Upload page content

You can upload content for the page named below. If you change the page name, you can also upload content for another page. If the page name is empty, we derive the page name from the file name.

File to load page content from
Page name
Comment

    PaulHowarth/Blog/2016-08

Paul's Blog Entries for August 2016

Monday 1st August 2016

Fedora Project

  • Updated perl-Net-SSLeay to 1.77 in F-25 and Rawhide:

    • Fixed incorrect size to memset in tlsext_ticket_key_cb_invoke

Local Packages

  • Updated dovecot (2.2.25) to update pigeonhole to 0.4.15:

    • vacation extension: The sieve_user_email setting is now used in the check for implicit delivery

    • imapsieve plugin: For any mail transaction, the mailbox was opened a second time, even if no mailbox rule matched; this was unintentional, useless and caused problems when the imapsieve plugin was used with other plugins like acl

    • extprograms plugin: Significantly improved error handling; no stream errors were logged

    • extprograms plugin: Fixed bug in handling of result code from remote program (script service)

    • extprograms plugin: Connection to remote program service was not retried

    • Several small fixes based on static analysis
    • Fixed handling of quoted string localparts in email addresses
  • Updated perl-Data-Dump-Streamer to 2.39, and added fix for JSON::XS ≥ 3.02 (CPAN RT#112960)

  • Updated perl-Array-Diff (0.07), perl-Carp-Clan (6.06), perl-Convert-BinHex (1.125), perl-Coro (6.511), perl-CPAN-Meta-Requirements (2.140), perl-DateTime (1.34), perl-DBI (1.636) and perl-Declare-Constraints-Simple (0.03) to fix FTBFS when perl is not in the minimal buildroot

  • Updated perl-Net-SSLeay to 1.77 as per the Fedora version

Tuesday 2nd August 2016

Fedora Project

  • Updated perl-Test-Valgrind to 1.19 in F-25 and Rawhide:

    • valgrind 3.1x will no longer be treated as valgrind 3.1.0, causing the wrong command line arguments to be used (Debian bug 832833)

    • The number of callers is now capped at 24, as this is the maximum number supported by valgrind; a higher number of frames could lead to the generation of unusable suppressions in both old and recent versions of valgrind

  • Updated smbldap-tools (0.9.11) in Rawhide to build-require perl-generators for proper dependecy generation

Local Packages

  • Updated perl-AnyEvent (7.12) to fix FTBFS when perl is not in the minimal buildroot

  • Updated perl-HTTP-SimpleLinkChecker (1.163), perl-HTTP-Size (1.15), perl-Test-File (1.44) not to ship README.pod alongside the perl code, which was happening when built with old versions of ExtUtils::MakeMaker on legacy distributions

  • Updated perl-Module-Build (0.4218) and weblint++ (1.15) to build-require perl-generators where available for proper dependency generation

  • Updated perl-Test-Prereq (1.039) not to ship README.pod alongside the perl code, and also to patch the test suite to work with perl 5.20.3 on Fedora 22

  • Updated perl-Test-Valgrind to 1.19 as per the Fedora version

  • Updated smbldap-tools as per the Fedora version

  • Updated weblint (1.9.3) not to ship code with 'use lib /home/neilb/...' in it, and do a general clean-up of the package whilst I was at it

  • Updated shorten (3.6.1) and xz (5.2.2) to specify their build requirements

Wednesday 3rd August 2016

Fedora Project

  • Updated gnome-libs (1.4.2) in Rawhide to specify all build requirements

  • Updated perl-Crypt-Primes (0.50) in Rawhide to try to fix intermittent build failures due to the Pari stack filling up whilst running the test suite:

