Wednesday 27th March 2019
Fedora Project
Updated perl-Cpanel-JSON-XS to 4.11 in F-30 and Rawhide:
Fix unicode strings with BOM corrupt ->utf8 state (GH#125); the BOM encoding affects only its very own decode call, not its object
Local Packages
Updated curl to 7.64.1:
- alt-svc: Experimental support added
configure: Add --with-amissl
AppVeyor: Add MinGW-w64 and classic Mingw builds
AppVeyor: Switch VS 2015 builds to VS 2017 image
CURLU: Fix NULL dereference when used over proxy
Curl_easy: Remove req.maxfd - never used!
Curl_now: Figure out windows version in win32_init
Curl_resolv: Fix a gcc -Werror=maybe-uninitialized warning
- DoH: Inherit some SSL options from user's easy handle
- Secure Transport: No more "darwinssl"
- Secure Transport: tvOS 11 is required for ALPN support
- cirrus: Added FreeBSD builds using Cirrus CI
- cleanup: Make local functions static
cli tool: Do not use mime.h private structures
cmdline-opts/proxytunnel.d: The option tunnels all protocols
configure: Add additional libraries to check for LDAP support
configure: Remove the unused fdopen macro
configure: Show features as well in the final summary
conncache: Use conn->data to know if a transfer owns it
connection: Never reuse CONNECT_ONLY connections
connection_check: Restore original conn->data after the check
connection_check: Set ->data to the transfer doing the check
- cookie: Add support for cookie prefixes
- cookies: Dotless names can set cookies again
cookies: Fix NULL dereference if flushing cookies with no CookieInfo set
curl.1: --user and --proxy-user are hidden from ps output
curl.1: Mark the argument to --cookie as <data|filename>
curl.h: Use __has_declspec_attribute for shared builds
curl: Display --version features sorted alphabetically
curl: Fix FreeBSD compiler warning in the --xattr code
curl: Remove MANUAL from -M output
curl_easy_duphandle.3: Clarify that a dup-ed handle has no shares
curl_multi_remove_handle.3: Use at any time, just not from within callbacks
curl_url.3: This API is not experimental any more
- dns: Release sharelock as soon as possible
docs: Update max-redirs.d phrasing
easy: Fix win32 init to work without CURL_GLOBAL_WIN32
examples/10-at-a-time.c: Improve readability and simplify
examples/cacertinmem.c: Use multiple certificates for loading CA-chain
examples/crawler: Fix the Accept-Encoding setting
examples/ephiperfifo.c: Various fixes
examples/externalsocket: Add missing close socket calls
examples/http2-download: Cleaned up
examples/http2-serverpush: Add some sensible error checks
examples/http2-upload: Cleaned up
examples/httpcustomheader: Value stored to 'res' is never read
examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'
examples/sftpuploadresume: Value stored to 'result' is never read
examples: Only include <curl/curl.h>
examples: Remove recursive calls to curl_multi_socket_action
- examples: Remove superfluous null-pointer checks
- file: Fix "Checking if unsigned variable 'readcount' is less than zero"
fnmatch: Disable if FTP is disabled
gnutls: Remove call to deprecated gnutls_compression_get_name
gopher: Remove check for path == NULL
- gssapi: Fix deprecated header warnings
hostip: Make create_hostcache_id avoid alloc + free
http2: multi_connchanged() moved from multi.c, only used for h2
http2: Verify :authority in push promise requests
- http: Make adding a blank header thread-safe
- http: Send payload when (proxy) authentication is done
http: Set state.infilesize when sending multipart formposts
makefile: Make checksrc and hugefile commands "silent"
mbedtls: Make it build even if MBEDTLS_VERSION_C isn't set
mbedtls: Release sessionid resources on error
- memdebug: Log pointer before freeing its data
memdebug: Make debug-specific functions use curl_dbg_ prefix
mime: Put the boundary buffer into the curl_mime struct
multi: Call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME
- multi: Remove verbose "Expire in" ... messages
- multi: Removed unused code for request retries
- multi: Support verbose conncache closure handle
- negotiate: Fix for HTTP POST with Negotiate
- openssl: Add support for TLS ASYNC state
openssl: If cert type is ENG and no key specified, key is ENG too
pretransfer: Don't strlen() POSTFIELDS set for GET requests
- rand: Fix a mismatch between comments in source and header
runtests: Detect "schannel" as an alias for "winssl"
- schannel: Be quiet - remove verbose output
- schannel: Close TLS before removing conn from cache
schannel: Support CALG_ECDH_EPHEM algorithm
scripts/completion.pl: Also generate fish completion file
singlesocket: Fix the 'sincebefore' placement
source: Fix two 'nread' may be used uninitialized warnings
ssh: Fix Condition '!status' is always true
- ssh: Loop the state machine if not done and not blocking
strerror: Make the strerror function use local buffers
system_win32: Move win32_init here from easy.c
test578: Make it read data from the correct test
- tests: Fixed XML validation errors in some test files
tests: Add stderr comparison to the test suite
- tests: Fix multiple may be used uninitialized warnings
- threaded-resolver: Shut down the resolver thread without error message
tool_cb_wrt: Fix writing to Windows null device NUL
tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr
tool_operate: Build on AmigaOS
tool_operate: Fix typecheck warning
transfer.c: Do not compute length of undefined hex buffer
travis: Add build using gnutls
- travis: Add scan-build
- travis: Bump the used wolfSSL version to 4.0.0
travis: Enable valgrind for the iconv tests
travis: Use updated compiler versions: clang 7 and gcc 8
unit1307: Require FTP support
unit1651: Survive curl_easy_init() fails
url/idnconvert: Remove scan for ≤ 32 ascii values
url: Change conn shutdown order to ensure SOCKETFUNCTION callbacks
urlapi: Reduce variable scope, remove unreachable 'break'
- urldata: Convert bools to bitfields and move to end
- urldata: Simplify byte counters
- urlglob: Argument with 'nonnull' attribute passed null
version.c: Silent scan-build even when librtmp is not enabled
- vtls: Rename some of the SSL functions
- wolfssl: Stop custom-adding curves
- x509asn1: "Dereference of null pointer"
- x509asn1: Clean up and unify code layout
zsh.pl: Escape ':' character
zsh.pl: Update regex to better match curl -h output
Updated perl-Cpanel-JSON-XS to 4.11 as per the Fedora version
Updated perl-DateTime-TimeZone to 2.34:
- This release is based on version 2019a of the Olson database
- Contemporary changes for Palestine and Metlakatla, Alaska
Updated perl-Net-SSLeay to 1.86_09 (see Changes file for details)