Tuesday 11th April 2017
Fedora Project
Updated perl-Class-Load to 0.24 in F-26 and Rawhide:
Fix test to handle altered Test::Without::Module exception message (GH#2)
Updated perl-Class-Load-XS to 0.10 in F-26 and Rawhide:
Fix test to handle altered Test::Without::Module exception message
Updated perl-Params-ValidationCompiler to 0.24 in F-26 and Rawhide:
The source_for() exported by Params::ValidationCompiler did not work at all (GH#16)
Updated perl-Sub-Identify to 0.14 in F-26 and Rawhide:
Make tests pass without . in @INC (actual fix)
Local Packages
Updated curl (7.53.1) to disable upstream test 2033 (flaky test for HTTP/1 pipelining)
Updated dovecot to update dovecot to 2.2.29 (see NEWS for details)
Bug fixes include not expanding %variables in passdb/userdb dict keys; if dict was used as the authentication passdb, using specially crafted %variables in the username could be used to cause DoS (CVE-2017-2669)
Updated perl-Class-Load to 0.24 as per the Fedora version
Updated perl-Class-Load-XS to 0.10 as per the Fedora version
Updated perl-Params-ValidationCompiler to 0.24 as per the Fedora version
Updated perl-Specio (0.36) to explicitly require List::MoreUtils::XS if we're using it in lieu of a recent List::Util; the List::MoreUtils::PP implementation does not work and List::MoreUtils no longer loads the XS itself
Updated perl-Sub-Identify to 0.14 as per the Fedora version