Paul's Blog Entries for November 2017
Wednesday 1st November 2017
Fedora Project
Updated perl-Module-Build-XSUtil to 0.17 in Rawhide:
- Support pure-perl build
Local Packages
Updated java-1.8.0-oracle:
- Use bundled limited and unlimited JCE policy, no longer setting up JCE policy with alternatives (thanks to Jonathan Underwood for these changes)
Add GitHub repo at https://github.com/pghmcfc/java-1.8.0-oracle to allow external contributors another way of contributing
Updated perl-Module-Build-XSUtil to 0.17 as per the Fedora version
Thursday 2nd November 2017
Fedora Project
Updated perl-Module-Build-XSUtil to 0.18 in Rawhide:
Remove Module::Build::Tiny from dependencies
Local Packages
Updated perl-Module-Build-XSUtil to 0.18 as per the Fedora version
Friday 3rd November 2017
Local Packages
Updated libxml2 to 2.9.7:
- Bug fix, portability and enhancement update
See https://mail.gnome.org/archives/xml/2017-November/msg00001.html
Rebuilt perl-XML-LibXML for libxml2-2.9.7
Monday 6th November 2017
Fedora Project
Updated perl-autovivification to 0.18 in Rawhide:
Fix compatibility with CV-in-stash optimization (CPAN RT#123411)
Fix strict/warn flags seeming to do nothing (CPAN RT#122956); the documentation has been amended to clarify how these two options are supposed to be used
Updated perl-Finance-Quote to 1.41 in F-26, F-26, F-27, Rawhide and EPEL-7:
Added AlphaVantage module
Some other module changes: yahoojson, Morningstar, Bourso, ASX, TSX (not working)
Updated perl-indirect to 0.38 in Rawhide:
Fix compatibility with CV-in-stash optimization (CPAN RT#123374)
Updated perl-Specio to 0.42 in Rawhide:
Fixed checks for whether a class is loaded in light of upcoming optimization in Perl 5.28 (GH#12)
The Perl library claimed it provided types named LaxVersionStr and StrictVersionStr but they were really named LaxVersion and StrictVersion; the names have now been fixed to match the documentation, so they are LaxVersionStr and StrictVersionStr
Updated perl-Test-Kwalitee to 1.27 in Rawhide:
Make taint test TODO when version.pm is not current (see CPAN RT#118087)
Updated perl-Text-CSV_XS to 1.34 in Rawhide:
Bad arg for formula (like "craok") will now die with error 1500
- Row report in formula reporting was off by 1
- Add a prominent section about BOM handling
Make sheet label more portable (csv2xlsx)
Allow munge => \%hash
Preserve first row in csv (set_column_names => 0)
Local Packages
Updated perl-DateTime-Locale to 1.17:
- Rebuilt all locale data with CLDR 32, released on 2017-11-01
Updated perl-DateTime-TimeZone to 2.15:
Updated perl-Specio to 0.42 as per the Fedora version
Updated perl-Test-Kwalitee to 1.27 as per the Fedora version
Updated perl-Text-CSV_XS to 1.34 as per the Fedora version
Updated perl-Variable-Magic to 0.62:
Fix compatibility with CV-in-stash optimization (CPAN RT#123314)
Tuesday 7th November 2017
Fedora Project
Updated perl-Finance-Quote to 1.43 in F-25, F-26, F-27, Rawhide, EPEL-6 and EPEL-7:
Added currency for .DE market
- Bug fix in currency determination regex
Wednesday 8th November 2017
Fedora Project
Updated perl-Finance-Quote 1.44 in F-25, F-26, F-27, Rawhide, EPEL-6 and EPEL-7:
Added currencies for .SA (Brazil) and .TO (Canada/Toronto) markets
Set up a pause of .7s between queries in AlphaVantage.pm to limit queries
Local Packages
Updated perl-Role-Tiny to 2.000006:
- Account for code references stored directly in stash (for perl 5.28)
- Work around hint leakage when loading modules in perl 5.8 and 5.10.1
Friday 10th November 2017
Fedora Project
Updated perl-Finance-Quote to 1.45 in F-25, F-26, F-27, Rawhide, EPEL-6 and EPEL-7:
- More suffix-currency pairs added
- GBP and GBX divided by 100
Updated perl-MIME-Types to 2.14 in Rawhide:
MojoX should not die on missing types (CPAN RT#123298)
Local Packages
Updated metamail (2.7) to require coreutils rather than mktemp, and generally remove a lot of legacy cruft from the spec
Updated perl-MIME-Types to 2.14 as per the Fedora version
Sunday 12th November 2017
Fedora Project
Updated perl-PadWalker to 2.3 in Rawhide:
Make tests work with -Ddefault_inc_excludes_dot (CPAN RT#120421)
Local Packages
Updated perl-PadWalker to 2.3 as per the Fedora version
