn't in the SRPM build root ==== Local Packages ==== * Updated `curl` to 7.50.0 * `http`: Add `CURLINFO_HTTP_VERSION` and `%{http_version}` * `memdebug`: Fix MSVC crash with `-DMEMDEBUG_LOG_SYNC` * `openssl`: Fix build with `OPENSSL_NO_COMP` * `mbedtls`: Removed unused variables * `cmake`: Added missing `mbedTLS` support * URL parser: Allow URLs to use one, two or three slashes * `curl`: Fix `-q` [regression] * `openssl`: Use correct buffer sizes for error messages * `curl`: Fix `SIGSEGV` while parsing URL with too many globs * `schannel`: Add `CURLOPT_CERTINFO` support * `vtls`: Fix ssl session cache race condition * `http`: Fix HTTP/2 connection reuse [regression] * `checksrc`: Add `LoadLibrary` to the banned functions list * `schannel` Disable ALPN on Windows < 8.1 * `configure`: Occasional ignorance of `--enable-symbol-hiding` with GCC * `http2`: `test17xx` are the first real HTTP/2 tests * `resolve`: Add support for IPv6 `DNS64`/`NAT64` Networks on OS X + iOS * `curl_multi_socket_action.3`: Rewording * `CURLOPT_POSTFIELDS.3`: Clarify what happens when set empty * `cmake`: Fix build with `winldap` * `openssl`: Fix cert check with non-DNS name fields present * `curl.1`: Mention the units for the progress meter * `openssl`: Use more '`const`' to fix build warnings with 1.1.0 branch * `cmake`: Now using `BUILD_TESTING=ON/OFF` * `vtls`: Only call `add`/`getsession` if session id is enabled * headers: Forward declare `CURL`, `CURLM` and `CURLSH` as structs * `configure`: Improve detection of CA bundle path on FreeBSD * SFTP: Set a generic error when no SFTP one exists * `curl_global_init.3`: Expand on the SSL and WIN32 bits purpose * `conn`: Don't `free` easy handle data in `handler->disconnect` * `cookie.c`: Fix misleading indentation * library: Fix memory leaks found during static analysis * `CURLMOPT_SOCKETFUNCTION.3`: Fix typo * `curl_global_init`: Moved the "IPv6 works" check here * `connect`: Disable TFO on Linux when using SSL * `vauth`: Fixed memory leak due to function returning without `free` * `winbuild`: Fix embedded manifest option . I also added patches to fix HTTPS and FTPS tests (work around `stunnel` bug [[RedHatBugzilla:1358810|Bug #1358810]]) and added an explicit dependency on `nss-pem` because it is no longer included in the `nss` package in Rawhide ([[RedHatBugzilla:1347336|Bug #1347336]]) * Updated `libgcrypt` to 1.6.5: * Mitigate side-channel attack on ECDH with Weierstrass curves (CVE-2015-7511); see http://www.cs.tau.ac.il/~tromer/ecdh/ for details * Fix build problem on Solaris * Updated `libidn` to 1.33: * `libidn`: Fix out-of-bounds stack read in `idna_to_ascii_4i` * `idn`: Solve out-of-bounds-read when reading one zero byte as input; also replaced `fgets` with `getline` * `libidn`: `stringprep_utf8_nfkc_normalize` now rejects invalid UTF-8; it was always documented to only accept UTF-8 data, but now it doesn't crash when presented with such data * Dropped valgrind suppressions file, should no longer be needed * Updated `perl-CPAN-Meta-Check` to 0.013 as per the Fedora version * Updated `perl-Module-CoreList` to 5.20160720: * Updated for v5.25.3 * Updated `perl-Package-Stash-XS` (0.28) to fix FTBFS when `perl` is not in the SRPM build root ----