PaulHowarth/Blog/2017-11-30

Thursday 30th November 2017

Fedora Project

  • Updated perl-Moose to 2.2009 in Rawhide:

    • Fixed tests (new in 2.2008) that sometimes fail under Windows
    • Some hash native trait methods (notably clear and delete) were broken in various ways when the associated attribute's type allowed for coercion of the hash values and coercion was enabled for the hash (CPAN RT#123737)

  • Updated perl-Test-Simple to 1.302118 in Rawhide:

    • Added pre-subtest hook to Test2::API (GH#801)

    • ipc_wait now reports exit and signal values

    • Add better interface for ipc_wait

    • Fix event Out of Order bug
    • Add driver_abort() hook for IPC Drivers

Local Packages

  • Updated curl to 7.57.0:

    • auth: Add support for RFC7616 - HTTP Digest access authentication

    • share: Add support for sharing the connection cache

    • HTTP: Implement Brotli content encoding
    • Fix CVE-2017-8816: NTLM buffer overflow via integer overflow

    • Fix CVE-2017-8817: FTP wildcard out of bounds read

    • Fix CVE-2017-8818: SSL out of buffer access

    • curl_mime_filedata.3: Fix typos

    • libtest: Add required test libraries for lib1552 and lib1553

    • Fix time diffs for systems using unsigned time_t

    • ftplistparser: Memory leak fix: always free temporary memory

    • multi: Allow table handle sizes to be overridden

    • wildcards: Don't use with non-supported protocols
    • curl_fnmatch: Return error on illegal wildcard pattern

    • transfer: Fix chunked-encoding upload too early exit

    • curl_setup: Improve detection of CURL_WINDOWS_APP

    • resolvers: Only include anything if needed
    • setopt: Fix CURLOPT_SSH_AUTH_TYPES option read

    • appveyor: Add a win32 build

    • Curl_timeleft: Change return type to timediff_t

    • cmake: Export libcurl and curl targets to use by other cmake projects

    • curl: In -F option arg, comma is a delimiter for files only

    • curl: Improved ";type=" handling in -F option arguments

    • timeval: Use mach_absolute_time() on MacOS

    • curlx: The timeval functions are no longer provided as curlx_*

    • mkhelp.pl: Do not generate comment with current date

    • memdebug: Use send/recv signature for curl_dosend/curl_dorecv

    • cookie: Avoid NULL dereference

    • url: Fix CURLOPT_POSTFIELDSIZE arg value check to allow -1

    • include: Remove conncache.h inclusion from where it's not needed

    • CURLOPT_MAXREDIRS: Allow -1 as a value

    • tests: Fixed torture tests on tests 556 and 650

    • http2: Fixed OOM handling in upgrade request

    • url: Fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1

    • CURLOPT_INFILESIZE: Accept -1

    • curl: Pass through [] in URLs instead of calling globbing error

    • curl: Speed up handling of many URLs

    • ntlm: Avoid malloc(0) for zero length passwords

    • url: Remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES

    • HTTP: Support multiple Content-Encodings
    • travis: Add a job with brotli enabled

    • url: Remove unnecessary NULL-check

    • fnmatch: Remove dead code

    • connect: Store IPv6 connection status after valid connection

    • imap: Deal with commands case insensitively

    • --interface: Add support for Linux VRF

    • content_encoding: Fix inflate_stream for no bytes available

    • cmake: Correctly include curl.rc in Windows builds

    • cmake: Add missing setmode check

    • connect.c: Remove executable bit on file

    • SMB: Fix uninitialized local variable
    • zlib/brotli: Only include header files in modules needing them

    • URL: Return error on malformed URLs with junk after IPv6 bracket
    • openssl: Fix too broad use of HAVE_OPAQUE_EVP_PKEY

    • macOS: Fix missing connectx function with Xcode version older than 9.0

    • --resolve: Allow IP address within [] brackets

    • examples/curlx: Fix code style

    • ntlm: Remove unnecessary NULL-check to please scan-build

    • Curl_llist_remove: Fix potential NULL pointer deref

    • mime: Fix "Value stored to 'sz' is never read" scan-build error

    • openssl: Fix "Value stored to 'rc' is never read" scan-build error

    • http2: Fix "Value stored to 'hdbuf' is never read" scan-build error

    • http2: Fix "Value stored to 'end' is never read" scan-build error

    • Curl_open: Fix OOM return error correctly

    • url: Reject ASCII control characters and space in host names

    • examples/rtsp: Clear RANGE again after use

    • connect: Improve the bind error message

    • make: Fix "make distclean"

    • connect: Add support for new TCP Fast Open API on Linux

    • metalink: Fix memory leak and NULL pointer dereference

    • URL: Update "file:" URL handling

    • ssh: Remove check for a NULL pointer

    • global_init: Ignore CURL_GLOBAL_SSL's absence

  • Updated perl-Moose to 2.2009 as per the Fedora version

  • Updated perl-Test-Simple to 1.302118 as per the Fedora version

  • Updated perl-Test2-Suite to 0.000092:

    • Ensure that objects are not used in Boolean contexts, second attempt
    • Make an AUTHOR_TEST require 5.20

    • Merge in Test2::Workflow

    • Merge in Test2::AsyncSubtest

    • Merge in Test2::Manual


Recent