PaulHowarth/Blog/2017-08

Paul's Blog Entries for August 2017

Tuesday 1st August 2017

Fedora Project

  • Updated perl-autovivification to 0.17 in Rawhide:

    • A large chunk of boilerplate XS code, which is also used in other XS modules, has been factored out of the main .xs file to a collection of .h files in the xsh subdirectory

    • The new optimization in Perl 5.27.3 for scalar(keys(%$hashref)) is now correctly supported

  • Updated perl-B-Hooks-OP-Check to 0.22 in Rawhide:

    • Use cleaner wrap_op_checker() API to control op checking

    • Use core's Perl_check_t typedef instead of inventing our own

Local Packages

  • Updated perl-B-Hooks-OP-Check to 0.22 as per the Fedora version

  • Updated perl-ExtUtils-ParseXS to 3.35:

    • Fix ExtUtils-ParseXS/t/*.t that needed '.' in @INC

    • Remove impediment to compiling under C++11
    • Make build reproducible
    • Remove . from the end of @INC if complex modules are loaded (Perl RT#127834)

    • Replace :: with __ in THIS like it's done for parameters/return values

Wednesday 2nd August 2017

Local Packages

  • Updated nmap to 7.60 (see CHANGELOG for details)

  • Updated perl-DynaLoader-Functions to 0.003:

    • Update linkable-finding code to handle new Windows builds with variant filename extension for loadable files
    • Explicitly load the Config module rather than relying on DynaLoader to do it

    • No longer include a Makefile.PL in the distribution

    • In documentation, use four-column indentation for all verbatim material
    • In META.{yml,json}, point to public bug tracker

  • Updated perl-Params-Classify to 0.15:

    • Update for changed S_croak_xs_usage() prototype in ExtUtils::ParseXS 3.30, requiring the new version of that module in order to build the XS implementation

    • In documentation, use four-column indentation for all verbatim material
    • In META.{yml,json}, point to public bug tracker

    • Correctly classify ExtUtils::ParseXS dependency as a recommendation rather than a requirement

    • Avoid some compiler warnings
  • Updated perl-Test-WriteVariants to 0.014:

    • Ensure $ENV{} variables are modified before later used modules are processed

Thursday 3rd August 2017

Fedora Project

  • Updated perl-MCE to 1.829, perl-MCE-Shared to 1.826 and perl-IO-FDPass to 1.2 in EPEL-7, bring this stack up to date with upstream, which has stabilized over the last couple of months

  • Updated perl-Specio to 0.39 in Rawhide:

    • Many bug fixes and improvements to the types created by {any,object}_{can,does,isa}_type; in some cases, an invalid value could cause an exception in type check itself, and in other cases, a value that failed a type check would cause an exception when generating a message describing the failure

    • The messages describing a failure for all of these types have been improved
    • You can now create anonymous *_does and *_isa types using the exports from Specio::Declare

Local Packages

  • Updated nmap (7.60) to unbundle zlib

  • Updated perl-IPC-System-Simple (1.25) to fix random test failures with Test::Simple ≥ 1.302065 (GH#21)

  • Updated perl-Specio to 0.39 as per the Fedora version

  • Rebuilt bluefish (2.2.10), c-ares (1.13.0), check (0.11.0), curl (7.54.1), dovecot (2.2.31), GeoIP (1.6.11), geoipupdate (2.4.0), gtkwave (3.3.82), Judy (1.0.5), libpng10 (1.0.67), libssh2 (1.8.0), mod_fcgid (2.3.9), proftpd (1.3.6) for the Fedora_27_Binutils_Mass_Rebuild

Friday 4th August 2017

Fedora Project

  • Updated perl-DateTime-Format-Strptime to 1.74 in Rawhide:

    • Fix text not to rely on a very specific exception message from Specio; this was broken in 0.39 (GH#18)

  • Updated perl-Specio to 0.40 in Rawhide:

    • Fixed more bugs with {any,object}_{can,does,isa}_type

      • When passed a glob (not a globref) they would die in their type check
      • On Perl 5.16 or earlier, passing a number to an any_* type would also die

    • Fixed subification overloading: if Sub::Quote was loaded, this would be used, but any environment variables needed for the closure would not be included, which broke enums, among other things

