PaulHowarth/Blog/2017-10-04

Wednesday 4th October 2017

Local Packages

  • Updated curl to 7.56.0:

    • curl: Enable compression for SCP/SFTP with --compressed-ssh

    • libcurl: Enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION

    • vtls: Added dynamic changing SSL backend with curl_global_sslset()

    • New MIME API, curl_mime_init() and friends

    • openssl: Initial SSLKEYLOGFILE implementation

    • FTP: zero terminate the entry path even on bad input (CVE-2017-1000254)

    • examples/ftpuploadresume.c: Use portable code

    • runtests: Match keywords case insensitively

    • travis: Build the examples too
    • strtoofft: Reduce integer overflow risks globally

    • zsh.pl: Produce a working completion script again

    • cmake: Remove dead code for CURL_DISABLE_RTMP

    • progress: Track total times following redirects
    • configure: Fix --disable-threaded-resolver

    • cmake: Remove dead code for DISABLED_THREADSAFE

    • configure: Fix clang version detection

    • darwinssl: Fix error: variable length array used

    • travis: Add metalink to some osx builds
    • configure: Check for __builtin_available() availability

    • http_proxy: Fix build error for CURL_DOES_CONVERSIONS

    • examples/ftpuploadresume: checksrc compliance

    • ftp: Fix CWD when doing multicwd then nocwd on same connection

    • system.h: Remove all CURL_SIZEOF_* defines

    • http: Don't wait on CONNECT when there is no proxy

    • system.h: Check for __ppc__ as well

    • http2_recv: Return error better on fatal h2 errors

    • scripts/contri*sh: Use "git log --use-mailmap"

    • tftp: Fix memory leak on too long filename

    • system.h: Fix build for hppa

    • cmake: Enable picky compiler options with clang and gcc

    • makefile.m32: Add support for libidn2

    • curl: Turn off MinGW CRT's globbing

    • request-target.d: Mention added in 7.55.0

    • curl: Shorten and clean up CA cert verification error message

    • imap: Support PREAUTH

    • CURLOPT_USERPWD.3: See also CURLOPT_PROXYUSERPWD

    • examples/threaded-ssl: Mention that this is for openssl before 1.1

    • winbuild: Fix embedded manifest option

    • tests: Make sure libtests and unittests call curl_global_cleanup()

    • system.h: include sys/poll.h for AIX

    • darwinssl: Handle long strings in TLS certs

    • strtooff: Fix build for systems with long long but no strtoll

    • asyn-thread: Improved clean-up after OOM situations

    • HELP-US.md: "How to get started helping out in the curl project"

    • curl.h: CURLSSLBACKEND_WOLFSSL used wrong value

    • unit1301: Fix error message on first test

    • ossfuzz: Moving towards the ideal integration

    • http: Fix a memory leakage in checkrtspprefix()

    • examples/post-callback: Stop returning one byte at a time

    • schannel: return CURLE_SSL_CACERT on failed verification

    • MAIL-ETIQUETTE: Added "1.9 Your emails are public"

    • http-proxy: Treat all 2xx as CONNECT success

    • openssl: Use OpenSSL's default ciphers by default

    • runtests.pl: Support attribute "nonewline" in part verify/upload

    • configure: Remove --enable-soname-bump and SONAME_BUMP

    • travis: Add c-ares enabled builds linux + osx

    • vtls: Fix WolfSSL 3.12 build problems
    • http-proxy: When not doing CONNECT, that phase is done immediately

    • configure: Fix curl_off_t check's include order

    • configure: Use -Wno-varargs on clang 3.9[.X] debug builds

    • rtsp: Do not call fwrite() with NULL pointer FILE *

    • mbedtls: Enable CA path processing

    • travis: Add build without HTTP/SMTP/IMAP
    • checksrc: Verify more code style rules

    • HTTP proxy: On connection re-use, still use the new remote port
    • tests: Add initial gssapi test using stub implementation

    • rtsp: Segfault when using WRITEDATA

    • docs: Clarify the CURLOPT_INTERLEAVE* options behaviour

    • non-ascii: Use iconv() with 'char **' argument

    • server/getpart: Provide dummy function to build conversion enabled

    • conversions: Fix several compiler warnings
    • openssl: Add missing includes

    • schannel: Support partial send for when data is too large

    • socks: Fix incorrect port number in SOCKS4 error message
    • curl: Fix integer overflow in timeout options

  • Updated perl-Digest-SHA to 5.98:

    • Removed "portable" mode from shasum and addfile

      • Rarely used, mostly in outdated systems
      • Potentially confusing features (e.g. \r\r\n\n)

      • Universal Newlines mode (-U) a much cleaner approach

      • Mimics Universal Newlines in Python
    • shasum now uses Digest::SHA explicitly

      • No longer loads Digest::SHA::PurePerl as an option

      • Hence no need for -R switch

      • Digest::SHA::PurePerl has its own shasum: shasumpp

  • Updated perl-Term-Table to 0.010:

    • Further optimize term_size when SIGWINCH is supported


Recent