#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Thursday 30th November 2017 ===

==== Fedora Project ====

 * Updated `perl-Moose` to 2.2009 in Rawhide:
  * Fixed tests (new in 2.2008) that sometimes fail under Windows
  * Some hash native trait methods (notably `clear` and `delete`) were broken in various ways when the associated attribute's type allowed for coercion of the hash values and coercion was enabled for the hash ([[CPAN:123737|CPAN RT#123737]])
 * Updated `perl-Test-Simple` to 1.302118 in Rawhide:
  * Added pre-`subtest` hook to `Test2::API` ([[https://github.com/Test-More/test-more/pull/801|GH#801]])
  * `ipc_wait` now reports exit and signal values
  * Add better interface for `ipc_wait`
  * Fix event Out of Order bug
  * Add `driver_abort()` hook for IPC Drivers

==== Local Packages ====

 * Updated `curl` to 7.57.0:
  * `auth`: Add support for RFC7616 - HTTP Digest access authentication
  * `share`: Add support for sharing the connection cache
  * HTTP: Implement Brotli content encoding
  * Fix [[CVE:2017-8816|CVE-2017-8816]]: NTLM buffer overflow via integer overflow
  * Fix [[CVE:2017-8817|CVE-2017-8817]]: FTP wildcard out of bounds read
  * Fix [[CVE:2017-8818|CVE-2017-8818]]: SSL out of buffer access
  * `curl_mime_filedata.3`: Fix typos
  * `libtest`: Add required test libraries for `lib1552` and `lib1553`
  * Fix time diffs for systems using unsigned `time_t`
  * `ftplistparser`: Memory leak fix: always free temporary memory
  * `multi`: Allow table handle sizes to be overridden
  * wildcards: Don't use with non-supported protocols
  * `curl_fnmatch`: Return error on illegal wildcard pattern
  * `transfer`: Fix chunked-encoding upload too early exit
  * `curl_setup`: Improve detection of `CURL_WINDOWS_APP`
  * resolvers: Only include anything if needed
  * `setopt`: Fix `CURLOPT_SSH_AUTH_TYPES` option read
  * `appveyor`: Add a win32 build
  * `Curl_timeleft`: Change return type to `timediff_t`
  * `cmake`: Export `libcurl` and `curl` targets to use by other `cmake` projects
  * `curl`: In `-F` option arg, comma is a delimiter for files only
  * `curl`: Improved "`;type=`" handling in `-F` option arguments
  * `timeval`: Use `mach_absolute_time()` on MacOS
  * `curlx`: The `timeval` functions are no longer provided as `curlx_*`
  * `mkhelp.pl`: Do not generate comment with current date
  * `memdebug`: Use `send`/`recv` signature for `curl_dosend`/`curl_dorecv`
  * `cookie`: Avoid `NULL` dereference
  * `url`: Fix `CURLOPT_POSTFIELDSIZE` arg value check to allow `-1`
  * `include`: Remove `conncache.h` inclusion from where it's not needed
  * `CURLOPT_MAXREDIRS`: Allow `-1` as a value
  * tests: Fixed torture tests on tests `556` and `650`
  * `http2`: Fixed OOM handling in upgrade request
  * `url`: Fix `CURLOPT_DNS_CACHE_TIMEOUT` arg value check to allow `-1`
  * `CURLOPT_INFILESIZE`: Accept `-1`
  * `curl`: Pass through `[]` in URLs instead of calling globbing error
  * `curl`: Speed up handling of many URLs
  * `ntlm`: Avoid `malloc(0)` for zero length passwords
  * `url`: Remove faulty arg value check from `CURLOPT_SSH_AUTH_TYPES`
  * HTTP: Support multiple Content-Encodings
  * `travis`: Add a job with `brotli` enabled
  * `url`: Remove unnecessary `NULL`-check
  * `fnmatch`: Remove dead code
  * `connect`: Store IPv6 connection status after valid connection
  * `imap`: Deal with commands case insensitively
  * `--interface`: Add support for Linux VRF
  * `content_encoding`: Fix `inflate_stream` for no bytes available
  * `cmake`: Correctly include `curl.rc` in Windows builds
  * `cmake`: Add missing `setmode` check
  * `connect.c`: Remove executable bit on file
  * SMB: Fix uninitialized local variable
  * `zlib`/`brotli`: Only include header files in modules needing them
  * URL: Return error on malformed URLs with junk after IPv6 bracket
  * `openssl`: Fix too broad use of `HAVE_OPAQUE_EVP_PKEY`
  * macOS: Fix missing `connectx` function with Xcode version older than 9.0
  * `--resolve`: Allow IP address within `[]` brackets
  * `examples/curlx`: Fix code style
  * `ntlm`: Remove unnecessary `NULL`-check to please scan-build
  * `Curl_llist_remove`: Fix potential `NULL` pointer deref
  * `mime`: Fix "`Value stored to 'sz' is never read`" scan-build error
  * `openssl`: Fix "`Value stored to 'rc' is never read`" scan-build error
  * `http2`: Fix "`Value stored to 'hdbuf' is never read`" scan-build error
  * `http2`: Fix "`Value stored to 'end' is never read`" scan-build error
  * `Curl_open`: Fix OOM return error correctly
  * `url`: Reject ASCII control characters and space in host names
  * `examples/rtsp`: Clear `RANGE` again after use
  * `connect`: Improve the `bind` error message
  * `make`: Fix "`make distclean`"
  * `connect`: Add support for new TCP Fast Open API on Linux
  * `metalink`: Fix memory leak and `NULL` pointer dereference
  * URL: Update "`file:`" URL handling
  * `ssh`: Remove check for a `NULL` pointer
  * `global_init`: Ignore `CURL_GLOBAL_SSL`'s absence
 * Updated `perl-Moose` to 2.2009 as per the Fedora version
 * Updated `perl-Test-Simple` to 1.302118 as per the Fedora version
 * Updated `perl-Test2-Suite` to 0.000092:
  * Ensure that objects are not used in Boolean contexts, second attempt
  * Make an `AUTHOR_TEST` require 5.20
  * Merge in `Test2::Workflow`
  * Merge in `Test2::AsyncSubtest`
  * Merge in `Test2::Manual`

----