PaulHowarth/Blog/2017-10-23

Monday 23rd October 2017

Fedora Project

  • Updated perl-IO-Socket-SSL to 2.052 in Rawhide:

    • Disable NPN support if LibreSSL ≥ 2.6.1 is detected since they've replaced the functions with dummies instead of removing NPN completely or setting OPENSSL_NO_NEXTPROTONEG

    • t/01loadmodule.t shows more output helpful in debugging problems

    • Update fingerprints for external tests
    • Update documentation to make behaviour of syswrite more clear

  • Updated perl-Test-Simple to 1.302106 in Rawhide:

    • Combine multiple diags into one event

    • Make version number in HashBase sane

Local Packages

  • Updated curl to 7.56.1:

    • imap: If a FETCH response has no size, don't call write callback (CVE-2017-1000257)

    • ftp: UBsan fixup 'pointer index expression overflowed'

    • failf: Skip the sprintf() if there are no consumers

    • fuzzer: Move to using external curl-fuzzer

    • lib/Makefile.m32: Allow customizing dll suffixes

    • docs: Fix typo in curl_mime_data_cb man page

    • darwinssl: Add support for TLSv1.3
    • build: Fix --disable-crypto-auth

    • lib/config-win32.h: Let SMB/SMBS be enabled with OpenSSL/NSS

    • openssl: Fix build without HAVE_OPAQUE_EVP_PKEY

    • strtoofft: Remove extraneous null check

    • multi_cleanup: Call DONE on handles that never got that

    • tests: Added flaky keyword to tests 587 and 644

    • pingpong: Return error when trying to send without connection

    • remove_handle: Call multi_done() first, then clear dns cache pointer

    • mime: Be tolerant about setting twice the same header list in a part
    • mime: Improve unbinding top multipart from easy handle
    • mime: Avoid resetting a part's encoder when part's contents change
    • mime: Refuse to add subparts to one of their own descendants
    • RTSP: Avoid integer overflow on funny RTSP responses
    • curl: Don't pass semicolons when parsing Content-Disposition

    • openssl: Enable PKCS12 support for !BoringSSL

    • FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION/

    • CURLOPT_NOPROGRESS.3: Also refer to xferinfofunction

    • CURLOPT_XFERINFODATA.3: Fix duplicate see also

    • test298: Verify --ftp-method nocwd with URL encoded path

    • FTP: URL decode path for dir listing in nocwd mode

    • smtp_done: Fix memory leak on send failure

    • ftpserver: Support case insensitive commands

    • test950: Verify SMTP with custom request

    • openssl: Don't use old BORINGSSL_YYYYMM macros

    • setopt: Update current connection SSL verify parameters

    • winbuild/BUILD.WINDOWS.txt: Mention WITH_NGHTTP2

    • curl: Reimplement stdin buffering in -F option

    • mime: Keep "text/plain" content type if user-specified

    • mime: Fix the content reader to handle >16K data properly

    • configure: Remove the C++ compiler check

    • memdebug: Trace send, recv and socket

    • runtests: Use valgrind for torture as well

    • ldap: Silence clang warning

    • makefile.m32: Allow to override gcc, ar and ranlib

    • setopt: Avoid integer overflows when setting millisecond values

    • setopt: Range check most long options

    • ftp: Reject illegal IP/port in PASV 227 response

    • mime: Do not reuse previously computed multipart size
    • vtls: Change struct Curl_ssl 'close' field name to 'close_one'

    • os400: Add missing symbols in config file
    • mime: Limit base64-encoded lines length to 76 characters
    • mk-ca-bundle: Remove URL for aurora

    • mk-ca-bundle: Fix URL for NSS

  • Updated perl-Class-Accessor to 0.51:

  • Updated perl-IO-Socket-SSL to 2.052 as per the Fedora version

  • Updated perl-Module-CoreList to 5.20171020:

    • Updated for v5.27.5
  • Updated perl-Test-Simple to 1.302106 as per the Fedora version

  • Updated perl-Test2-Suite to 0.000082:

    • Add Test2::Compare::Float to handle floating point comparison issues with representation error

    • Add float() to Test2::Utils::Compare and import Test2::Compare::Float

    • Import and Export Test2::Utils::Compare::float in Test2::V0

    • Documentation fixes
    • Better 5.10.0/utf8 fix
    • VSTRING comparisons

    • Bag compare now handles duplicates better


Recent