Local Packages

  • Updated perl-DateTime-Format-Strptime to 1.74 as per the Fedora version

  • Updated perl-Filter-Simple to 0.94:

    • Remove use of deprecated \C regex feature

    • Filter::Simple was erroneously signalling eof if it encountered a 'no MyFilter' right after 'use':

    • use MyFilter;
      no MyFilter;
    • In this case it should simply not filter anything
  • Updated perl-Specio to 0.40 as per the Fedora version

  • Rebuilt libgcrypt (1.7.8), libxml2 (2.9.4), libxslt (1.1.29), perl-common-sense (3.7.4), perl-Moose (2.2006), perl-Net-SSLeay (1.81), perl-perl5i (2.13.2), perl-true (0.18), perl-Unicode-UTF8 (0.62), perl-Unix-Syslog (1.1), perl-Variable-Magic (0.61), perl-XML-LibXML (2.0129), perl-YAML-LibYAML (0.65), perl-YAML-Syck (1.30), rbldnsd (0.998), sendmail (8.15.2), spamass-milter (0.4.0) and tidyp (1.0.4) for the Fedora_27_Binutils_Mass_Rebuild

Saturday 5th August 2017

Local Packages

Sunday 6th August 2017

Local Packages

  • Rebuilt perl-Readonly-XS (1.05), perl-Ref-Util-XS (0.116), perl-Socket6 (0.28), perl-Sub-Identify (0.14), perl-Sub-Name (0.21), perl-Taint-Util (0.08), perl-Test-LeakTrace (0.16), perl-Text-CSV_XS (1.31) and perl-Text-Hunspell (2.14) for the Fedora_27_Binutils_Mass_Rebuild

Monday 7th August 2017

Fedora Project

  • Updated gtkwave to 3.3.83 in Rawhide:

    • Preserve search type for regex search across reloads or close/reopens of regex search widget
    • Update local libz to current version

  • Updated perl-Params-Classify to 0.015 in F-26 and Rawhide:

    • Port to Perl 5.19.4, where the C type of array indices has changed
    • Update to accommodate PERL_OP_PARENT builds of Perl 5.21.11 or later (which is the default from Perl 5.25.1)

    • Trigger custom op generation via Devel::CallChecker rather than by hooking the underlying op checker

    • Update test suite not to rely on . in @INC, which is no longer necessarily there from Perl 5.25.7

    • No longer include a Makefile.PL in the distribution

    • Correct dynamic_config setting to 0

    • Use boolSV() where appropriate in XS code

    • Use cBOOL() where appropriate

    • Consistently use THX_ prefix on internal function names

    • Include META.json in distribution

    • Add MYMETA.json to .cvsignore

    • Convert .cvsignore to .gitignore

    • Update for changed S_croak_xs_usage() prototype in ExtUtils::ParseXS 3.30, requiring the new version of that module in order to build the XS implementation

    • In documentation, use four-column indentation for all verbatim material
    • In META.{yml,json}, point to public bug tracker

    • Correctly classify ExtUtils::ParseXS dependency as a recommendation rather than a requirement

    • Avoid some compiler warnings

Local Packages

  • Updated gtkwave to 3.3.83 as per the Fedora version

  • Rebuilt perl-Devel-CallChecker (0.008), perl-Devel-Caller (2.06), perl-Devel-GlobalDestruction-XS (0.03), perl-Devel-Leak (0.03), perl-Devel-LexAlias (0.05), perl-Digest-MD4 (1.9), perl-Digest-SHA (5.96), perl-Event (1.26), perl-Guard (1.023), perl-Hash-FieldHash (0.15), perl-Hash-StoredIterator (0.008), perl-IO-AIO (4.34), perl-IO-FDPass (1.2), perl-IO-Tty (1.12), perl-JSON-XS (3.03), perl-List-MoreUtils-XS (0.418), perl-MooseX-Role-WithOverloading (0.17), perl-Mouse (2.4.10), perl-Package-Anon (0.05), perl-Package-Stash-XS (0.28), perl-PadWalker (2.2), perl-Params-Validate (1.29), perl-Perl-Destruct-Level (0.02), perl-PerlIO-gzip (0.20) and perl-PerlIO-utf8_strict (0.007) for the Fedora_27_Binutils_Mass_Rebuild

Tuesday 8th August 2017

Fedora Project

  • Updated perl-Error to 0.17025 in Rawhide:

