#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Wednesday 6th February 2019 ===

==== Fedora Project ====

 * Updated `perl-Perl-PrereqScanner-NotQuiteLite` (0.9903) submission to address issues raised in the [[RedHatBugzilla:1672313|Fedora package review]] by Jitka Plesnikova
  * Switch upstream URL from `search.cpan.org` to `metacpan.org`
  * Build-Require `perl(if)` for test suite
 . I also modernized the spec using `%make_build` and `%make_install`
 * Imported and built `perl-Perl-PrereqScanner-NotQuiteLite` (0.9903) for F-29 and Rawhide
 * Updated `perl-Test-Simple` to 1.302162 in Rawhide:
  * Remove SHM Optimization
  * Typo fixes in documentation

==== Local Packages ====

 * Updated `curl` to 7.64.0:
  * [[CVE:2018-16890|CVE-2018-16890]]: NTLM type-2 out-of-bounds buffer read
  * [[CVE:2019-3822|CVE-2019-3822]]: NTLMv2 type-3 header stack buffer overflow
  * [[CVE:2019-3823|CVE-2019-3823]]: SMTP end-of-response out-of-bounds read
  * cookies: Leave secure cookies alone
  * hostip: Support wildcard hosts
  * http: Implement trailing headers for chunked transfers
  * http: Added options for allowing HTTP/0.9 responses
  * timeval: Use high resolution timestamps on Windows
  * FAQ: Remove mention of sourceforge for github
  * OS400: Handle memory error in list conversion
  * OS400: Upgrade ILE/RPG binding
  * README: Add codacy code quality badge
  * Revert `http_negotiate`: do not close connection
  * THANKS: Added several missing names from year ≤ 2000
  * build: Make '`tidy`' target work for metalink builds
  * cmake: Added checks for variadic macros
  * cmake: Updated check for `HAVE_POLL_FINE` to match autotools
  * cmake: Use lowercase for function name like the rest of the code
  * configure: Detect xlclang separately from clang
  * configure: Fix `recv`/`send`/`select` detection on Android
  * configure: Rewrite `--enable-code-coverage`
  * conncache_unlock: Avoid indirection by changing input argument type
  * cookie: Fix comment typo
  * cookies: Allow secure override when done over HTTPS
  * cookies: Extend domain checks to non psl builds
  * cookies: Skip custom cookies when redirecting cross-site
  * `curl --xattr`: Strip credentials from any URL that is stored
  * `curl -J`: Refuse to append to the destination file
  * `curl/urlapi.h`: include "`curl.h`" first
  * `curl_multi_remove_handle()` don't block terminating c-ares requests
  * darwinssl: Accept setting max-tls with default min-tls
  * disconnect: Separate connections and easy handles better
  * disconnect: Set `conn->data` for protocol disconnect
  * `docs/version.d`: Mention MultiSSL
  * docs: Fix the `--tls-max` description
  * docs: Use `$(INSTALL_DATA)` to install man page
  * docs: Use meaningless port number in `CURLOPT_LOCALPORT` example
  * gopher: Always include the entire gopher-path in request
  * http2: Clear pause stream id if it gets closed
  * if2ip: Remove unused function `Curl_if_is_interface_name`
  * libssh: Do not let libssh create socket
  * libssh: Enable `CURLOPT_SSH_KNOWNHOSTS` and `CURLOPT_SSH_KEYFUNCTION` for libssh
  * libssh: free `sftp_canonicalize_path()` data correctly
  * libtest/stub_gssapi: Use "real" `snprintf`
  * mbedtls: Use `VERIFYHOST`
  * multi: Multiplexing improvements
  * multi: Set the `EXPIRE_*TIMEOUT` timers at `TIMER_STARTSINGLE` time
  * ntlm: Fix NTMLv2 compliance
  * ntlm_sspi: Add support for channel binding
  * openssl: Adapt to 3.0.0, `OpenSSL_version_num()` is deprecated
  * openssl: Fix the SSL_get_tlsext_status_ocsp_resp call
  * openvms: Fix OpenSSL discovery on VAX
  * openvms: Fix typos in documentation
  * os400: Add a missing closing bracket
  * os400: Fix extra parameter syntax error
  * pingpong: Change default response timeout to 120 seconds
  * pingpong: Ignore regular timeout in disconnect phase
  * printf: Fix format specifiers
  * runtests.pl: Fix `perl` call to include `srcdir`
  * schannel: Fix compiler warning
  * schannel: Preserve original certificate path parameter
  * schannel: Stop calling it "winssl"
  * sigpipe: If mbedTLS is used, ignore `SIGPIPE`
  * smb: Fix incorrect path in request if connection reused
  * ssh: Log the libssh2 error message when ssh session startup fails
  * test1558: Verify `CURLINFO_PROTOCOL` on `file://` transfer
  * test1561: Improve test name
  * test1653: Make it survive torture tests
  * tests: Allow tests to pass by 2037-02-12
  * tests: Move `objnames-*` from lib into tests
  * timediff: Fix math for unsigned `time_t`
  * timeval: Disable MSVC Analyzer !GetTickCount warning
  * tool_cb_prg: Avoid integer overflow
  * travis: Added cmake build for osx
  * urlapi: Fix port parsing of eol colon
  * urlapi: Distinguish possibly empty query
  * urlapi: Fix parsing ipv6 with zone index
  * urldata: Rename `easy_conn` to just `conn`
  * winbuild: Conditionally use `/DZLIB_WINAPI`
  * wolfssl: Fix memory-leak in threaded use
  * spnego_sspi: Add support for channel binding
 * Updated `perl-Perl-PrereqScanner-NotQuiteLite` (0.9903) to switch upstream URL from `search.cpan.org` to `metacpan.org`
 * Updated `perl-Test-Simple` to 1.302162 as per the Fedora version
 * Rebuilt `c-ares` (1.15.0), `perl-Net-DNS` (1.19) and `perl-Specio` (0.43) for the FedoraProject:Fedora_30_Mass_Rebuild

----