Wednesday 1st September 2021

Fedora Project

• Imported and built perl-File-TreeCreate (0.0.1) for F-33, F-34, F-35, Rawhide, EPEL-7 and EPEL-8

• Updated perl-File-Find-Object to 0.3.6 in F-35 and Rawhide:

  • Split File::TreeCreate off to its own distribution

• Updated perl-File-Find-Object-Rule to 0.0313 in F-35 and Rawhide:

  • Split File::TreeCreate off to its own distribution

• Updated perl-Test-TrailingSpace to 0.0601 in F-35 and Rawhide:

  • Split File::TreeCreate off to its own distribution

Thursday 2nd September 2021

Local Packages

• Updated schily to 2021.09.01

Sunday 5th September 2021

Fedora Project

• Updated proftpd (1.3.7c) in F-35, Rawhide and EPEL-8 playground to update to mod_vroot version 0.9.9

Local Packages

• Updated perl-Text-Template to 1.60:

  • Fix another POD syntax error

• Updated proftpd (1.3.7c and 1.3.8rc2) to update to mod_vroot version 0.9.9

Monday 6th September 2021

Fedora Project

• Updated perl-Module-ExtractUse to 0.344 in F-35 and Rawhide:

  • Fixed some spelling errors in the Pod

Local Packages

• Updated perl-Module-ExtractUse to 0.344 as per the Fedora version

Tuesday 7th September 2021

Fedora Project

• Updated gtkwave to 3.3.111 in F-35 and Rawhide:

  • Rendering fix for filled rectangles and line caps in Cairo

  • Fix in fstapi for read start limit time

  • Use GtkSearchEntry in SST

  • Convert entrybox to use dialog box

  • entrybox: use default response instead of signal handler

  • Updated show-change widget

  • Fix xml2stems when begin blocks are in functions

  • Skip over decimal point in timescale in viewer

• Updated proftpd (1.3.6e) in EPEL-8 to fix memory disclosure to RADIUS servers by mod_radius (Bug #2001690)

• Updated proftpd (1.3.5e) in EPEL-7 to fix memory disclosure to RADIUS servers by mod_radius (Bug #2001690)

Local Packages

• Updated gtkwave to 3.3.111 as per the Fedora version

Wednesday 8th September 2021

Fedora Project

• Updated perl-Test-MockModule to 0.177.0 in F-35 and Rawhide:

  • Move test modules from build to test requires

Local Packages

• Updated perl-Test-MockModule to 0.177.0 as per the Fedora version

Saturday 11th September 2021

Fedora Project

• Updated python-lexicon to 2.0.1 in F-35 and Rawhide:

  • Dropped support for Python <3.6

  • Added a _version submodule and imported its dunder-attributes into the top level module

  • Migrated CI to CircleCI (from Travis)

  • Migrated tests to pytest(-relaxed)

  • Moved changelog to stub Sphinx project for Releases plugin

  • Changed README to ReStructured Text (from Markdown)

Monday 13th September 2021

Fedora Project

• Updated perl-Math-GMP to 2.21 in F-35 and Rawhide:

  • Signature files are generated unreliably and are an ongoing source of bug reports; as a result, we decided to axe them altogether

• Updated perl-Perl-PrereqScanner-NotQuiteLite to 0.9914 in F-35 and Rawhide:

  • Support Object::Pad

Local Packages

• Cleaned up and rebuilt perl-Module-CPANfile (1.1004)

• Updated perl-Perl-PrereqScanner-NotQuiteLite to 0.9914 as per the Fedora version

• Updated python2-mod_wsgi to 4.9.0

Wednesday 15th September 2021

Fedora Project

• Updated perl-Net-SSLeay (1.90) in Rawhide to add fixes (mainly from upstream) for OpenSSL 3.0.0

Local Packages

• Updated curl to 7.79.0:

  • bearssl: Support CURLOPT_CAINFO_BLOB

  • http: Consider cookies over localhost to be secure

  • secure transport: Support CURLINFO_CERTINFO

  • CVE-2021-22945: Clear the leftovers pointer when sending succeeds

  • CVE-2021-22946: Do not ignore --ssl-reqd

  • CVE-2021-22947: Reject STARTTLS server response pipelining

  • ares: Use ares_getaddrinfo()

  • asyn-ares.c: Move all version number checks to the top

  • auth: Do not append zero-terminator to authorisation id in kerberos
  • auth: Properly handle byte order in kerberos security message
  • auth: Use sasl authzid option in kerberos
  • auth: We do not support a security layer after kerberos authentication

  • BINDINGS.md: Update links to use https where available

  • build: Fix compiler warnings

  • c-hyper: Deal with Expect: 100-continue combined with POSTFIELDS

  • c-hyper: Fix header value passed to debug callback
  • c-hyper: Handle HTTP/1.1 ⇒ HTTP/1.0 downgrade on reused connection

  • c-hyper: Initial step for 100-continue support

  • c-hyper: Initial support for "dumping" 1xx HTTP responses

  • c-hyper: Remove the hyper_executor_poll() loop from Curl_http

  • CI/cirrus: Reduce compile time with increased parallelism

  • CI: Use GitHub Container Registry instead of Docker Hub

  • cirrus: Add FreeBSD 13.0 job and disable sanitizer build

  • cmake: Avoid poll() on macOS

  • cmake: Sync CURL_DISABLE options

  • codeql: Fix error "Resource not accessible by integration"

  • compressed.d: It's a request, not an order

  • config.d: Escape the backslash properly

  • config.d: Note that curlrc is used even when --config

  • config: Get rid of the unused HAVE_SIG_ATOMIC_T et. al.