Local Packages

  • Updated perl-Error to 0.17025 as per the Fedora version

  • Rebuilt perl-AnyEvent (7.14), perl-B-Hooks-OP-Annotation (0.44), perl-B-Utils (0.27), perl-BDB (1.91), perl-BerkeleyDB (0.55), perl-Class-C3-XS (0.14), perl-Class-Load-XS (0.10), perl-Class-XSAccessor (1.19), perl-Compress-Raw-Bzip2 (2.074), perl-Compress-Raw-Lzma (2.074), perl-Compress-Raw-Zlib (2.074), perl-Crypt-Cracklib (1.7), perl-Data-Dump-Streamer (2.40), perl-Data-UUID (1.221), perl-DateTime (1.43) for the Fedora_27_Binutils_Mass_Rebuild

Wednesday 9th August 2017

Fedora Project

  • Updated GeoIP-GeoLite-data to August 2017 databases in Rawhide

Local Packages

  • Updated curl to 7.55.0:

  • New Features

    • curl: Allow --header and --proxy-header read from file

    • getinfo: Provide sizes as curl_off_t

    • curl: Prevent binary output spewed to terminal

    • curl: Added --request-target

    • libcurl: Added CURLOPT_REQUEST_TARGET

    • curl: Added --socks5-{basic,gssapi}: control socks5 auth

    • libcurl: Added CURLOPT_SOCKS5_AUTH

  • Bug Fixes

    • glob: Do not parse after a strtoul() overflow range (CVE-2017-1000101)

    • tftp: Reject file name lengths that don't fit (CVE-2017-1000100)

    • file: Output the correct buffer to the user (CVE-2017-1000099)

    • includes: Remove curl/curlbuild.h and curl/curlrules.h

    • dist: Make the hugehelp.c not get regenerated unnecessarily

    • timers: Store internal time stamps as time_t instead of doubles

    • progress: Let "current speed" be UL + DL speeds combined
    • http-proxy: Do the HTTP CONNECT process entirely non-blocking

    • lib/curl_setup.h: Remove CURL_WANTS_CA_BUNDLE_ENV

    • fuzz: Bring oss-fuzz initial code converted to C89
    • configure: Disable nghttp2 too if HTTP has been disabled

    • mk-ca-bundle.pl: Check curl's exit code after certdata download

    • test1148: Verify the -# progressbar

    • tests: Stabilize test 2032 and 2033
    • HTTPS-Proxy: Don't offer h2 for https proxy connections

    • http-proxy: Only attempt FTP over HTTP proxy
    • curl-compilers.m4: Enable vla warning for clang

    • curl-compilers.m4: Enable double-promotion warning

    • curl-compilers.m4: Enable missing-variable-declarations clang warning

    • curl-compilers.m4: Enable comma clang warning

    • Makefile.m32: Enable -W for MinGW32 build

    • CURLOPT_PREQUOTE: Not supported for SFTP

    • http2: Fix OOM crash
    • PIPELINING_SERVER_BL: Clean up the internal list use

    • mkhelp.pl: Fix script name in usage text

    • lib1521: Add curl_easy_getinfo calls to the test set

    • travis: Do the distcheck test build out-of-tree as well

    • if2ip: Fix compiler warning in ISO C90 mode

    • lib: Fix the djgpp build
    • typecheck-gcc: Add support for CURLINFO_OFF_T

    • travis: Enable typecheck-gcc warnings

    • maketgz: Switch to xz instead of lzma

    • CURLINFO_REDIRECT_URL.3: Mention the CURLOPT_MAXREDIRS case

    • curl-compilers.m4: Fix unknown-warning-option on Apple clang

    • winbuild: Fix boringssl build
    • curl/system.h: Add check for XTENSA for 32bit gcc

    • test1537: Fixed memory leak on OOM

    • test1521: Fix compiler warnings

    • curl: Fix memory leak on test 1147 OOM

    • libtest/make: Generate lib1521.c dynamically at build-time

    • curl_strequal.3: Fix typo in SYNOPSIS

    • progress: Prevent resetting t_starttransfer

    • openssl: Improve fallback seed of PRNG with a time based hash
    • http2: Improved PING frame handling

