1

Wednesday 9th August 2017

Fedora Project

• Updated GeoIP-GeoLite-data to August 2017 databases in Rawhide

Local Packages

• Updated curl to 7.55.0:

• New Features

  • curl: Allow --header and --proxy-header read from file

  • getinfo: Provide sizes as curl_off_t

  • curl: Prevent binary output spewed to terminal

  • curl: Added --request-target

  • libcurl: Added CURLOPT_REQUEST_TARGET

  • curl: Added --socks5-{basic,gssapi}: control socks5 auth

  • libcurl: Added CURLOPT_SOCKS5_AUTH

• Bug Fixes

  • glob: Do not parse after a strtoul() overflow range (CVE-2017-1000101)

  • tftp: Reject file name lengths that don't fit (CVE-2017-1000100)

  • file: Output the correct buffer to the user (CVE-2017-1000099)

  • includes: Remove curl/curlbuild.h and curl/curlrules.h

  • dist: Make the hugehelp.c not get regenerated unnecessarily

  • timers: Store internal time stamps as time_t instead of doubles

  • progress: Let "current speed" be UL + DL speeds combined

  • http-proxy: Do the HTTP CONNECT process entirely non-blocking

  • lib/curl_setup.h: Remove CURL_WANTS_CA_BUNDLE_ENV

  • fuzz: Bring oss-fuzz initial code converted to C89

  • configure: Disable nghttp2 too if HTTP has been disabled

  • mk-ca-bundle.pl: Check curl's exit code after certdata download

  • test1148: Verify the -# progressbar

  • tests: Stabilize test 2032 and 2033

  • HTTPS-Proxy: Don't offer h2 for https proxy connections

  • http-proxy: Only attempt FTP over HTTP proxy

  • curl-compilers.m4: Enable vla warning for clang

  • curl-compilers.m4: Enable double-promotion warning

  • curl-compilers.m4: Enable missing-variable-declarations clang warning

  • curl-compilers.m4: Enable comma clang warning

  • Makefile.m32: Enable -W for MinGW32 build

  • CURLOPT_PREQUOTE: Not supported for SFTP

  • http2: Fix OOM crash

  • PIPELINING_SERVER_BL: Clean up the internal list use

  • mkhelp.pl: Fix script name in usage text

  • lib1521: Add curl_easy_getinfo calls to the test set

  • travis: Do the distcheck test build out-of-tree as well

  • if2ip: Fix compiler warning in ISO C90 mode

  • lib: Fix the djgpp build

  • typecheck-gcc: Add support for CURLINFO_OFF_T

  • travis: Enable typecheck-gcc warnings

  • maketgz: Switch to xz instead of lzma

  • CURLINFO_REDIRECT_URL.3: Mention the CURLOPT_MAXREDIRS case

  • curl-compilers.m4: Fix unknown-warning-option on Apple clang

  • winbuild: Fix boringssl build

  • curl/system.h: Add check for XTENSA for 32bit gcc

  • test1537: Fixed memory leak on OOM

  • test1521: Fix compiler warnings

  • curl: Fix memory leak on test 1147 OOM

  • libtest/make: Generate lib1521.c dynamically at build-time

  • curl_strequal.3: Fix typo in SYNOPSIS

  • progress: Prevent resetting t_starttransfer

  • openssl: Improve fallback seed of PRNG with a time based hash

  • http2: Improved PING frame handling

  • test1450: Add simple testing for DICT

  • make: Build the docs subdir only from within src

  • cmake: Added compatibility options for older Windows versions

  • gtls: Fix build when sizeof(long) < sizeof(void *)