  • configure.ac: Revert bad nghttp2 library detection improvements

  • configure: Error out if both ngtcp2 and quiche are specified

  • configure: Make --disable-hsts work

  • configure: Set classic mingw minimum OS version to XP

  • configure: Tweak nghttp2 library name fix

  • connect: Get local port + ip also when reusing connections

  • connect: Remove superfluous conditional

  • curl-openssl.m4: Check lib64 for the pkg-config file

  • curl-openssl.m4: Show correct output for OpenSSL v3

  • curl.1: Mention "global" flags

  • curl.1: Provide examples for each option

  • curl: Add warning for ignored data after quoted form parameter

  • curl: Add warning for incompatible parameters usage

  • curl: Better error message when -O fails to get a good name

  • curl: Stop retry if Retry-After: is longer than allowed

  • curl_easy_setopt.3: Improve the string copy wording

  • Curl_hsts_loadcb: Don't attempt to load if hsts wasn't inited

  • curl_setup.h: Sync values for HTTP_ONLY

  • curl_url_get.3: Clarify about path and query

  • CURLMOPT_TIMERFUNCTION.3: Remove misplaced "time"

  • CURLOPT_DOH_URL.3: CURLOPT_OPENSOCKETFUNCTION is not inherited

  • CURLOPT_SSL_CTX_*.3: Tidy up the example

  • CURLOPT_UNIX_SOCKET_PATH.3: Remove nginx reference, add see also

  • docs/MQTT: Update state of username/password support

  • docs: Remove experimental mentions from HSTS and MQTT
  • docs: The security list is reached at security at curl.se now

  • easy: Use a custom implementation of wcsdup on Windows

  • examples/*hiperfifo.c: Fix calloc arguments to match function proto

  • examples/cookie_interface: Avoid printfing time_t directly

  • examples/cookie_interface: Fix scan-build printf warning

  • examples/ephiperfifo.c: Simplify signal handler

  • FAQ: Add two dev related questions

  • getparameter: Fix the --local-port number parser

  • happy-eyeballs-timeout-ms.d: Polish the wording

  • hostip: Make Curl_ipv6works function independent of getaddrinfo

  • http2: Curl_http2_setup needs to init stream data in all invokes

  • http2: Revert a change that broke upgrade to h2c
  • http2: Revert call the handle-closed function correctly on closed stream

  • http: Disallow >3-digit response codes

  • http: Ignore content-length if any transfer-encoding is used

  • http_proxy: Clear 'sending' when the outgoing request is sent

  • http_proxy: Fix the User-Agent inclusion in CONNECT

  • http_proxy: Fix user-agent and custom headers for CONNECT with hyper

  • http_proxy: Only wait for writeable socket while sending request

  • INTERNALS: Bump c-ares requirement to 1.16.0

  • INTERNALS: c-ares has a new home: c-ares.org

  • lib: Don't use strerror()

  • libcurl-errors.3: Clarify two CURLUcode errors

  • limit-rate.d: Clarify base unit

  • mailing lists: Move from cool.haxx.se to lists.haxx.se

  • mbedtls: Avoid using a large buffer on the stack
  • mbedTLS: Initial 3.0.0 support

  • mbedtls_threadlock: Fix unused variable warning

  • mksymbolsmanpage.pl: Fix showing symbol's last used version

  • mksymbolsmanpage.pl: Match symbols case insensitively

  • multi: Fix compiler warning with 'CURL_DISABLE_WAKEUP'

  • ngtcp2: Compile with the latest ngtcp2 and nghttp3
  • ngtcp2: Fix build with ngtcp2 and nghttp3

  • ngtcp2: Remove the acked_crypto_offset struct field init

  • ngtcp2: Replace deprecated functions with nghttp3_conn_shutdown_stream_read

  • ngtcp2: Reset the outstanding send buffer again when drained

  • ngtcp2: Rework the return value handling of ngtcp2_conn_writev_stream

  • ngtcp2: Stop buffering crypto data
  • ngtcp2: Utilize crypto API functions to simplify

  • openssl: Annotate SSL3_MT_SUPPLEMENTAL_DATA

  • openssl: When creating a new context, there cannot be an old one
  • opt-docs: Make sure all man pages have examples
  • opt-docs: Verify man page sections + order