  • $ make test
    PERL_DL_NONLAZY=1 "/usr/bin/perl" "-MExtUtils::Command::MM" "-MTest::Harness" "-e" "undef *Test::Harness::Switches; test_harness(0, 'blib/lib', 'blib/arch')" t/*.t
    PARI:   ***   the PARI stack overflows !
            current stack size: 4000000 (3.815 Mbytes)
      [hint] you can increase GP stack with allocatemem()
    t/genprime.t .......... 
    Dubious, test returned 255 (wstat 65280, 0xff00)
    Failed 2/10 subtests 
    t/genprime_elgamal.t .. ok
    t/intermediates.t ..... ok
    Test Summary Report
    -------------------
    t/genprime.t        (Wstat: 65280 Tests: 8 Failed: 0)
      Non-zero exit status: 255
      Parse errors: Bad plan.  You planned 10 tests but ran 8.
    Files=3, Tests=26, 20 wallclock secs ( 0.15 usr  0.04 sys + 20.24 cusr  0.39 csys = 20.82 CPU)
    Result: FAIL
    Failed 1/3 test programs. 0/26 subtests failed.
    Makefile:791: recipe for target 'test_dynamic' failed
    make: *** [test_dynamic] Error 255
  • I doubled the stack size for this test:
  • --- t/genprime.t
    +++ t/genprime.t
    @@ -10,8 +10,8 @@
     
     use lib '../lib';
     use lib 'lib';
    +use Math::PariInit qw( floor stack=8000000 );
     use Crypt::Primes qw(maurer); 
    -use Math::Pari qw(floor);
     
     print "1..10\n";

Local Packages

  • Updated bw-whois (5.5.2) to specify all build dependencies and generally update the spec to something approaching modernity

  • Updated cdrtools (3.02a06) to fix FTBFS when perl is not in the minimal buildroot

  • Updated curl to 7.50.1:

    • TLS: Switch off SSL session id when client cert is used (CVE-2016-5419)

    • TLS: Only reuse connections with the same client cert (CVE-2016-5420)

    • curl_multi_cleanup: Clear connection pointer for easy handles (CVE-2016-5421)

    • Include the CURLINFO_HTTP_VERSION(3) man page into the release tarball

    • Include the http2-server.pl script in the release tarball

    • test558: Fix test by stripping file paths from FD lines

    • spnego: Corrected misplaced * in Curl_auth_spnego_cleanup() declaration

    • tests: Fix for http/2 feature

    • cmake: Fix for schannel support

    • curl.h: Make public types void * again

    • win32: Fix a potential memory leak in Curl_load_library

    • travis: Fix OSX build by re-installing libtool

    • mbedtls: Fix debug function name

  • Updated geoipupdate (2.2.2), grepmail (5.3104) and moin (1.9.8) to build-require perl-generators for proper dependency generation

  • Updated gnome-libs (1.4.2) as per the Fedora version

  • Updated nmap (7.12) to fix FTBFS when perl is not in the minimal build root

  • Updated perl-Archive-Zip to 1.58:

    • Avoid relying on . being in @INC

    • Update MANIFEST.SKIP

  • Updated perl-ExtUtils-ParseXS to 3.31 in order to dual-live with perl 5.24, and patched it to avoid loading optional modules from default . (CVE-2016-1238)

  • Updated perl-HTTP-Tiny (0.058) to avoid loading optional modules from default . (CVE-2016-1238)

  • Updated perl-IO-Compress (2.069) to avoid loading optional modules from default . (CVE-2016-1238)

  • Updated perl-IO-Socket-IP to 0.38:

    • Support setting custom socket options with new 'Sockopts' constructor parameter

    • Restore blocking mode after ->connect errors (CPAN RT#112334)

  • Updated perl-JSON-PP (2.27400) to avoid loading optional modules from default . (CVE-2016-1238)

  • Updated perl-Test-Harness (3.36) to avoid loading optional modules from default . (CVE-2016-1238)

  • Updated ppp (2.4.7) and pptp (1.8.0) to specify all build requirements

Thursday 4th August 2016

Fedora Project

  • Updated perl-Class-C3-XS (0.13) in Rawhide to avoid relying on . being in @INC (CPAN RT#116566)

Local Packages

  • Updated perl-Class-C3-XS (0.13) as per the Fedora version

  • Updated perl-Algorithm-C3 (0.10), perl-Algorithm-Diff (1.1903), perl-Algorithm-Diff-XS (0.04), perl-aliased (0.34), perl-AnyEvent-AIO (1.1), perl-AnyEvent-BDB (1.1), perl-Archive-Any (0.0945), perl-Archive-Any-Lite (0.11), perl-Archive-Peek (0.35), perl-autodie (2.29) and perl-BDB (1.91) to build-require perl-generators for proper dependency generation

