Wednesday 16th May 2018
Fedora Project
Updated perl-Moose to 2.2011 in Rawhide:
- Bug Fixes
Various native trait methods would refuse "0" where they expected a string; they have been fixed to allow all defined, non-reference values, and all objects with string, number, or boolean overloads
- Documentation
Moose::Manual::Construction now notes that roles can modify the BUILD sub
- Other
Adjustments have been made to the Makefile for 'bmake', so it now works when not run in compatibility mode
Local Packages
Updated curl to 7.60.0:
Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
Add --haproxy-protocol for the command line tool
Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
FTP: Shutdown response buffer overflow CVE-2018-1000300
RTSP: Bad headers buffer over-read CVE-2018-1000301
- FTP: Fix typo in recursive callback detection for seeking
test1208: Marked flaky
- HTTP: Make header-less responses still count correct body size
user-agent.d: Mention --proxy-header as well
- http2: fixes typo
- Clean up: Misc typos in strings and comments
- rate-limit: Use three second window to better handle high speeds
examples/hiperfifo.c: Improved
- pause: When changing pause state, update socket state
multi: Improved pending transfers handling ⇒ improved performance
curl_version_info.3: Fix ssl_version description
add_handle/easy_perform: Clear errorbuffer on start if set
- darwinssl: Fix iOS build
cmake: Add support for brotli
- parsedate: Support UT timezone
vauth/ntlm.h: Fix the #ifdef header guard
lib/curl_path.h: Added #ifdef header guard
vauth/cleartext: Fix integer overflow check
CURLINFO_COOKIELIST.3: Made the example not leak memory
cookie.d: Mention that "-" as filename means stdin
CURLINFO_SSL_VERIFYRESULT.3: Fixed the example
http2: Read pending frames (including GOAWAY) in connection-check
timeval: Remove compilation warning by casting
- cmake: Avoid warn-as-error during config checks
travis-ci: Enable -Werror for CMake builds
openldap: Fix for NULL return from ldap_get_attribute_ber()
- Threaded resolver: Track resolver time and set suitable timeout values
cmake: Add advapi32 as explicit link library for win32
Docs: Fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
test1148: Set a fixed locale for the test
cookies: When reading from a file, only remove_expired once
- cookie: Store cookies per top-level-domain-specific hash table
- openssl: Fix build with LibreSSL 2.7
- tls: Fix mbedTLS 2.7.0 build + handle sha256 failures
openssl: RESTORED verify locations when verifypeer==0
file: Restore old behaviour for file:////foo/bar URLs
FTP: Allow PASV on IPv6 connections when a proxy is being used
build-openssl.bat: Allow custom paths for VS and perl
winbuild: Make the clean target work without build-type
build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
curl: Retry on FTP 4xx, ignore other protocols
configure: Detect (and use) sa_family_t
examples/sftpuploadresume: Fix Windows large file seek
build: Clean up to fix clang warnings/errors
- winbuild: Updated the documentation
- lib: Silence null-dereference warnings
travis: Bump to clang 6 and gcc 7
travis: Build libpsl and make builds use it
proxy: Show getenv proxy use in verbose output
duphandle: Make sure CURLOPT_RESOLVE is duplicated
all: Refactor malloc+memset to use calloc
checksrc: Fix typo
system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
vauth: Fix typo
ssh: Show libSSH2 error code when closing fails
test1148: Tolerate progress updates better
urldata: Make service names unconditional
configure: Keep LD_LIBRARY_PATH changes local
ntlm_sspi: Fix authentication using Credential Manager
- schannel: Add client certificate authentication
winbuild: Support custom devel paths for each dependency
schannel: Add support for CURLOPT_CAINFO
http2: Handle on_begin_headers() called more than once
- openssl: Support OpenSSL 1.1.1 verbose-mode trace messages
openssl: Fix subjectAltName check on non-ASCII platforms
http2: Avoid strstr() on data not zero terminated
- http2: Clear the "drain counter" when a stream is closed
http2: Handle GOAWAY properly
tool_help: Clarify --max-time unit of time is seconds
curl.1: Clarify that options and URLs can be mixed
http2: Convert an assert to run-time check
curl_global_sslset: Always provide available backends
ftplistparser: Keep state between invokes
Curl_memchr: Zero length input can't match
examples/sftpuploadresume: typecast fseek argument to long
examples/http2-upload: Expand buffer to avoid silly warning
- ctype: Restore character classification for non-ASCII platforms
mime: Avoid NULL pointer dereference risk
- cookies: Ensure that we have cookies before writing jar
os400.c: Fix checksrc warnings
configure: Provide --with-wolfssl as an alias for --with-cyassl
cyassl: Adapt to libraries without TLS 1.0 support built-in
http2: Get rid of another strstr
checksrc: Force indentation of lines after an else
- cookies: Remove unused macro
CURLINFO_PROTOCOL.3: Mention the existing defined names
tests: Provide 'manual' as a feature to optionally require
travis: Enable libssh2 on both macos and Linux
CURLOPT_URL.3: Added ENCODING section
- wolfssl: Fix non-blocking connect
vtls: Don't define MD5_DIGEST_LENGTH for wolfssl
- docs: Remove extraneous commas in man pages
URL: Fix ASCII dependency in strcpy_url and strlen_url
ssh-libssh.c: Fix left shift compiler warning
configure: Only check for CA bundle for file-using SSL backends
- travis: Add an mbedtls build
http: Don't set the "rewind" flag when not uploading anything
configure: Put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
transfer: Don't unset writesockfd on set-up of multiplexed conns
vtls: Use unified "supports" bitfield member in backends
- URLs: Fix one more http url
- travis: Add a build using WolfSSL
openssl: Change FILE ops to BIO ops
- travis: Add build using NSS
- smb: Reject negative file sizes
- cookies: Accept parameter names as cookie name
http2: getsock fix for uploads
- All over: Fixed format specifiers
http2: Use the correct function pointer typedef
Updated perl-Moose to 2.2011 as per the Fedora version