#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Wednesday 27th March 2019 ===

==== Fedora Project ====

 * Updated `perl-Cpanel-JSON-XS` to 4.11 in F-30 and Rawhide:
  * Fix unicode strings with BOM corrupt `->utf8` state ([[https://github.com/rurban/Cpanel-JSON-XS/issues/125|GH#125]]); the BOM encoding affects only its very own decode call, not its object

==== Local Packages ====

 * Updated `curl` to 7.64.1:
  * alt-svc: Experimental support added
  * `configure`: Add `--with-amissl`
  * !AppVeyor: Add MinGW-w64 and classic Mingw builds
  * !AppVeyor: Switch VS 2015 builds to VS 2017 image
  * CURLU: Fix `NULL` dereference when used over proxy
  * `Curl_easy`: Remove `req.maxfd` - never used!
  * `Curl_now`: Figure out windows version in `win32_init`
  * `Curl_resolv`: Fix a `gcc -Werror=maybe-uninitialized` warning
  * DoH: Inherit some SSL options from user's easy handle
  * Secure Transport: No more "darwinssl"
  * Secure Transport: tvOS 11 is required for ALPN support
  * cirrus: Added FreeBSD builds using Cirrus CI
  * cleanup: Make local functions static
  * cli tool: Do not use `mime.h` private structures
  * `cmdline-opts`/`proxytunnel.d`: The option tunnels all protocols
  * `configure`: Add additional libraries to check for LDAP support
  * `configure`: Remove the unused `fdopen` macro
  * `configure`: Show features as well in the final summary
  * conncache: Use `conn->data` to know if a transfer owns it
  * connection: Never reuse `CONNECT_ONLY` connections
  * `connection_check`: Restore original `conn->data` after the check
  * `connection_check`: Set `->data` to the transfer doing the check
  * cookie: Add support for cookie prefixes
  * cookies: Dotless names can set cookies again
  * cookies: Fix `NULL` dereference if flushing cookies with no `CookieInfo` set
  * `curl.1`: `--user` and `--proxy-user` are hidden from `ps` output
  * `curl.1`: Mark the argument to `--cookie` as `<data|filename>`
  * `curl.h`: Use `__has_declspec_attribute` for shared builds
  * `curl`: Display `--version` features sorted alphabetically
  * `curl`: Fix FreeBSD compiler warning in the `--xattr` code
  * `curl`: Remove `MANUAL` from `-M` output
  * `curl_easy_duphandle.3`: Clarify that a `dup`-ed handle has no shares
  * `curl_multi_remove_handle.3`: Use at any time, just not from within callbacks
  * `curl_url.3`: This API is not experimental any more
  * dns: Release sharelock as soon as possible
  * docs: Update `max-redirs.d` phrasing
  * easy: Fix win32 `init` to work without `CURL_GLOBAL_WIN32`
  * `examples/10-at-a-time.c`: Improve readability and simplify
  * `examples/cacertinmem.c`: Use multiple certificates for loading CA-chain
  * `examples/crawler`: Fix the `Accept-Encoding` setting
  * `examples/ephiperfifo.c`: Various fixes
  * `examples/externalsocket`: Add missing close socket calls
  * `examples/http2-download`: Cleaned up
  * `examples/http2-serverpush`: Add some sensible error checks
  * `examples/http2-upload`: Cleaned up
  * `examples/httpcustomheader`: Value stored to '`res`' is never read
  * `examples/postinmemory`: Potential leak of memory pointed to by '`chunk.memory`'
  * `examples/sftpuploadresume`: Value stored to '`result`' is never read
  * examples: Only include `<curl/curl.h>`
  * examples: Remove recursive calls to `curl_multi_socket_action`
  * examples: Remove superfluous null-pointer checks
  * file: Fix "Checking if unsigned variable 'readcount' is less than zero"
  * `fnmatch`: Disable if FTP is disabled
  * gnutls: Remove call to deprecated `gnutls_compression_get_name`
  * gopher: Remove check for `path == NULL`
  * gssapi: Fix deprecated header warnings
  * hostip: Make `create_hostcache_id` avoid `alloc` + `free`
