#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Wednesday 16th May 2018 ===

==== Fedora Project ====

 * Updated `perl-Moose` to 2.2011 in Rawhide:
 . Bug Fixes
  * Various native trait methods would refuse "`0`" where they expected a string; they have been fixed to allow all defined, non-reference values, and all objects with string, number, or boolean overloads
 . Documentation
  * `Moose::Manual::Construction` now notes that roles can modify the `BUILD` sub
 . Other
  * Adjustments have been made to the `Makefile` for '`bmake`', so it now works when not run in compatibility mode

==== Local Packages ====

 * Updated `curl` to 7.60.0:
  * Add `CURLOPT_HAPROXYPROTOCOL`, support for the HAProxy PROXY protocol
  * Add `--haproxy-protocol` for the command line tool
  * Add `CURLOPT_DNS_SHUFFLE_ADDRESSES`, shuffle returned IP addresses
  * FTP: Shutdown response buffer overflow [[CVE:2018-1000300|CVE-2018-1000300]]
  * RTSP: Bad headers buffer over-read [[CVE:2018-1000301|CVE-2018-1000301]]
  * FTP: Fix typo in recursive callback detection for seeking
  * `test1208`: Marked flaky
  * HTTP: Make header-less responses still count correct body size
  * `user-agent.d`: Mention `--proxy-header` as well
  * http2: fixes typo
  * Clean up: Misc typos in strings and comments
  * rate-limit: Use three second window to better handle high speeds
  * `examples/hiperfifo.c`: Improved
  * pause: When changing pause state, update socket state
  * `multi`: Improved pending transfers handling ⇒ improved performance
  * `curl_version_info.3`: Fix `ssl_version` description
  * `add_handle`/`easy_perform`: Clear `errorbuffer` on start if set
  * darwinssl: Fix iOS build
  * cmake: Add support for `brotli`
  * parsedate: Support UT timezone
  * `vauth/ntlm.h`: Fix the `#ifdef` header guard
  * `lib/curl_path.h`: Added `#ifdef` header guard
  * `vauth/cleartext`: Fix integer overflow check
  * `CURLINFO_COOKIELIST.3`: Made the example not leak memory
  * `cookie.d`: Mention that "`-`" as filename means `stdin`
  * `CURLINFO_SSL_VERIFYRESULT.3`: Fixed the example
  * http2: Read pending frames (including `GOAWAY`) in connection-check
  * `timeval`: Remove compilation warning by casting
  * cmake: Avoid warn-as-error during config checks
  * travis-ci: Enable `-Werror` for CMake builds
  * openldap: Fix for `NULL` return from `ldap_get_attribute_ber()`
  * Threaded resolver: Track resolver time and set suitable timeout values
  * cmake: Add `advapi32` as explicit link library for win32
  * Docs: Fix `CURLINFO_*_T` examples use of `CURL_FORMAT_CURL_OFF_T`
  * `test1148`: Set a fixed locale for the test
  * cookies: When reading from a file, only `remove_expired` once
  * cookie: Store cookies per top-level-domain-specific hash table
  * openssl: Fix build with LibreSSL 2.7
  * tls: Fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when `verifypeer==0`
  * file: Restore old behaviour for `file:////foo/bar` URLs
  * FTP: Allow `PASV` on IPv6 connections when a proxy is being used
  * `build-openssl.bat`: Allow custom paths for `VS` and `perl`
  * winbuild: Make the `clean` target work without `build-type`
  * `build-openssl.bat`: Refer to VS2017 as VC14.1 instead of VC15
  * `curl`: Retry on FTP `4xx`, ignore other protocols
  * `configure`: Detect (and use) `sa_family_t`
  * `examples/sftpuploadresume`: Fix Windows large file seek
  * build: Clean up to fix `clang` warnings/errors
  * winbuild: Updated the documentation
  * lib: Silence null-dereference warnings
  * travis: Bump to `clang` 6 and `gcc` 7
  * travis: Build `libpsl` and make builds use it
  * proxy: Show `getenv` proxy use in verbose output
  * `duphandle`: Make sure `CURLOPT_RESOLVE` is duplicated
  * all: Refactor `malloc`+`memset` to use `calloc`
  * `checksrc`: Fix typo
  * `system.h`: Add `sparcv8plus` to `oracle/sunpro` 32-bit detection
  * `vauth`: Fix typo
  * ssh: Show `libSSH2` error code when closing fails
  * `test1148`: Tolerate progress updates better
  * `urldata`: Make service names unconditional
  * `configure`: Keep `LD_LIBRARY_PATH` changes local
  * `ntlm_sspi`: Fix authentication using Credential Manager
  * schannel: Add client certificate authentication
  * `winbuild`: Support custom devel paths for each dependency
  * schannel: Add support for `CURLOPT_CAINFO`
  * http2: Handle `on_begin_headers()` called more than once
  * openssl: Support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: Fix `subjectAltName` check on non-ASCII platforms
  * http2: Avoid `strstr()` on data not zero terminated
  * http2: Clear the "drain counter" when a stream is closed
  * http2: Handle `GOAWAY` properly
  * `tool_help`: Clarify `--max-time` unit of time is seconds
  * `curl.1`: Clarify that options and URLs can be mixed
  * http2: Convert an `assert` to run-time check
  * `curl_global_sslset`: Always provide available backends
  * `ftplistparser`: Keep state between invokes
  * `Curl_memchr`: Zero length input can't match
  * `examples/sftpuploadresume`: typecast `fseek` argument to `long`
  * `examples/http2-upload`: Expand buffer to avoid silly warning
  * ctype: Restore character classification for non-ASCII platforms
  * mime: Avoid `NULL` pointer dereference risk
  * cookies: Ensure that we have cookies before writing jar
  * `os400.c`: Fix `checksrc` warnings
  * `configure`: Provide `--with-wolfssl` as an alias for `--with-cyassl`
  * `cyassl`: Adapt to libraries without TLS 1.0 support built-in
  * http2: Get rid of another `strstr`
  * `checksrc`: Force indentation of lines after an `else`
  * cookies: Remove unused macro
  * `CURLINFO_PROTOCOL.3`: Mention the existing defined names
  * tests: Provide '`manual`' as a feature to optionally require
  * travis: Enable `libssh2` on both macos and Linux
  * `CURLOPT_URL.3`: Added `ENCODING` section
  * wolfssl: Fix non-blocking connect
  * `vtls`: Don't define `MD5_DIGEST_LENGTH` for wolfssl
  * docs: Remove extraneous commas in man pages
  * URL: Fix ASCII dependency in `strcpy_url` and `strlen_url`
  * `ssh-libssh.c`: Fix left shift compiler warning
  * `configure`: Only check for CA bundle for file-using SSL backends
  * travis: Add an mbedtls build
  * http: Don't set the "`rewind`" flag when not uploading anything
  * `configure`: Put `CURLDEBUG` and `DEBUGBUILD` in `lib/curl_config.h`
  * transfer: Don't unset `writesockfd` on set-up of multiplexed conns
  * `vtls`: Use unified "`supports`" bitfield member in backends
  * URLs: Fix one more http url
  * travis: Add a build using WolfSSL
  * openssl: Change `FILE` ops to `BIO` ops
  * travis: Add build using NSS
  * smb: Reject negative file sizes
  * cookies: Accept parameter names as cookie name
  * http2: `getsock` fix for uploads
  * All over: Fixed format specifiers
  * http2: Use the correct function pointer `typedef`
 * Updated `perl-Moose` to 2.2011 as per the Fedora version

----