    • test1450: Add simple testing for DICT

    • make: Build the docs subdir only from within src

    • cmake: Added compatibility options for older Windows versions

    • gtls: Fix build when sizeof(long) < sizeof(void *)

    • url: Make the original string get used on subsequent transfers

    • timeval.c: Use long long constant type for timeval assignment

    • tool_sleep: Typecast to avoid macos compiler warning

    • travis.yml: Use --enable-werror on debug builds

    • test1451: Add SMB support to the testbed

    • configure: Remove checks for 5 functions never used

    • configure: Try ldap/lber in reversed order first

    • smb: Fix build for djgpp/MSDOS
    • travis: Install nghttp2 on linux builds

    • smb: Add support for CURLOPT_FILETIME

    • cmake: Fix send/recv argument scanner for windows

    • inet_pton: Fix include on windows to get prototype

    • select.h: Avoid macro redefinition harder

    • cmake: If inet_pton is used, bump _WIN32_WINNT

    • asyn-thread.c: Fix unused variable warnings on macOS

    • runtests: Support "threaded-resolver" as a feature

    • test506: Skip if threaded-resolver

    • cmake: Remove spurious "-l" from linker flags

    • cmake: Add CURL_WERROR for enabling "warning as errors"

    • memdebug: Don't setbuf() if the file open failed

    • curl_easy_escape.3: Mention the (lack of) encoding

    • test1452: Add telnet negotiation

    • CURLOPT_POSTFIELDS.3: Explain the 100-continue magic better

    • cmake: Offer CMAKE_DEBUG_POSTFIX when building with MSVC

    • tests/valgrind.supp: Suppress OpenSSL false positive seen on travis

    • curl_setup_once: Remove ERRNO/SET_ERRNO macros

    • curl-compilers.m4: Disable warning spam with Cygwin's clang

    • ldap: Fix MinGW compiler warning

    • make: Fix docs build on OpenBSD

    • curl_setup: Always define WIN32_LEAN_AND_MEAN on Windows

    • system.h: include winsock2.h before windows.h

    • winbuild: Build with warning level 4

    • rtspd: Fix MSVC level 4 warning

    • sockfilt: Suppress conversion warning with explicit cast

    • libtest: Fix MSVC warning C4706

    • darwinssl: Fix pinnedpubkey build error

    • tests/server/resolve.c: Fix deprecation warning

    • nss: Fix a possible use-after-free in SelectClientCert()

    • checksrc: Escape open brace in regex

    • multi: Mention integer overflow risk if using > 500 million sockets

    • darwinssl: Fix --tlsv1.2 regression

    • timeval: struct curltime is a struct timeval replacement

    • curl_rtmp: Fix a compiler warning

    • include.d: Clarify that it concerns the response headers

    • cmake: Support make uninstall

    • include.d: Clarify --include is only for response headers

    • libcurl: Stop using error codes defined under CURL_NO_OLDIES

    • http: Fix response code parser to avoid integer overflow

    • configure: Fix the check for IdnToUnicode

    • multi: Fix request timer management

    • curl_threads: Fix MSVC compiler warning

    • travis: Build on osx with openssl
    • travis: Build on osx with libressl
    • CURLOPT_NETRC.3: Mention the file name on Windows

    • cmake: Set MSVC warning level to 4

    • netrc: Skip lines starting with '#'

    • darwinssl: Fix curlssl_sha256sum() compiler warnings on first argument

    • BUILD.WINDOWS: Mention buildconf.bat for builds off git

    • darwinssl: Silence compiler warnings
    • travis: Build on osx with darwinssl
    • FTP: Skip unnecessary CWD when in nocwd mode

    • gssapi: Fix memory leak of output token in multi round context
    • getparameter: Avoid returning uninitialized 'usedarg'

    • curl (debug build) easy_events: Make event data static

    • curl: Detect and bail out early on parameter integer overflows

    • configure: Fix recv/send/select detection on Android

  • Updated GeoIP-GeoLite-data to August 2017 databases as per the Fedora version

  • Updated perl-Class-Inspector to 1.32:

    • The installed method now supports @INC hooks of any type (coderef was supported as of 1.29, now arrayrefs and objects are also supported)

    • Detect probably broken Perl on Cygwin in Makefile.PL (see GH#5)

  • Rebuilt mod_fastcgi (2.4.6) and symlinks (1.4) for the Fedora_27_Binutils_Mass_Rebuild