Friday 5th August 2016

Fedora Project

  • Updated GeoIP-GeoLite-data to the August 2016 databases in F-25 and Rawhide

  • Updated milter-greylist (4.6.1), milter-regex (2.0) and spamass-milter (0.4.0) in Rawhide to reflect that the sendmail-devel package has been renamed to sendmail-milter-devel from Fedora 26 onwards

  • Updated perl-Sendmail-PMilter (1.00) to modernize the spec and build-require perl-generators for proper dependency generation

  • Updated perl-Sub-Uplevel to 0.2600 in F-25 and Rawhide:

    • Optimized calls to caller()

Local Packages

  • Updated GeoIP-GeoLite-data to the August 2016 databases as per the Fedora version

  • Updated perl-B-Keywords (1.15), perl-B-Utils (0.27) and perl-BerkeleyDB (0.55) to build-require perl-generators for proper dependency generation

  • Updated perl-MetaCPAN-Client to 1.022001:

    • Rework type checking - enforce expected types, including single-valued array-ref unwrapping; doesn't break types that are expected to be array-refs
    • Check user provided UA for 'get' and 'post' methods

    • Documentation updates
  • Updated perl-Module-CoreList (5.20160720) to avoid loading optional modules from default . (CVE-2016-1238)

  • Updated perl-Sendmail-PMilter (1.00) as per the Fedora version

  • Updated sendmail (8.15.2) to remove dependency on sendmail in sendmail-devel, and rename sendmail-devel to sendmail-milter-devel from Fedora 26 onwards (Bug #891288)

  • Updated perl-Sub-Uplevel to 0.2600 as per the Fedora version

  • Updated smf-sav (2.1), smf-spf (2.0.2) and spamass-milter (0.4.0) to reflect that the sendmail-devel package has been renamed to sendmail-milter-devel from Fedora 26 onwards

Saturday 6th August 2016

Fedora Project

  • Updated perl-DateTime to 1.35 in F-25 and Rawhide:

    • Use namespace::autoclean in all packages that import anything; without cleaning the namespace, DateTime ends up with "methods" like try and catch (from Try::Tiny), which can lead to very confusing bugs (CPAN RT#115983)

Local Packages

  • Updated perl-Capture-Tiny to 0.44:

    • Note that dropping privileges during a capture can lead to temporary files not being cleaned up
  • Updated perl-DateTime to 1.35 as per the Fedora version

Sunday 7th August 2016

Fedora Project

  • Updated perl-Class-C3-XS to 0.14 in F-23, F-24, F25 and Rawhide:

  • Updated perl-DateTime to 1.36 in F-25 and Rawhide:

    • Require namespace::autoclean ≥ 0.19

Local Packages

  • Updated perl-Class-C3-XS to 0.14 as per the Fedora version

  • Updated perl-DateTime to 1.36 as per the Fedora version

  • Updated perl-MetaCPAN-Client to 1.022003:

    • Added LWP::Protocol::https as test dependency

    • Fixed a warning in $file->pod

  • Updated perl-MooseX-Role-Parameterized to 1.09:

    • Give 'anonymous' generated roles names that are similar to the original parameterized role so debug output is easier to read

Monday 8th August 2016

Fedora Project

  • Jitka Plesnikova kindly reviewed and approved my perl-Ref-Util package submission

  • Imported and built perl-Ref-Util (0.020) in F-23, F-24, F-25, Rawhide, EPEL-6 and EPEL-7

  • Tidied up and rebuilt perl-Carp-Fix-1_25 (1.000001) in F-25 and Rawhide

  • Updated perl-Crypt-Primes (0.50) in Rawhide to increase the Pari stack size for the t/genprime_elgamal.t test as well as the previous update for t/genprime.t, as both are prone to intermittent stack exhaustion

  • Updated perl-File-ShareDir-Install to 0.11 in F-25 and Rawhide:

    • Release with new tooling
  • Updated perl-IO-Socket-SSL to 2.034 in F-25 and Rawhide:

    • Move handling of global SSL arguments into creation of context, so that these get also applied when creating a context only
  • Updated perl-MetaCPAN-Client to 1.022003 in F-25 and Rawhide:

    • Fix result values in v1 - single valued arrayref in ES result will be turned to a scalar

    • Rework type checking - enforce expected types, including single-valued array-ref unwrapping; doesn't break types that are expected to be array-refs
    • Check user provided UA for 'get' and 'post' methods