  • opts docs: Unify phrasing in NAME header

  • output.d: Add method to suppress response bodies

  • page-header: Add GOPHERS, simplify wording in the 1st paragraph

  • progress: Fix a compile warning on some systems

  • progress: Make trspeed avoid floats

  • runtests: Add option -u to error on server unexpectedly alive

  • schannel: Work around typo in classic mingw macro

  • scripts: Invoke interpreters through /usr/bin/env

  • setopt: Enable CURLOPT_IGNORE_CONTENT_LENGTH for hyper

  • strerror.h: Remove the #include from files not using it

  • symbols-in-versions: Fix CURLSSLBACKEND_QSOSSL last used version

  • test1138: Remove trailing space to make work with hyper

  • test1173: Check references to libcurl options

  • test1280: CRLFify the response to please hyper

  • test1565: Fix Windows build errors

  • test365: Verify response with chunked and Content-Length headers

  • tests/*server.pl: Flush output before executing subprocess

  • tests/*server.py: Remove pidfile on server termination

  • tests/runtests.pl: Clean-up copy-and-paste mistakes and unused code

  • tests/server/*.c: Align handling of portfile argument and file

  • tests: Adjust the tftpd output to work with hyper mode

  • tests: Be explicit about using 'python3' instead of 'python'

  • tests: Enable test 1129 for hyper builds
  • tests: Make three tests pass until 2037

  • tool/tests: Fix potential year 2038 issues

  • tool_operate: Fix --fail-early with parallel transfers

  • url: Fix compiler warning in no-verbose builds

  • urlapi.c: seturl: Assert URL instead of using if-check

  • vtls: Fix typo in schannel_verify.c

  • winbuild/README.md: Clarify GEN_PDB option

  • wolfssl: clean up wolfcrypt error queue

  • write-out.d: Clarify size_download/upload

  • x509asn1: Fix heap over-read when parsing x509 certificates

• Updated perl-Net-SSLeay (1.90) as per the Fedora version

Thursday 16th September 2021

Local Packages

• Updated curl (7.79.0) to fix regression in http2 implementation introduced in the last release, and to make SCP/SFTP tests work with openssh-8.7p1

Saturday 18th September 2021

Fedora Project

• Updated perl-Test-Simple to 1.302187 in F-35 and Rawhide:

  • Fix tests for core boolean support

Local Packages

• Updated perl-Test-Simple to 1.302187 as per the Fedora version

Sunday 19th September 2021

Local Packages

• Rebuilt libssh2 (1.10.0), proftpd (1.3.7c and 1.3.8rc2) and sendmail (8.17.1) for OpenSSL 3.0.0 in Rawhide

Monday 20th September 2021

Fedora Project

• Updated gd (2.3.3) in Rawhide to explicitly enable gd/gd2 support: upstream changed the default for gd/gd2 support to DISABLED in version 2.3.3 (without mentioning it in the changelog); as a result, the test suites for the perl-GD and perl-GDGraph packages, which expect this support to be enabled, started failing (Bug #2005844)

Local Packages

• Updated schily to 2021.09.18

Tuesday 21st September 2021

Fedora Project

• Updated perl-Math-GMP to 2.22 in F-35 and Rawhide:

  • Signature files are generated unreliably and are an ongoing source of bug reports; as a result, we decided to axe them altogether

Local Packages

• Updated perl-Module-CoreList to 5.20210920:

  • Updated for v5.35.4

Wednesday 22nd September 2021

Fedora Project

• Updated perl-Config-Tiny to 2.27 in F-35 and Rawhide:

  • Add the option of passing a hashref to the constructor, where it is turned into an object of the class (see POD under new([$config]) for details)

  • Move test.conf back into t/, where it was years ago, before someone tried to remove all uses of File::Spec; since File::Spec is used often now, there is no point in keeping test.conf in the root directory of the distro

Local Packages

• Updated curl to 7.79.1:

  • Curl_http2_setup: Don't change connection data on repeat invokes

  • curl_multi_fdset: Make FD_SET() not operate on sockets out of range

  • dist: Provide lib/.checksrc in the tarball

  • FAQ: Add GOPHERS + curl works on data, not files

  • hsts: CURLSTS_FAIL from hsts read callback should fail transfer

  • hsts: Handle unlimited expiry

  • http: Fix the broken >3 digit response code detection

  • strerror: Use sys_errlist instead of strerror on Windows

  • test1184: Disable

  • tests/sshserver.pl: Make it work with openssh-8.7p1

• Updated perl-Config-Tiny to 2.27 as per the Fedora version

Monday 27th September 2021

Local Packages

• Updated perl-DateTime-TimeZone to 2.48:

  • This release is based on version 2021b of the Olson database
  • Contemporary changes for Jordan and Samoa

Wednesday 29th September 2021

Fedora Project

• Updated perl-Devel-Hide to 0.0015 in F-35 and Rawhide:

  • Test warnings more carefully to avoid spurious test failures caused by a bug in Test2::Util

• Updated perl-Math-BigInt-GMP to 1.6009 in Rawhide:

  • Sync test files with Math-BigInt

• Updated perl-Test-Simple to 1.302188 in F-35 and Rawhide:

  • Fix for non-gcc compilers on 5.10.0

Local Packages

• Updated dovecot (2.3.16) to fix OpenSSLv3 issues (Bug #2005884)

• Updated perl-Devel-Hide to 0.0015 as per the Fedora version

• Updated perl-Test-Simple to 1.302188 as per the Fedora version