Monday 13th November 2017
Fedora Project
Updated perl-Finance-Quote to 1.47 in F-25, F-26, F-27, Rawhide, EPEL-6 and EPEL-7:
Drop long-obsolete debian directory
AlphaVantage:
Added support for .IL ⇒ USD currency and division
- Graceful error catchup
Yahoojson:
- Module adapted to new URL and returned json
Use AlphaVantage for currency quotes instead of Yahoo
Updated perl-Moose to 2.2007 in Rawhide:
Documentation
The Moose::Manual::Attributes pod has been amended to clarify that 'required' attributes can be satisfied with a 'default' or 'builder' sub, and that 'ro' attributes can be set through the constructor
The Moose::Manual::Types pod has been amended to recommend Params::ValidationCompiler and Moops instead of older modules (which are slow and/or deprecated)
- Other small documentation fixes
Other
- Some dead code has been removed
All Moose exception classes have been made immutable
Local Packages
Updated perl-Moose to 2.2007 as per the Fedora version
Wednesday 15th November 2017
Fedora Project
Updated spamass-milter (0.4.0) in Rawhide to replace /bin/* dependencies with coreutils etc. (Bug #1512898)
Local Packages
Updated libgcrypt to 1.7.9:
Mitigate a local side-channel attack on Curve25519 dubbed "May the Fourth be With You" (CVE-2017-0379)
Updated perl-Compress-Raw-Zlib to 2.075:
Update bundled zlib to 1.2.11
perl 5.26.1 is vulnerable to CVE-2016-9843, CVE-2016-9841, CVE-2016-9840, CVE-2016-9842 (CPAN RT#123245)
Zlib.xs: Don't allow offset to be greater than length of buffer in crc32
Zlib.xs: Change my_zcalloc to use safecalloc
The link, https://github.com/madler/zlib/issues/253, is the upstream report for the remaining valgrind errors not already dealt with by 1.2.11; using calloc in Zlib.xs for now as a workaround (CPAN RT#121074)
I also tweaked the build to use the bundled zlib if the system version was older than 1.2.11
Updated perl-Filter to 1.58:
Updated perl-Search-Elasticsearch to 6.00:
Released 6.00 with default API for 6_0
Legacy 5_0 API now released separately
Trace logging now includes content-type headers where appropriate
- Deprecation warnings are now parsed to extract the message only
Improved boolean value handling in query string parameters - now accepts true, false, \1, \0, or a JSON::PP::Boolean object
Handle removal of '.' from @INC in perl 5.26
Updated spamass-milter (0.4.0) as per the Fedora version
Thursday 16th November 2017
Local Packages
Friday 17th November 2017
Fedora Project
Updated perl-MetaCPAN-Client to 2.019000 in Rawhide:
Added 'package' type support for scrolled searches
Local Packages
Updated perl-MetaCPAN-Client to 2.019000 as per the Fedora version
Updated perl-Moo to 2.003003:
- Test tweaks
- Fix handling of code refs stored directly in the stash (for perl 5.28)
- Consider inline packages with constants in them as being loaded
Stubs will be treated as methods that exist when inflating to Moose
Avoid loading overload.pm unless required
Sunday 19th November 2017
Fedora Project
Updated perl-MetaCPAN-Client to 2.021000 in Rawhide:
Added support for /search/autocomplete/suggest
- Scroller fix for page skipping
- Sorting in scrolled searches
- Type check clean-up
Local Packages
Updated perl-MetaCPAN-Client to 2.021000 as per the Fedora version
Monday 20th November 2017
Fedora Project
Updated perl-JSON to 2.96 in Rawhide:
- Fixed packaging issue
Updated backportPP with JSON::PP 2.96
Avoid use of newer Test::More features (CPAN RT#122421)
Updated perl-JSON-PP to 2.96 in Rawhide:
json_pp now prints an encoded json string (CPAN RT#123653)
Fix is_bool to use ->isa("JSON::PP::Boolean"), instead of UNIVERSAL::isa("JSON::PP::Boolean") (GH#34)
Avoid use of newer Test::More features (CPAN RT#122421)
Updated perl-Test-Simple to 1.302111 in Rawhide:
- Fix some fragile tests
- Apply p5p test patch from Craig A. Berry
Allow regexp in Test::Tester
Local Packages
Updated perl-Devel-StackTrace to 2.03:
If all frames in the trace were skipped (via skip_frames, frame_filter, ignore_*, etc.), then the stringified stack trace would be an empty string; this has been changed to always return the message given to the constructor or the string "Trace begun" (GH#15)