    • Documentation updates
    • Added LWP::Protocol::https as test dependency

    • Fixed a warning in $file->pod

Local Packages

  • Updated perl-Canary-Stability (2011), perl-Class-Accessor (0.34) and perl-Class-C3 (0.31) to build-require perl-generators for proper dependency generation

  • Tidied up and rebuilt perl-Carp-Fix-1_25 (1.000001) as per the Fedora version

  • Updated perl-File-ShareDir-Install to 0.11 as per the Fedora version

  • Updated perl-IO-Socket-SSL to 2.034 as per the Fedora version

Tuesday 9th August 2016

Fedora Project

  • Updated gtkwave to 3.3.75 in F-25 and Rawhide:

    • Fix crash when -S and -W are used in tandem

Local Packages

  • Updated gtkwave to 3.3.75 as per the Fedora version

  • Updated perl-Class-Data-Inheritable (0.08), perl-Class-Factory-Util (1.7), perl-Class-Inspector (1.28), perl-Class-Load-XS (0.09), perl-Class-Method-Modifiers (2.12), perl-Class-Singleton (1.5) and perl-common-sense (3.7.4) to build-require perl-generators for proper dependency generation

  • Updated perl-Class-Load (0.23) and perl-Class-Tiny (1.004) to fix FTBFS when perl is not in the minimal buildroot and to build-require perl-generators for proper dependency generation

  • Updated sendmail (8.15.2) to make the milter-develmilter dependency arch-specific

Wednesday 10th August 2016

Local Packages

  • Updated perl-Compress-Raw-Bzip2 (2.069), perl-Compress-Raw-Lzma (2.069), perl-Compress-Raw-Zlib (2.069), perl-ConfigReader-Simple (1.29) and perl-Convert-TNEF (0.18) to build-require perl-generators for proper dependency generation

  • Updated perl-constant-boolean (0.02) to fix FTBFS when perl is not in the minimal buildroot

Thursday 11th August 2016

Fedora Project

  • Updated perl-Hash-StoredIterator to 0.008 in F-25 and Rawhide:

    • Silenced eich deprecation warnings in tests

    • Typo fixes (GH#3)

    • Added a license file
    • Testing using Travis and AppVeyor

    • No longer depending on Fennec: using Test2 instead, reducing the dependency chain (GH#2)

    • Added repository metadata (GH#4)

  • Updated perl-IO-Socket-SSL to 2.035 in F-25 and Rawhide:

    • Fixes for issues introduced in 2.034
      • Return with error in configure_SSL if context creation failed; this might otherwise result in an segmentation fault later

      • Apply builtin defaults before any (user configurable) global settings (i.e. done with set_defaults, set_default_context...) so that builtins don't replace user settings

  • Updated perl-Net-SSLeay (1.77) in F-25 and Rawhide to fix OCSP (CPAN RT#116795)

  • Updated perl-Test-Most to 0.35 in F-25 and Rawhide:

    • Bump module deps due to Test2; Test2 is tested well enough that you're probably OK, but you'll want to retest your code with this release

Local Packages

  • New package perl-Test2-AsyncSubtest (0.000018)

  • New package perl-Test2-Workflow (0.000017)

  • Updated perl-CPAN-Changes (0.400002), perl-Convert-UUlib (1.50) and perl-CPAN-DistnameInfo (0.12) to build-require perl-generators for proper dependency generation

  • Updated perl-Hash-StoredIterator to 0.008 as per the Fedora version

  • Updated perl-IO-Socket-SSL to 2.035 as per the Fedora version

  • Updated perl-Net-SSLeay (1.77) to fix OCSP as per the Fedora version

  • Updated perl-Test-Most to 0.35 as per the Fedora version

Friday 12th August 2016

Local Packages

  • Updated perl-Archive-Zip to 1.59:

    • Metadata fixes
  • Updated perl-CPAN-Meta (2.150005), perl-CPAN-Meta-YAML (0.018), perl-Crypt-SmbHash (0.12), perl-Cwd-Guard (0.05), perl-Data-Alias (1.20), perl-Data-Compare (1.25), perl-Data-Dump (1.23) and perl-Data-Dumper-Names (0.03) to build-require perl-generators for proper dependency generation

Sunday 14th August 2016

Fedora Project

  • Updated perl-Net-SSLeay to 1.78 in F-25 and Rawhide:

