PaulHowarth/Blog/2016-08-03

Wednesday 3rd August 2016

Fedora Project

  • Updated gnome-libs (1.4.2) in Rawhide to specify all build requirements

  • Updated perl-Crypt-Primes (0.50) in Rawhide to try to fix intermittent build failures due to the Pari stack filling up whilst running the test suite:

  • $ make test
    PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(0, 'blib/lib', 'blib/arch')" t/*.t
    PARI:   ***   the PARI stack overflows !
            current stack size: 4000000 (3.815 Mbytes)
      [hint] you can increase GP stack with allocatemem()
    t/genprime.t .......... 
    Dubious, test returned 255 (wstat 65280, 0xff00)
    Failed 2/10 subtests 
    t/genprime_elgamal.t .. ok
    t/intermediates.t ..... ok
    Test Summary Report
    -------------------
    t/genprime.t        (Wstat: 65280 Tests: 8 Failed: 0)
      Non-zero exit status: 255
      Parse errors: Bad plan.  You planned 10 tests but ran 8.
    Files=3, Tests=26, 20 wallclock secs ( 0.15 usr  0.04 sys + 20.24 cusr  0.39 csys = 20.82 CPU)
    Result: FAIL
    Failed 1/3 test programs. 0/26 subtests failed.
    Makefile:791: recipe for target 'test_dynamic' failed
    make: *** [test_dynamic] Error 255
  • I doubled the stack size for this test:
  • --- t/genprime.t
    +++ t/genprime.t
    @@ -10,8 +10,8 @@
     
     use lib '../lib';
     use lib 'lib';
    +use Math::PariInit qw( floor stack=8000000 );
     use Crypt::Primes qw(maurer); 
    -use Math::Pari qw(floor);
     
     print "1..10\n";

Local Packages

  • Updated bw-whois (5.5.2) to specify all build dependencies and generally update the spec to something approaching modernity

  • Updated cdrtools (3.02a06) to fix FTBFS when perl is not in the minimal buildroot

  • Updated curl to 7.50.1:

    • TLS: Switch off SSL session id when client cert is used (CVE-2016-5419)

    • TLS: Only reuse connections with the same client cert (CVE-2016-5420)

    • curl_multi_cleanup: Clear connection pointer for easy handles (CVE-2016-5421)

    • Include the CURLINFO_HTTP_VERSION(3) man page into the release tarball

    • Include the http2-server.pl script in the release tarball

    • test558: Fix test by stripping file paths from FD lines

    • spnego: Corrected misplaced * in Curl_auth_spnego_cleanup() declaration

    • tests: Fix for http/2 feature

    • cmake: Fix for schannel support

    • curl.h: Make public types void * again

    • win32: Fix a potential memory leak in Curl_load_library

    • travis: Fix OSX build by re-installing libtool

    • mbedtls: Fix debug function name

  • Updated geoipupdate (2.2.2), grepmail (5.3104) and moin (1.9.8) to build-require perl-generators for proper dependency generation

  • Updated gnome-libs (1.4.2) as per the Fedora version

  • Updated nmap (7.12) to fix FTBFS when perl is not in the minimal build root

  • Updated perl-Archive-Zip to 1.58:

    • Avoid relying on . being in @INC

    • Update MANIFEST.SKIP

  • Updated perl-ExtUtils-ParseXS to 3.31 in order to dual-live with perl 5.24, and patched it to avoid loading optional modules from default . (CVE-2016-1238)

  • Updated perl-HTTP-Tiny (0.058) to avoid loading optional modules from default . (CVE-2016-1238)

  • Updated perl-IO-Compress (2.069) to avoid loading optional modules from default . (CVE-2016-1238)

  • Updated perl-IO-Socket-IP to 0.38:

    • Support setting custom socket options with new 'Sockopts' constructor parameter

    • Restore blocking mode after ->connect errors (CPAN RT#112334)

  • Updated perl-JSON-PP (2.27400) to avoid loading optional modules from default . (CVE-2016-1238)

  • Updated perl-Test-Harness (3.36) to avoid loading optional modules from default . (CVE-2016-1238)

  • Updated ppp (2.4.7) and pptp (1.8.0) to specify all build requirements


Recent