Updated perl-JSON to 2.96 as per the Fedora version
Updated perl-JSON-PP to 2.96 as per the Fedora version
Updated perl-Test-Simple to 1.302111 as per the Fedora version
Updated perl-Test2-Suite to 0.000084:
Add Test2::Tools::Tester
Tuesday 21st November 2017
Fedora Project
Updated perl-JSON to 2.97000 in Rawhide:
Updated backportPP with JSON::PP 2.97000
- Use 5 digit minor version number for a while to avoid confusion
Fixed is_bool to use blessed() instead of ref()
- I'm sticking to 2 digit minor version downstream in case upstream changes their mind again
Updated perl-JSON-PP to 2.97000 in Rawhide:
Fix is_bool to use blessed() instead of ref()
Use 5 digit minor version number for a while to avoid confusion (GH#33)
- I'm sticking to 2 digit minor version downstream as we already bumped epoch
Updated perl-Test-Simple to 1.302113 in Rawhide:
- Fix test on threaded 5.8
Fix SIGPIPE in IPC test
Mark t/Test2/regression/gh_16.t as usually AUTHOR_TESTING only
Local Packages
Updated perl-JSON to 2.97000 as per the Fedora version
Updated perl-JSON-PP to 2.97000 as per the Fedora version
Updated perl-Module-CoreList to 5.20171120:
- Updated for v5.27.6
Updated perl-Test-Simple to 1.302113 as per the Fedora version
Wednesday 22nd November 2017
Fedora Project
Updated perl-MCE to 1.832 in Rawhide:
Added LWP::UserAgent to list for enabling posix_exit
- Improved number-sequence generation for big integers
Improved wantarray support in MCE::Mutex synchronize
Removed limit check on chunk_size option
Updated perl-MCE-Shared to 1.833 in Rawhide:
Condvar timedwait supports floating seconds via Time::HiRes; the documentation was correct, but not high resolution in code
Added LWP::UserAgent to list for enabling posix_exit
- Improved number-sequence generation for big integers
Improved exiting (CLOSE, DESTROY) during cleanup state
- Improved signal handling when server is waiting on IO
Updated "OBJECT SHARING" section in documentation
Bumped MCE dependency to 1.832
Updated perl-Moose to 2.2008 in Rawhide:
Fixed empty exception messages under -d (new issue in 2.2007)
Local Packages
Updated perl-Compress-Raw-Zlib to 2.076:
Zlib.xs:
Silence gcc compiler warnings when -Wsign-compare is enabled
Fix compilation warnings with clang (CPAN RT#123688)
zlib-src/inflate.c and zlib-src/infback.c:
Silence gcc compiler warnings when -Wimplicit-fallthrough is enabled
Fix compilation warnings with gcc-7.* (CPAN RT#123358)
Makefile.PL:
Windows uses -lzlib, Linux uses -lz
Fix wrong external zlib name used on Windows (CPAN RT#123699)
Updated perl-MCE to 1.832 as per the Fedora version
Updated perl-MCE-Shared to 1.833 as per the Fedora version
Updated perl-Moose to 2.2008 as per the Fedora version
Thursday 23rd November 2017
Local Packages
Updated perl-ExtUtils-CBuilder to 0.280230:
- Restore compatibility of test suite with Perl 5.6
Fix link() on Windows, broken in version 0.280226
Remove dependency on 'vars' package
Used OurPkgVersion instead of PkgVersion
Friday 24th November 2017
Fedora Project
Updated perl-Params-ValidationCompiler to 0.25 in Rawhide:
All exceptions now include a stack trace by default when treated as a string; this makes finding where validation failed a lot easier (GH#18)
The name for a subroutine is now used in some exception messages, even if Sub::Util cannot be installed
Local Packages
Updated perl-Params-ValidationCompiler to 0.25 as per the Fedora version
Monday 27th November 2017
Fedora Project
Updated perl-Mouse to 2.5.0 in Rawhide:
Local Packages
Updated perl-Mouse to 2.5.0 as per the Fedora version
Tuesday 28th November 2017
Fedora Project
Updated perl-Params-ValidationCompiler to 0.26 in Rawhide:
Local Packages
Updated perl-Params-ValidationCompiler to 0.26 as per the Fedora version
Thursday 30th November 2017
Fedora Project
Updated perl-Moose to 2.2009 in Rawhide:
- Fixed tests (new in 2.2008) that sometimes fail under Windows
Some hash native trait methods (notably clear and delete) were broken in various ways when the associated attribute's type allowed for coercion of the hash values and coercion was enabled for the hash (CPAN RT#123737)
Updated perl-Test-Simple to 1.302118 in Rawhide:
Added pre-subtest hook to Test2::API (GH#801)