    • Fixed broken (since 1.75) OCSP code and tests
  • Updated perl-Test-Simple to 1.302052 in F-25 and Rawhide:

    • Add contact info to main doc and readme
    • Fix setting hub when getting context

Local Packages

  • Updated perl-Net-SSLeay to 1.78 as per the Fedora version

  • Updated perl-Test2 to 1.302052 as per the Fedora perl-Test-Simple package

  • Updated perl-Test2-Suite to 0.000058:

    • Make sure Test2::Compare::convert loads deps

    • Add contact info to docs

Monday 15th August 2016

Fedora Project

  • Updated perl-Path-Class to 0.37 in F-25 and Rawhide:

    • Doc update for contains/subsumes

    • Fix "contains" when $self is a relative path (GH#43)

    • Handle case where $other evaluates false

    • Add additional test cases for contains and subsumes

    • Test with Perl 5.24

Local Packages

  • Updated perl-List-SomeUtils to 0.53:

    • Replaced Exporter::Tiny with Exporter

  • Updated perl-Path-Class to 0.37 as per the Fedora version

  • Updated perl-Data-OptList (0.110), perl-Data-Section-Simple (0.07), perl-Data-Tumbler (0.010) and perl-DateTime-Calendar-Mayan (0.0601) to build-require perl-generators for proper dependency generation

  • Updated perl-Data-Section (0.200006) to fix FTBFS when perl is not in the minimal buildroot, and to build-require perl-generators for proper dependency generation

Tuesday 16th August 2016

Fedora Project

  • Updated gtkwave to 3.3.76 in F-25 and Rawhide:

    • Fix for --disable-tcl in ./configure caused by 3.3.75 fix

    • Crash fix in fstapi.c on read value at time accessing of FST files that use new dynamic aliases, FastLZ, or LZ4; this primarily affects rtlbrowse

  • Updated perl-Sub-Name to 0.18 in F-25 and Rawhide:

    • Support binary and unicode symbol names (PR#8)

    • Fixed parsing error where the name contains a single colon but the last separator is ::

  • Updated perl-Test-CleanNamespaces to 0.21 in F-25 and Rawhide:

    • Switch to plain old Exporter, removing build_* subs from the API

  • Updated perl-Try-Tiny to 0.27 in F-25 and Rawhide:

    • "finally" blocks are now run for all methods of leaving the try block (including via exit, goto) (CPAN RT#112099)

    • Switch from finalizers using an array to a hash, to resolve segfaults when creating a pseudofork on MSWin before perl 5.20 (karenetheridge/Try-Tiny/#3)

    • Repository moved to the GitHub p5sagit organization (the primary is on shadowcat, mirrored to github)

Local Packages

  • Updated gtkwave to 3.3.76 as per the Fedora version

  • Updated perl-Sub-Name to 0.18 as per the Fedora version

  • Updated perl-Test-CleanNamespaces to 0.21 as per the Fedora version

  • Updated perl-Try-Tiny to 0.27 as per the Fedora version

  • Updated python-twisted to 16.3.1 (security fixes in Twisted Web; see NEWS for details)

  • Updated unrar to 5.40

  • Updated perl-DateTime-Format-Builder (0.81), perl-DateTime-Format-MySQL (0.06) and perl-DBM-Deep (2.0013) to build-require perl-generators for proper dependency generation

  • Updated perl-DateTime-Format-Strptime (1.68) to fix FTBFS when perl is not in the minimal buildroot, and to build-require perl-generators for proper dependency generation

Wednesday 17th August 2016

Local Packages

  • Updated perl-HTTP-Tiny to 0.064:

  • Fixed
    • Timeout can now be set as a constructor argument again
    • Avoid loading optional modules from @INC path with '.' at the end (CVE-2016-1238)

    • Avoid overwriting 'If-Modified-Since' header in mirror() if the header already exists in something other than lower-case

    • Fixed chunked transfer encoding, which previously omitted a trailing CRLF
  • Tests
    • Updated tests for a future perl which may omit '.' from the list of directories in @INC by default

    • Normalize CRLF when reading test data files in t/150-post_form.t on Win32

  • Updated perl-Module-Build to 0.4220:

    • Initialize MM Compat environmental variables to empty strings
    • Skip PPM test when link_executable fails