  • url: Make the original string get used on subsequent transfers

  • timeval.c: Use long long constant type for timeval assignment

  • tool_sleep: Typecast to avoid macos compiler warning

  • travis.yml: Use --enable-werror on debug builds

  • test1451: Add SMB support to the testbed

  • configure: Remove checks for 5 functions never used

  • configure: Try ldap/lber in reversed order first

  • smb: Fix build for djgpp/MSDOS

  • travis: Install nghttp2 on linux builds

  • smb: Add support for CURLOPT_FILETIME

  • cmake: Fix send/recv argument scanner for windows

  • inet_pton: Fix include on windows to get prototype

  • select.h: Avoid macro redefinition harder

  • cmake: If inet_pton is used, bump _WIN32_WINNT

  • asyn-thread.c: Fix unused variable warnings on macOS

  • runtests: Support "threaded-resolver" as a feature

  • test506: Skip if threaded-resolver

  • cmake: Remove spurious "-l" from linker flags

  • cmake: Add CURL_WERROR for enabling "warning as errors"

  • memdebug: Don't setbuf() if the file open failed

  • curl_easy_escape.3: Mention the (lack of) encoding

  • test1452: Add telnet negotiation

  • CURLOPT_POSTFIELDS.3: Explain the 100-continue magic better

  • cmake: Offer CMAKE_DEBUG_POSTFIX when building with MSVC

  • tests/valgrind.supp: Suppress OpenSSL false positive seen on travis

  • curl_setup_once: Remove ERRNO/SET_ERRNO macros

  • curl-compilers.m4: Disable warning spam with Cygwin's clang

  • ldap: Fix MinGW compiler warning

  • make: Fix docs build on OpenBSD

  • curl_setup: Always define WIN32_LEAN_AND_MEAN on Windows

  • system.h: include winsock2.h before windows.h

  • winbuild: Build with warning level 4

  • rtspd: Fix MSVC level 4 warning

  • sockfilt: Suppress conversion warning with explicit cast

  • libtest: Fix MSVC warning C4706

  • darwinssl: Fix pinnedpubkey build error

  • tests/server/resolve.c: Fix deprecation warning

  • nss: Fix a possible use-after-free in SelectClientCert()

  • checksrc: Escape open brace in regex

  • multi: Mention integer overflow risk if using > 500 million sockets

  • darwinssl: Fix --tlsv1.2 regression

  • timeval: struct curltime is a struct timeval replacement

  • curl_rtmp: Fix a compiler warning

  • include.d: Clarify that it concerns the response headers

  • cmake: Support make uninstall

  • include.d: Clarify --include is only for response headers

  • libcurl: Stop using error codes defined under CURL_NO_OLDIES

  • http: Fix response code parser to avoid integer overflow

  • configure: Fix the check for IdnToUnicode

  • multi: Fix request timer management

  • curl_threads: Fix MSVC compiler warning

  • travis: Build on osx with openssl
  • travis: Build on osx with libressl

  • CURLOPT_NETRC.3: Mention the file name on Windows

  • cmake: Set MSVC warning level to 4

  • netrc: Skip lines starting with '#'

  • darwinssl: Fix curlssl_sha256sum() compiler warnings on first argument

  • BUILD.WINDOWS: Mention buildconf.bat for builds off git

  • darwinssl: Silence compiler warnings
  • travis: Build on osx with darwinssl

  • FTP: Skip unnecessary CWD when in nocwd mode

  • gssapi: Fix memory leak of output token in multi round context

  • getparameter: Avoid returning uninitialized 'usedarg'

  • curl (debug build) easy_events: Make event data static

  • curl: Detect and bail out early on parameter integer overflows

  • configure: Fix recv/send/select detection on Android

• Updated GeoIP-GeoLite-data to August 2017 databases as per the Fedora version

• Updated perl-Class-Inspector to 1.32:

  • The installed method now supports @INC hooks of any type (coderef was supported as of 1.29, now arrayrefs and objects are also supported)

  • Detect probably broken Perl on Cygwin in Makefile.PL (see GH#5)

• Rebuilt mod_fastcgi (2.4.6) and symlinks (1.4) for the Fedora_27_Binutils_Mass_Rebuild

---

• Print
• Edit
• Quit
• |
• ←
• 1
• →
• |

• 1|1