ipc_wait now reports exit and signal values
Add better interface for ipc_wait
- Fix event Out of Order bug
Add driver_abort() hook for IPC Drivers
Local Packages
Updated curl to 7.57.0:
auth: Add support for RFC7616 - HTTP Digest access authentication
share: Add support for sharing the connection cache
- HTTP: Implement Brotli content encoding
Fix CVE-2017-8816: NTLM buffer overflow via integer overflow
Fix CVE-2017-8817: FTP wildcard out of bounds read
Fix CVE-2017-8818: SSL out of buffer access
curl_mime_filedata.3: Fix typos
libtest: Add required test libraries for lib1552 and lib1553
Fix time diffs for systems using unsigned time_t
ftplistparser: Memory leak fix: always free temporary memory
multi: Allow table handle sizes to be overridden
- wildcards: Don't use with non-supported protocols
curl_fnmatch: Return error on illegal wildcard pattern
transfer: Fix chunked-encoding upload too early exit
curl_setup: Improve detection of CURL_WINDOWS_APP
- resolvers: Only include anything if needed
setopt: Fix CURLOPT_SSH_AUTH_TYPES option read
appveyor: Add a win32 build
Curl_timeleft: Change return type to timediff_t
cmake: Export libcurl and curl targets to use by other cmake projects
curl: In -F option arg, comma is a delimiter for files only
curl: Improved ";type=" handling in -F option arguments
timeval: Use mach_absolute_time() on MacOS
curlx: The timeval functions are no longer provided as curlx_*
mkhelp.pl: Do not generate comment with current date
memdebug: Use send/recv signature for curl_dosend/curl_dorecv
cookie: Avoid NULL dereference
url: Fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
include: Remove conncache.h inclusion from where it's not needed
CURLOPT_MAXREDIRS: Allow -1 as a value
tests: Fixed torture tests on tests 556 and 650
http2: Fixed OOM handling in upgrade request
url: Fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
CURLOPT_INFILESIZE: Accept -1
curl: Pass through [] in URLs instead of calling globbing error
curl: Speed up handling of many URLs
ntlm: Avoid malloc(0) for zero length passwords
url: Remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
- HTTP: Support multiple Content-Encodings
travis: Add a job with brotli enabled
url: Remove unnecessary NULL-check
fnmatch: Remove dead code
connect: Store IPv6 connection status after valid connection
imap: Deal with commands case insensitively
--interface: Add support for Linux VRF
content_encoding: Fix inflate_stream for no bytes available
cmake: Correctly include curl.rc in Windows builds
cmake: Add missing setmode check
connect.c: Remove executable bit on file
- SMB: Fix uninitialized local variable
zlib/brotli: Only include header files in modules needing them
- URL: Return error on malformed URLs with junk after IPv6 bracket
openssl: Fix too broad use of HAVE_OPAQUE_EVP_PKEY
macOS: Fix missing connectx function with Xcode version older than 9.0
--resolve: Allow IP address within [] brackets
examples/curlx: Fix code style
ntlm: Remove unnecessary NULL-check to please scan-build
Curl_llist_remove: Fix potential NULL pointer deref
mime: Fix "Value stored to 'sz' is never read" scan-build error
openssl: Fix "Value stored to 'rc' is never read" scan-build error
http2: Fix "Value stored to 'hdbuf' is never read" scan-build error
http2: Fix "Value stored to 'end' is never read" scan-build error
Curl_open: Fix OOM return error correctly
url: Reject ASCII control characters and space in host names
examples/rtsp: Clear RANGE again after use
connect: Improve the bind error message
make: Fix "make distclean"
connect: Add support for new TCP Fast Open API on Linux
metalink: Fix memory leak and NULL pointer dereference
URL: Update "file:" URL handling
ssh: Remove check for a NULL pointer
global_init: Ignore CURL_GLOBAL_SSL's absence
Updated perl-Moose to 2.2009 as per the Fedora version
Updated perl-Test-Simple to 1.302118 as per the Fedora version
Updated perl-Test2-Suite to 0.000092:
- Ensure that objects are not used in Boolean contexts, second attempt
Make an AUTHOR_TEST require 5.20
Merge in Test2::Workflow
Merge in Test2::AsyncSubtest
Merge in Test2::Manual
Previous Month: October 2017
Next Month: December 2017