    • Make more actions deterministic
    • Preprocess file lists generated by rscan_dir() to sort them

  • Updated perl-Devel-Caller (2.06), perl-Devel-CheckBin (0.04), perl-Devel-CheckCompiler (0.06) and perl-Devel-Cycle (1.12) to build-require perl-generators for proper dependency generation

Thursday 18th August 2016

Fedora Project

  • Following a re-review, the perl-Data-Dumper-Streamer package was finally unblocked in koji

  • Imported and built perl-Data-Dumper-Streamer (2.39) in F-23, F-24, F-25 and Rawhide

Local Packages

  • Updated perl-Test-Needs to 0.002003:

    • Fix loud warnings when aborting a test under Test2

    • Some kwalitee improvements
  • Updated perl-Devel-EnforceEncapsulation (0.51), perl-Devel-GlobalDestruction-XS (0.02), perl-Devel-Hide (0.0009), perl-Devel-Leak (0.03), perl-Devel-LexAlias (0.05), perl-Devel-OverloadInfo (0.004), perl-Devel-StackTrace (2.01), perl-Devel-Symdump (2.17) and perl-Digest-BubbleBabble (0.02) to build-require perl-generators for proper dependency generation

  • Updated perl-Devel-GlobalDestruction (0.13) to fix FTBFS when perl is not in the minimal buildroot and to build-require perl-generators for proper dependency generation

Friday 19th August 2016

Fedora Project

  • Updated perl-Sub-Name to 0.19 in F-25 and Rawhide:

    • Fix checking of SvUTF8 flag

  • Updated perl-Test-CleanNamespaces to 0.22 in F-25 and Rawhide:

    • Properly find the list of modules to test (regression since 0.19)

Local Packages

  • Updated perl-CPAN-Meta to 2.150010, obsoleting the old perl-Parse-CPAN-Meta package:

  • Fixed:
    • CPAN::Meta::Prereqs now fully accepts phases and types starting with 'x_'; new 'phases' and 'types_in' interfaces have been added

    • No longer relies on JSON backend for data structure cloning; this is much faster than using JSON::PP

    • The cloning routine would raise an error on expected types when it previously would stringify; the old behaviour is restored
    • Fixed used of Encode in Parse::CPAN::Meta::load_json_string (cherry picked from Parse::CPAN::Meta 1.4422)

    • Added "use warnings" to Parse::CPAN::Meta

    • The YAML and JSON backend variables are ignored when building/testing the perl core itself, where non-core backends are not yet installed

  • Tests:
    • The 'extra_mappings' feature for meta merging is now tested and documented

    • During tests, delete new environment variables added by Parse::CPAN::Meta 1.4418

  • Spec:
    • Clarifies acceptable values for booleans
    • Cleaned up text and links of historical specs
  • Updated perl-Sub-Name to 0.19 as per the Fedora version

  • Updated perl-Test-CleanNamespaces to 0.22 as per the Fedora version

  • Updated perl-Test-Needs to 0.002004:

    • Fix test counts when Test2 not available

  • Updated python-twisted to 16.3.2 (Twisted Web bugfix; see NEWS for details)

  • Updated perl-Digest-MD4 (1.9) and perl-Dist-CheckConflicts (0.11) to build-require perl-generators for proper dependency generation

Saturday 20th August 2016

Fedora Project

  • Updated perl-Moose to 2.1805 in F-25 and Rawhide:

    • Remove inc/Config.pm that should not have appeared in the distribution (an issue since 2.1800; CPAN RT#117071)

Local Packages

  • Updated perl-Moose to 2.1805 as per the Fedora version

Sunday 21st August 2016

Local Packages

  • Updated libgcrypt to 1.6.6:

    • Fix critical security bug in the RNG (CVE-2016-6313); an attacker who obtains 580 bytes from the standard RNG can trivially predict the next 20 bytes of output

  • Updated libgcrypt (1.5) to 1.5.6:

    • Improved performance of RSA, DSA, and Elgamal by using a new exponentiation algorithm (CVE-2014-5270)

    • Fixed a subtle bug in mpi_set_bit that could set spurious bits

    • Fixed a bug in an internal division function
    • Mitigate chosen cipher text attacks on ECDH with Weierstrass curves (CVE-2015-7511)

    • Use ciphertext blinding for Elgamal decryption (CVE-2014-3591)