  * http2: `multi_connchanged()` moved from `multi.c`, only used for h2
  * http2: Verify `:authority` in push promise requests
  * http: Make adding a blank header thread-safe
  * http: Send payload when (proxy) authentication is done
  * http: Set `state.infilesize` when sending multipart formposts
  * makefile: Make `checksrc` and `hugefile` commands "silent"
  * mbedtls: Make it build even if `MBEDTLS_VERSION_C` isn't set
  * mbedtls: Release `sessionid` resources on error
  * memdebug: Log pointer before freeing its data
  * memdebug: Make debug-specific functions use `curl_dbg_` prefix
  * mime: Put the boundary buffer into the `curl_mime struct`
  * multi: Call multi_done on connect timeouts, fixes `CURLINFO_TOTAL_TIME`
  * multi: Remove verbose "Expire in" ... messages
  * multi: Removed unused code for request retries
  * multi: Support verbose conncache closure handle
  * negotiate: Fix for HTTP POST with Negotiate
  * openssl: Add support for TLS ASYNC state
  * openssl: If cert type is `ENG` and no key specified, key is `ENG` too
  * pretransfer: Don't `strlen()` `POSTFIELDS` set for `GET` requests
  * rand: Fix a mismatch between comments in source and header
  * `runtests`: Detect "schannel" as an alias for "winssl"
  * schannel: Be quiet - remove verbose output
  * schannel: Close TLS before removing conn from cache
  * schannel: Support `CALG_ECDH_EPHEM` algorithm
  * `scripts/completion.pl`: Also generate `fish` completion file
  * singlesocket: Fix the '`sincebefore`' placement
  * source: Fix two '`nread`' may be used uninitialized warnings
  * ssh: Fix Condition '`!status`' is always true
  * ssh: Loop the state machine if not done and not blocking
  * `strerror`: Make the `strerror` function use local buffers
  * `system_win32`: Move `win32_init` here from `easy.c`
  * `test578`: Make it read data from the correct test
  * tests: Fixed XML validation errors in some test files
  * tests: Add `stderr` comparison to the test suite
  * tests: Fix multiple may be used uninitialized warnings
  * threaded-resolver: Shut down the resolver thread without error message
  * `tool_cb_wrt`: Fix writing to Windows null device `NUL`
  * `tool_getpass`: `termios.h` is present on AmigaOS 3, but no `tcgetattr`/`tcsetattr`
  * `tool_operate`: Build on AmigaOS
  * `tool_operate`: Fix typecheck warning
  * `transfer.c`: Do not compute length of undefined hex buffer
  * travis: Add build using `gnutls`
  * travis: Add scan-build
  * travis: Bump the used wolfSSL version to 4.0.0
  * travis: Enable `valgrind` for the `iconv` tests
  * travis: Use updated compiler versions: `clang` 7 and `gcc` 8
  * `unit1307`: Require FTP support
  * `unit1651`: Survive `curl_easy_init()` fails
  * `url/idnconvert`: Remove scan for ≤ 32 ascii values
  * url: Change conn shutdown order to ensure `SOCKETFUNCTION` callbacks
  * urlapi: Reduce variable scope, remove unreachable '`break`'
  * urldata: Convert bools to bitfields and move to end
  * urldata: Simplify byte counters
  * urlglob: Argument with 'nonnull' attribute passed null
  * `version.c`: Silent scan-build even when `librtmp` is not enabled
  * vtls: Rename some of the SSL functions
  * wolfssl: Stop custom-adding curves
  * x509asn1: "Dereference of null pointer"
  * x509asn1: Clean up and unify code layout
  * `zsh.pl`: Escape '`:`' character
  * `zsh.pl`: Update regex to better match `curl -h` output
 * Updated `perl-Cpanel-JSON-XS` to 4.11 as per the Fedora version
 * Updated `perl-DateTime-TimeZone` to 2.34:
  * This release is based on version 2019a of the Olson database
  * Contemporary changes for Palestine and Metlakatla, Alaska
 * Updated `perl-Net-SSLeay` to 1.86_09 (see [[https://metacpan.org/changes/release/CHRISN/Net-SSLeay-1.86_09|Changes]] file for details)

----