Thursday 10th August 2017

Fedora Project

  • Updated perl-Net-DNS-Resolver-Programmable to 0.009 in Rawhide:

    • BIGPRESH taking over maintainership of this seemingly orphaned but very useful distribution
    • Avoid deprecated make_query_packet() call (CPAN RT#109266)

    • Remove debian/ subdir (CPAN RT#108522)

    • Regenerate README via pod2readme

    • Fix version number in older changelog entry
    • Remove use of deprecated qv()

    • Import rcode list from Net::DNS (CPAN RT#96390)

    • Don't demand 5.10, work on perl ≥ 5.6

    • No taint mode flag in t/01-basic.t

    • Avoid problems with our $VERSION = '...' on one line

    • Fix handling pre-prepared ::Packet objects passed to send()

    • Additional tests
    • Add Scalar::Util to dependencies

    • Cleaner way to handle both arrays of strings and Net::DNS::Packet objects (CPAN RT#122542)

    • Extend tests to cover non-mocked queries too

Local Packages

  • Updated shorten (3.6.1) to add a patch to remove lots of warnings with recent gcc versions

  • Rebuilt davfs2 (1.5.4), tzip (1.12), ud (0.7.1) for the Fedora_27_Binutils_Mass_Rebuild

Monday 14th August 2017

Local Packages

  • Updated curl to 7.55.1:

    • build: Fix 'make install' with configure, install docs/libcurl/* too

    • make install: Add 8 missing man pages to the installation

    • curl: Do bounds check using a double comparison

    • dist: Add dictserver.py/negtelnetserver.py to release

    • digest_sspi: Don't reuse context if the user/passwd has changed

    • gitignore: Ignore top-level .vs folder

    • build: Check out *.sln files with Windows line endings

    • travis: Verify "make install"

    • dist: Fix the cmake build by shipping cmake_uninstall.cmake.in too

    • metalink: Fix error: ‘*’ in boolean context, suggest ‘&&’ instead

    • configure: Use the threaded resolver back-end by default if possible

    • mkhelp.pl: Allow executing this script directly

    • maketgz: Remove old *.dist files before making the tarball

    • openssl: Remove CONST_ASN1_BIT_STRING

    • openssl: Fix "error: this statement may fall through"

    • proxy: Fix memory leak in case of invalid proxy server name
    • curl/system.h: Support more architectures (OpenRISC, ARC)

    • docs: Fix typos
    • curl/system.h: Add Oracle Solaris Studio

    • CURLINFO_TOTAL_TIME: Could wrongly return 4200 seconds

    • docs: --connect-to clarified

    • cmake: Allow user to override CMAKE_DEBUG_POSTFIX

    • travis: Test cmake build on tarball too

    • redirect: Make it handle absolute redirects to IDN names
    • curl/system.h: Fix for gcc on PowerPC

    • curl --interface: Fixed for IPV6 unique local addresses

    • cmake: threads detection improvements

  • Updated perl-Net-DNS-Resolver-Programmable to 0.009:

    • BIGPRESH taking over maintainership of this seemingly orphaned but very useful distribution
    • Avoid deprecated make_query_packet() call (CPAN RT#109266)

    • Remove debian/ subdir (CPAN RT#108522)

    • Regenerate README via pod2readme

    • Fix version number in older changelog entry
    • Remove use of deprecated qv()

    • Import rcode list from Net::DNS (CPAN RT#96390)

    • Don't demand 5.10, work on perl ≥ 5.6

    • No taint mode flag in t/01-basic.t

    • Avoid problems with our $VERSION = '...' on one line

    • Fix handling pre-prepared ::Packet objects passed to send()

    • Additional tests
    • Add Scalar::Util to dependencies

    • Cleaner way to handle both arrays of strings and Net::DNS::Packet objects (CPAN RT#122542)

    • Extend tests to cover non-mocked queries too
  • Updated perl-Net-Server to 2.009:

    • Several long-awaited fixes
    • Log when a child exits abnormally (CPAN RT#86815)