    • Fix critical security bug in the RNG (CVE-2016-6313); an attacker who obtains 580 bytes from the standard RNG can trivially predict the next 20 bytes of output

  • Updated perl-Email-Address (1.908), perl-Env-Sanctify (1.12) and perl-Error (0.17024) to build-require perl-generators for proper dependency generation

  • Updated perl-Module-CoreList to 5.20160820:

    • Updated for v5.25.4

Monday 22nd August 2016

Fedora Project

  • Updated perl-Exception-Base to 0.2501 in EPEL-7:

    • Fix "Redundant argument in sprintf" warning on Perl 5.21.2
  • This update also fixed Bug #1273668: to_string() appends 'undef' to array attribute

  • Updated spamass-milter (0.4.0) in F-25, Rawhide and EPEL-7 to document expected warning message when used with Postfix (Bug #1368645)

Local Packages

  • Updated perl-Exception-Base (0.2501) to fix FTBFS when perl is not in the minimal buildroot, to build-require perl-generators for proper dependency generation, and to add a test case to verify the fix for Bug #1273668

  • Updated perl-EV (4.22), perl-Exception-Class (1.40), perl-Exporter-Declare (0.114), perl-Exporter-Tiny (0.042), perl-ExtUtils-BuildRC (0.005), perl-ExtUtils-CBuilder (0.280224), perl-ExtUtils-Config (0.008), perl-ExtUtils-Depends (0.405), perl-ExtUtils-Helpers (0.022), perl-ExtUtils-InstallPaths (0.011), perl-ExtUtils-MakeMaker-CPANfile (0.07) and perl-ExtUtils-PkgConfig (1.15) to build-require perl-generators for proper dependency generation

  • Updated spamass-milter (0.4.0) to improve documentation as per the Fedora version

Tuesday 23rd August 2016

Fedora Project

  • Updated perl-IO-Socket-SSL to 2.037 in F-25 and Rawhide:

    • Disable OCSP support when Net::SSLeay 1.75..1.77 is used (CPAN RT#116795)

    • Fix session cache del_session: it freed the session but did not properly remove it from the cache; further reuse caused crash

Local Packages

  • Updated perl-IO-Socket-SSL to 2.037 as per the Fedora version

  • Updated perl-Fennec (2.017), perl-Fennec-Lite (0.004), perl-File-Find-Object-Rule (0.0305), perl-File-Find-Rule (0.34) and perl-File-Find-Rule-VCS (1.08) to build-require perl-generators for proper dependency generation

  • Updated perl-File-chdir (0.1010) to fix FTBFS when perl is not in the minimal buildroot, and to build-require perl-generators for proper dependency generation

Wednesday 24th August 2016

Fedora Project

  • Updated perl-Sub-Exporter-Progressive to 0.001012 in F-25 and Rawhide:

    • Many small performance improvements

Local Packages

  • Updated perl-Sub-Exporter-Progressive to 0.001012 as per the Fedora version

  • Updated perl-File-Find-Object (0.2.13), perl-File-Find-Rule-Perl (1.15), perl-File-HomeDir (1.00), perl-File-MMagic (1.30), perl-File-Remove (1.57), perl-File-pushd (1.009) and perl-FileHandle-Fmode (0.14) to build-require perl-generators for proper dependency generation

Thursday 25th August 2016

Local Packages

  • Updated perl-File-ShareDir (1.102), perl-File-ShareDir-ProjectDistDir (1.000008), perl-File-Slurp (9999.19), perl-File-Slurp-Tiny (0.004), perl-File-Which (1.21), perl-Filter (1.55), perl-FreezeThaw (0.5001), perl-Hook-LexWrap (0.25) and perl-HTML-SimpleLinkExtor (1.27) to build-require perl-generators for proper dependency generation

  • Updated perl-Perl-Critic-Lax to 0.012:

    • ProhibitLeadingZeros::ExceptChmod is now just an empty subclass of ProhibitLeadingZeros, which has allowed leading zeroes on args to chmod since 2008

    • Policy ValuesAndExpressions::RequireConstantOnLeftSideOfEquality has been added to allow variables on the left side of 'eq'

Friday 26th August 2016

Local Packages

  • Updated perl-HTML-Tidy (1.56) to build-require perl-generators for proper dependency generation

