PaulHowarth/Blog/2020-02-15

Saturday 15th February 2020

Fedora Project

• Updated perl-IO-Socket-SSL to 2.067 in F-32 and Rawhide:

  • Fix memory leak on incomplete handshake (GH#92)

  • Add support for SSL_MODE_RELEASE_BUFFERS via SSL_mode_release_buffers; this can decrease memory usage at the costs of more allocations (CPAN RT#129463)

  • More detailed error messages when loading of certificate file failed (GH#89)

  • Fix for ip_in_cn == 6 in verify_hostname scheme (CPAN RT#131384)

  • Deal with new MODE_AUTO_RETRY default in OpenSSL 1.1.1

  • Fix warning when no ecdh support is available

  • Documentation update regarding use of select and TLS 1.3

  • Various fixes in documentation (GH#81, GH#87, GH#90, GH#91)

  • Stability fix for t/core.t

Local Packages

• Branched F-32 repository from the development branch

• Updated libxml2 (2.9.10) to fix memory leak in xmlSchemaValidateStream (CVE-2019-20388) and to fix infinite loop in xmlStringLenDecodeEntities (CVE-2020-7595)

• Updated perl-IO-Socket-SSL to 2.067 as per the Fedora version