    • Added delete-child hook
    • Add cleanup_dead_child_hook to PreFork server

    • Removed stray warn

    • Use File::Temp instead of POSIX::tmpnam

    • UNIX read_until to allow for SSL under unix sockets

  • Updated unrar to 5.50

  • Rebuilt libgpg-error (1.27), libidn (1.33), libmetalink (0.1.3), libnet (1.1.6), pptp (1.9.0) and xz (5.2.3) for the Fedora_27_Binutils_Mass_Rebuild

Tuesday 15th August 2017

Fedora Project

  • Updated perl-List-MoreUtils-XS to 0.422 in Rawhide:

    • Fix a lot of potential memory leaks when callbacks throw exceptions
    • Add some new functions: qsort, binsert, bremove, listcmp, arrayify (CPAN RT#17230), samples (CPAN RT#77562), minmaxstr (CPAN RT#106401), lower_bound, upper_bound, equal_range, frequencies, occurrences, mode (CPAN RT#91991), zip6 (CPAN RT#42921), reduce_0, reduce_1, reduce_u

    • Improve tests
    • Make List::MoreUtils::XS independent from List::MoreUtils

    • Note that List::MoreUtils::XS doesn't guarantee API stability: this feature is only provided through List::MoreUtils as frontend

    • Improve configure toolchain to use Config::AutoConf 0.315

    • Speed up some inner loops by hinting the expected result
    • Fix mind screwed up issue in upper_bound and reduce elements visited in equal_range

    • Correct license in META (CPAN RT#122702)

    • Fix issues with -DPERL_IMPLICIT_SYS on Windows with Strawberry-Perl

    • Add DESCRIPTION to Pod clarifying the role of List::MoreUtils::XS

    • Improve Makefile.PL regarding some build artifacts

Local Packages

  • Updated curl (7.55.1) to make zsh completion work again

  • Updated perl-List-MoreUtils-XS to 0.422 as per the Fedora version

Thursday 17th August 2017

Local Packages

  • Updated perl-DBI to 1.637:

    • Fix use of externally controlled format string (CWE-134) (GH#44); this could cause a crash if, for example, a db error contained a %

    • Fix extension detection for DBD::File related drivers

    • Fix tests for perl without dot in @INC (CPAN RT#120443)

    • Fix loss of error message on parent handle (GH#34)

    • Fix disappearing $_ inside callbacks (GH#47)

    • Allow objects to be used as passwords without throwing an error (GH#40)

    • Allow $sth NAME_* attributes to be set from Perl code (GH#45)

    • Added support for DBD::XMLSimple (GH#38)

    • Documentation updates:
      • Improve examples using eval to be more correct (GH#39)

      • Add cautionary note to prepare_cached docs re refs in %attr (GH#46)

      • Small POD changes (Getting Help -> Online) (GH#33)

      • Add links to more module names and fix typo (GH#43)

      • Typo fix (GH#37)

  • Updated perl-JSON-XS to 3.04:

    • Change exponential realloc algorithm on encoding and string decoding to be really exponential (this helps slow/debugging allocators such as libumem)

    • String encoding would needlessly over-allocate output space
    • Be very paranoid about extending buffer lengths and croak if buffers get too large, which might (or might not) improve security
    • Add cbor-packed type to json_xs

    • Switch from YAML to YAML::XS in json_xs, as YAML is way too buggy and outdated

  • Updated perl-Text-Diff to 1.45:

Friday 18th August 2017

Fedora Project

  • Updated perl-IO-Socket-SSL to 2.050 in F-27 and Rawhide:

    • Removed unnecessary settings of SSL_version and SSL_cipher_list from tests

    • protocol_version.t can now deal when TLS 1.0 and/or TLS 1.1 are not supported, as is the case with openssl versions in latest Debian (buster)

  • Updated perl-YAML-LibYAML to 0.66 in F-27 and Rawhide:

    • Dump() was modifying original data, adding a PV to numbers (GH#32, GH#55)

Local Packages

  • Updated perl-IO-Socket-SSL to 2.050 as per the Fedora version

  • Updated perl-YAML-LibYAML to 0.66 as per the Fedora version

Saturday 19th August 2017

Fedora Project

  • Updated perl-List-MoreUtils-XS to 0.423 in F-27 and Rawhide:

    • Fix dealing with lists with one element on bremove/binsert (GH#2)

    • Add support for compilers before C99
    • Fix some 32-bit compiler warnings
    • Add support for compilers without statement expression feature