Saturday 27th August 2016

Fedora Project

  • Updated perl-MetaCPAN-Client to 1.023000 in F-25 and Rawhide:

    • Added support for version by env METACPAN_VERSION

    • Added tests for version argument
  • Updated perl-Ref-Util update to 0.100 in F-25 and Rawhide:

    • Support situations in op-code implementation where the parameters do not come as a list
    • Fix memory leak in dangling op
    • Support magic (tied variables)
    • Rework op implementation
    • Speed up by changing the top of the stack instead of POPing and PUSHing

    • Update ppport.h file from Devel::PPPort and remove the copy of SVRXOK since it's now available

    • Add license in Pod
    • Specify minimum version of perl (5.6.2)

Local Packages

  • Updated curl (7.50.1) to work around race condition in PK11_FindSlotByName() and to fix incorrect use of a previously loaded certificate from file (related to CVE-2016-5420)

  • Updated perl-IO-AIO (4.34), perl-IO-Capture (0.05), perl-IO-Compress-Lzma (2.069), perl-Import-Into (1.002005) and perl-IO-Multiplex (1.16) to build-require perl-generators for proper dependency generation

  • Updated perl-MetaCPAN-Client to 1.023000 as per the Fedora version

  • Updated perl-Ref-Util update to 0.100 as per the Fedora version, adding a patch to fix building on perl 5.8.8 (https://github.com/p5pclub/ref-util/pull/29)

Monday 29th August 2016

Fedora Project

  • Updated perl-MetaCPAN-Client to 1.024000 in F-25 and Rawhide:

  • Updated perl-Ref-Util to 0.101 in F-25 and Rawhide:

    • A test accidentally added a dependency on Readonly.pm - fixed! (GH#30)

    • Updated README

  • Updated perl-Text-CSV_XS to 1.25 in F-25 and Rawhide:

    • Allow lc, uc, and coderef for csv() headers attribute

    • Document for eof when the last line has an error (CPAN RT#115954)

    • Allow csv() to call header() with all supported arguments

    • Add some docs for bind_columns

Local Packages

  • Updated perl-IO-Socket-INET6 (2.72) to build-require perl-generators for proper dependency generation

  • Updated perl-MetaCPAN-Client to 1.024000 as per the Fedora version

  • Updated perl-Ref-Util to 0.101 as per the Fedora version

  • Updated perl-Text-CSV_XS to 1.25 as per the Fedora version

Tuesday 30th August 2016

Fedora Project

  • Updated perl-autobox to 2.84 in F-25 and Rawhide:

    • Compatibility fix for perl ≥ 5.25

    • Update ppport.h from 3.20 to 3.35

    • Add .travis.yml

  • Updated perl-Data-Dump-Streamer to 2.40 in F-25 and Rawhide:

    • Fix up issues with JSON and with non-Padwalker builds

    • Various other tweaks and cleanups to build on newer Perls
    • Updated meta files, etc.
  • Updated perl-MetaCPAN-Client to 1.025000 in F-25 and Rawhide:

    • Added some version requirements to improve SSL over HTTP::Tiny

    • Added default values for distribution keys with no content
  • Updated perl-MIME-tools to 5.508 in F-25 and Rawhide:

Local Packages

  • Updated perl-Data-Dump-Streamer to 2.40 as per the Fedora version

  • Updated perl-MetaCPAN-Client to 1.025000 as per the Fedora version

  • Updated perl-MIME-tools to 5.508 as per the Fedora version

  • Updated perl-Readonly-XS (1.05) to build-require perl-generators for proper dependency generation

Wednesday 31st August 2016

Local Packages

  • Updated perl-IO-String (1.08), perl-IO-Tty (1.12), perl-IO-Zlib (1.10), perl-IO-stringy (2.111), perl-IPC-Run (0.94), perl-IPC-System-Simple (1.25), perl-JSON-MaybeXS (1.003005), perl-Jcode (2.07) and perl-LMAP-CID2SPF (0.9) to build-require perl-generators for proper dependency generation

  • Updated perl-IPC-Run3 (0.048) to add test and fix for CPAN RT#52317: Calling run3 garbles STDIN (Bug #1062267)

  • Updated python-zope-interface to 4.3.0:

Previous Month: July 2016
Next Month: September 2016

Recent