PaulHowarth/Blog/2016-09-14

Wednesday 14th September 2016

Local Packages

  • Updated curl to 7.50.3:

    • CVE-2016-7167: Escape and unescape integer overflows

    • mk-ca-bundle.pl: Use SHA256 instead of SHA1

    • checksrc: Detect strtok() use

    • Errors: New alias CURLE_WEIRD_SERVER_REPLY

    • http2: Support > 64bit sized uploads

    • OpenSSL: Fix bad memory free (regression)
    • CMake: Hide private library symbols

    • http: Refuse to pass on response body when NO_BODY was set

    • CMake: Fix curl-config --static-libs

    • mbedtls: Switch off NTLM in build if md4 isn't available

    • curl: --create-dirs on Windows groks both forward and backward slashes

  • Updated perl-Number-Compare (0.03), perl-Object-ID (0.1.2), perl-Package-Generator (1.106) to build-require perl-generators for proper dependency generation

  • Updated perl-Package-Anon (0.05), perl-Package-Constants (0.06) and perl-Package-Stash (0.37) to fix FTBFS when perl is not in the minimal buildroot and to build-require perl-generators for proper dependency generation

  • Updated perl-Text-Glob to 0.10:

    • Added ability to alter regex separator

    • Switch distribution packaging back to ExtUtils::MakeMaker (CPAN RT#104876)

Recent