PaulHowarth/Blog/2019-03-27

Wednesday 27th March 2019

Fedora Project

• Updated perl-Cpanel-JSON-XS to 4.11 in F-30 and Rawhide:

  • Fix unicode strings with BOM corrupt ->utf8 state (GH#125); the BOM encoding affects only its very own decode call, not its object

Local Packages

• Updated curl to 7.64.1:

  • alt-svc: Experimental support added

  • configure: Add --with-amissl

  • AppVeyor: Add MinGW-w64 and classic Mingw builds

  • AppVeyor: Switch VS 2015 builds to VS 2017 image

  • CURLU: Fix NULL dereference when used over proxy

  • Curl_easy: Remove req.maxfd - never used!

  • Curl_now: Figure out windows version in win32_init

  • Curl_resolv: Fix a gcc -Werror=maybe-uninitialized warning

  • DoH: Inherit some SSL options from user's easy handle
  • Secure Transport: No more "darwinssl"
  • Secure Transport: tvOS 11 is required for ALPN support
  • cirrus: Added FreeBSD builds using Cirrus CI
  • cleanup: Make local functions static

  • cli tool: Do not use mime.h private structures

  • cmdline-opts/proxytunnel.d: The option tunnels all protocols

  • configure: Add additional libraries to check for LDAP support

  • configure: Remove the unused fdopen macro

  • configure: Show features as well in the final summary

  • conncache: Use conn->data to know if a transfer owns it

  • connection: Never reuse CONNECT_ONLY connections

  • connection_check: Restore original conn->data after the check

  • connection_check: Set ->data to the transfer doing the check

  • cookie: Add support for cookie prefixes
  • cookies: Dotless names can set cookies again

  • cookies: Fix NULL dereference if flushing cookies with no CookieInfo set

  • curl.1: --user and --proxy-user are hidden from ps output

  • curl.1: Mark the argument to --cookie as <data|filename>

  • curl.h: Use __has_declspec_attribute for shared builds

  • curl: Display --version features sorted alphabetically

  • curl: Fix FreeBSD compiler warning in the --xattr code

  • curl: Remove MANUAL from -M output

  • curl_easy_duphandle.3: Clarify that a dup-ed handle has no shares

  • curl_multi_remove_handle.3: Use at any time, just not from within callbacks

  • curl_url.3: This API is not experimental any more

  • dns: Release sharelock as soon as possible

  • docs: Update max-redirs.d phrasing

  • easy: Fix win32 init to work without CURL_GLOBAL_WIN32

  • examples/10-at-a-time.c: Improve readability and simplify

  • examples/cacertinmem.c: Use multiple certificates for loading CA-chain

  • examples/crawler: Fix the Accept-Encoding setting

  • examples/ephiperfifo.c: Various fixes

  • examples/externalsocket: Add missing close socket calls

  • examples/http2-download: Cleaned up

  • examples/http2-serverpush: Add some sensible error checks

  • examples/http2-upload: Cleaned up

  • examples/httpcustomheader: Value stored to 'res' is never read

  • examples/postinmemory: Potential leak of memory pointed to by 'chunk.memory'

  • examples/sftpuploadresume: Value stored to 'result' is never read

  • examples: Only include <curl/curl.h>

  • examples: Remove recursive calls to curl_multi_socket_action

  • examples: Remove superfluous null-pointer checks
  • file: Fix "Checking if unsigned variable 'readcount' is less than zero"

  • fnmatch: Disable if FTP is disabled

  • gnutls: Remove call to deprecated gnutls_compression_get_name

  • gopher: Remove check for path == NULL

  • gssapi: Fix deprecated header warnings

  • hostip: Make create_hostcache_id avoid alloc + free

  • http2: multi_connchanged() moved from multi.c, only used for h2

  • http2: Verify :authority in push promise requests

  • http: Make adding a blank header thread-safe
  • http: Send payload when (proxy) authentication is done

  • http: Set state.infilesize when sending multipart formposts

  • makefile: Make checksrc and hugefile commands "silent"

  • mbedtls: Make it build even if MBEDTLS_VERSION_C isn't set

  • mbedtls: Release sessionid resources on error

  • memdebug: Log pointer before freeing its data

  • memdebug: Make debug-specific functions use curl_dbg_ prefix

  • mime: Put the boundary buffer into the curl_mime struct

  • multi: Call multi_done on connect timeouts, fixes CURLINFO_TOTAL_TIME

  • multi: Remove verbose "Expire in" ... messages
  • multi: Removed unused code for request retries
  • multi: Support verbose conncache closure handle
  • negotiate: Fix for HTTP POST with Negotiate
  • openssl: Add support for TLS ASYNC state

  • openssl: If cert type is ENG and no key specified, key is ENG too

  • pretransfer: Don't strlen() POSTFIELDS set for GET requests

  • rand: Fix a mismatch between comments in source and header

  • runtests: Detect "schannel" as an alias for "winssl"

  • schannel: Be quiet - remove verbose output
  • schannel: Close TLS before removing conn from cache

  • schannel: Support CALG_ECDH_EPHEM algorithm

  • scripts/completion.pl: Also generate fish completion file

  • singlesocket: Fix the 'sincebefore' placement

  • source: Fix two 'nread' may be used uninitialized warnings

  • ssh: Fix Condition '!status' is always true

  • ssh: Loop the state machine if not done and not blocking

  • strerror: Make the strerror function use local buffers

  • system_win32: Move win32_init here from easy.c

  • test578: Make it read data from the correct test

  • tests: Fixed XML validation errors in some test files

  • tests: Add stderr comparison to the test suite

  • tests: Fix multiple may be used uninitialized warnings
  • threaded-resolver: Shut down the resolver thread without error message

  • tool_cb_wrt: Fix writing to Windows null device NUL

  • tool_getpass: termios.h is present on AmigaOS 3, but no tcgetattr/tcsetattr

  • tool_operate: Build on AmigaOS

  • tool_operate: Fix typecheck warning

  • transfer.c: Do not compute length of undefined hex buffer

  • travis: Add build using gnutls

  • travis: Add scan-build
  • travis: Bump the used wolfSSL version to 4.0.0

  • travis: Enable valgrind for the iconv tests

  • travis: Use updated compiler versions: clang 7 and gcc 8

  • unit1307: Require FTP support

  • unit1651: Survive curl_easy_init() fails

  • url/idnconvert: Remove scan for ≤ 32 ascii values

  • url: Change conn shutdown order to ensure SOCKETFUNCTION callbacks

  • urlapi: Reduce variable scope, remove unreachable 'break'

  • urldata: Convert bools to bitfields and move to end
  • urldata: Simplify byte counters
  • urlglob: Argument with 'nonnull' attribute passed null

  • version.c: Silent scan-build even when librtmp is not enabled

  • vtls: Rename some of the SSL functions
  • wolfssl: Stop custom-adding curves
  • x509asn1: "Dereference of null pointer"
  • x509asn1: Clean up and unify code layout

  • zsh.pl: Escape ':' character

  • zsh.pl: Update regex to better match curl -h output

• Updated perl-Cpanel-JSON-XS to 4.11 as per the Fedora version

• Updated perl-DateTime-TimeZone to 2.34:

  • This release is based on version 2019a of the Olson database
  • Contemporary changes for Palestine and Metlakatla, Alaska

• Updated perl-Net-SSLeay to 1.86_09 (see Changes file for details)