Local Packages

  • Updated perl-List-MoreUtils-XS to 0.423 as per the Fedora version

  • Updated perl-Net-DNS to 1.12:

    • Fix CPAN RT#122586: Persistent UDP reports false timeouts

    • Fix CPAN RT#122352: bgsend(): TCP retry can stall for IO::Socket::IP before version 0.38

    • CDS/CDNSKEY: Implement RFC8078 erratum 5049

Monday 21st August 2017

Local Packages

  • Updated perl-Mail-Sendmail to 0.80:

    • Experimental SMTP AUTH support (LOGIN PLAIN CRAM-MD5 DIGEST-MD5)

    • Fix bug where one refused RCPT TO: would abort everything

    • Send EHLO and parse response (for later AUTH implementation)

    • Better handling of multi-line responses, and better error-messages
    • Also normalize line endings in headers
    • Now keeps the Sender header if it was used; previous versions only used it for the MAIL FROM: command and deleted it

    • No space between "MAIL FROM:" or "RCPT TO:" and address

    • NEILB got co-maint to do a release that includes META.yml and META.json

    • Switched to Dist::Zilla

    • Added COPYRIGHT section to pod

    • Fixed the NAME section in pod to follow expected format

    • Added "use warnings" and fixed all the warnings

    • Manually set $VERSION, as it's used in the code

Tuesday 22nd August 2017

Fedora Project

  • Updated perl-DateTime to 1.44 in F-27 and Rawhide:

    • Added a stringify() method, which does exactly the same thing as stringification overloading does (GH#58)

    • Added an is_last_day_of_month() method to indicate whether or not an object falls on the last day of its month (GH#60)

  • Updated perl-List-MoreUtils to 0.423 in F-27 and Rawhide:

    • Sync version with List::MoreUtils::XS

    • Add some new functions: qsort (XS only), binsert, bremove, listcmp, arrayify (CPAN RT#17230), samples (CPAN RT#77562), minmaxstr (CPAN RT#106401), lower_bound, upper_bound, equal_range, frequencies, occurrences, mode (CPAN RT#91991), zip6 (CPAN RT#42921), reduce_0, reduce_1, reduce_u

    • Add examples for binsert/bremove (LMU::XS GH#1)

    • Improve tests
    • Make List::MoreUtils::XS independent from List::MoreUtils

    • Improve Makefile.PL regarding some build artifacts

    • Update tests to latest List::MoreUtils::XS

    • Recommend List::MoreUtils::XS 0.423

Local Packages

  • Updated libxml2 (2.9.4) to rename the libxml2-python package to python2-libxml2 (see FinalizingFedoraSwitchtoPython3)

  • Updated perl-DateTime to 1.44 as per the Fedora version

  • Updated perl-List-MoreUtils to 0.423 as per the Fedora version

  • Updated perl-Module-CoreList to 5.20170821:

    • Updated for v5.27.3
  • Updated sendmail (8.15.2) to replace compile-fix patch by format-security patch from Debian, so as not to change status codes (Bug #1482808)

Wednesday 23rd August 2017

Fedora Project

  • Updated perl-MailTools to 2.19 in F-27 and Rawhide:

Local Packages

Friday 25th August 2017

Fedora Project

  • Updated libpng10 to 1.068 in F-27 and Rawhide:

    • Added png_check_chunk_length() function, and check all chunks except IDAT against the default 8MB limit; check IDAT against the maximum size computed from IHDR parameters

    • Check for 0 return from png_get_rowbytes() and added some (size_t) typecasts in contrib/pngmi to stop some Coverity issues (162705, 162706 and 162707)

Local Packages

  • Updated libpng10 to 1.068 as per the Fedora version

Tuesday 29th August 2017

Fedora Project

  • Updated perl-Cpanel-JSON-XS to 3.0239 in F-27 and Rawhide:

    • Make printing of numbers on perls earlier than 5.22 locale-insensitive, to produce a dot as decimal separator (GH#96)

    • Fix compilation under Windows (GH#98)

Local Packages

  • Updated curl (7.55.1) to fix NetworkManager connectivity check not working (Bug #1485702)

  • Updated dovecot:

  • Updated dovecot to 2.2.32:

    • imapc: Info-level line is logged every time when successfully connected to the remote server: this includes local/remote IP/port, which can be useful for matching against external logs

    • config: Log a warning if plugin { key=no } is used explicitly; v2.3 will support "no" properly in plugin settings, but for now any value at all for a boolean plugin setting is treated as "yes", even if it's written as explicit "no" - this change will now warn that it most likely won't work as intended

    • Various optimizations to avoid accessing files/directories when it's not necessary; especially avoid accessing mail root directories when INDEX directories point to a different filesystem

    • mail_location can now include ITERINDEX parameter, which tells Dovecot to perform mailbox listing from the INDEX path instead of from the mail root path; it's mainly useful when the INDEX storage is on a faster storage

    • mail_location can now include VOLATILEDIR=<path> parameter; this is used for creating lock files and in future potentially other files that don't need to exist permanently - the path could point to tmpfs for example (this is especially useful to avoid creating lock files to NFS or other remote filesystems)

    • mail_location's LISTINDEX=<path> can now contain a full path; this allows storing mailbox list index to a different storage than the rest of the indexes, for example to tmpfs

    • mail_location can now include NO-NOSELECT parameter; this automatically deletes any \NoSelect mailboxes that have no children (these mailboxes are sometimes confusing to users)

    • mail_location can now include BROKENCHAR=<char> parameter; this can be useful with imapc to access mailbox names that aren't valid mUTF-7 charset from remote servers

    • If mailbox_list_index_very_dirty_syncs=yes, the list index is no longer refreshed against filesystem when listing mailboxes; this allows the mailbox listing to be done entirely by only reading the mailbox list index

    • Added mailbox_list_index_include_inbox setting to control whether INBOX's STATUS information should be cached in the mailbox list index: the default is "no", but it may be useful to change it to "yes", especially if LISTINDEX points to tmpfs

    • userdb can return chdir=<path>, which overrides mail_home for the chdir location; this can be useful to avoid accessing home directory on login

    • userdb can return postlogin=<socket> to specify per-user imap/pop3 postlogin socket path

    • cassandra: Add support for result paging by adding page_size=<n> parameter to the connect setting

    • dsync/imapc, pop3-migration plugin: Strip also trailing tabs from headers when matching mails; this helps with migrations from Zimbra

    • imap_logout_format supports now %{appended} and %{autoexpunged}

    • virtual plugin: Optimize IDLE to use mailbox list index for finding out when something has changed

    • Added apparmor plugin (see https://wiki2.dovecot.org/Plugins/Apparmor)

    • virtual plugin: A lot of fixes; in many cases it was also working very inefficiently or even incorrectly

    • imap: NOTIFY parameter parsing was incorrectly "fixed" in v2.2.31; it was actually (mostly) working in previous versions, but broken in v2.2.31

    • Modseq tracking didn't always work correctly; this could have caused imap unhibernation to fail or IMAP QRESYNC/CONDSTORE extensions to not work perfectly

    • mdbox: "Inconsistency in map index" wasn't fixed automatically

    • dict-ldap: %variable values used in the LDAP filter weren't escaped

    • quota=count: quota_warning = -storage=.. was never executed (try #2); v2.2.31 fixed it for -messages, but not for -storage

    • imapc: ≥ 32 kB mail bodies were supposed to be cached for subsequent FETCHes, but weren't

    • quota-status service didn't support recipient_delimiter

    • acl: Don't access dovecot-acl-list files with acl_globals_only=yes

    • mail_location: If INDEX dir is set, mailbox deletion deletes its childrens' indexes; for example if "box" is deleted, "box/child" index directory was deleted as well (but mails were preserved)

    • director: v2.2.31 caused rapid reconnection loops to directors that were down

  • Updated pigeonhole to 0.4.20:

    • Made the retention period for redirect duplicate identifiers configurable, and changed the default retention period from 24 to 12 hours; for accounts that perform many redirects, the lda-dupes database could grow to impractical sizes
    • sieve-filter: Fixed memory leak: forgot to clean up script binary at end of execution

    • managesieve-login: Fixed handling of AUTHENTICATE command: a second authenticate command would be parsed incorrectly, a problem was caused by changes in the previous release

    • LDA Sieve plugin: Fixed minor memory leak caused by not cleaning up the sieve_discard script

  • Updated perl-Cpanel-JSON-XS to 3.0239 as per the Fedora version

Previous Month: July 2017
Next Month: September 2017

Recent