PaulHowarth/Blog/2023-07-19

Wednesday 19th July 2023

Local Packages

  • Updated check (0.15.2) to split checkmk out into a separate package

  • Updated curl to 8.2.0:

    • curl: Add --ca-native and --proxy-ca-native

    • curl: Add --trace-ids

    • CURLOPT_MAIL_RCPT_ALLOWFAILS: Replace CURLOPT_MAIL_RCPT_ALLLOWFAILS

    • haproxy: Add --haproxy-clientip flag to set client IPs

    • lib: Add CURLINFO_CONN_ID and CURLINFO_XFER_ID

    • bufq: Make write/pass methods more robust

    • build: Drop unused/redundant 'HAVE_WINLDAP_H'

    • cf-socket: Don't bypass fclosesocket callback if cancelled before connect

    • cf-socket: Move ctx declaration under HAVE_GETPEERNAME

    • cf-socket: Skip getpeername()/getsockname for TFTP

    • checksrc: Modernise perl file open

    • checksrc: Quote the file name to work with "funny" letters

    • CI: brew fix for openssl in default path
    • CI: Don't install impacket if tests are not run

    • CI: Enable parallel make in more builds
    • circleci: Install impacket and wolfssl 5.6.0

    • cmake: Add support for "unity" builds
    • cmake: Make use of snprintf

    • cmake: Stop CMake from quietly ignoring missing Brotli
    • configure: Add check for ldap_init_fd

    • configure: Fix run-compiler for old /bin/sh

    • configure: The --without forms of the options are also gone

    • connect-timeout.d: Mention that the DNS lookup is included

    • curl.h: include <sys/select.h> for vxworks

    • curl: Count uploaded data to stop at the originally given size

    • curl: Return error when asked to use an unsupported HTTP version

    • curl_easy_nextheader.3: Add missing open parenthesis examples

    • curl_log: Evaluate log statement only when transfer is verbose

    • curl_mprintf.3: Minor fix of the example

    • curl_pushheader_byname/bynum.3: Document in their own man pages

    • curl_url_set: Enforce the max string length check for all parts

    • CURLOPT_AWS_SIGV4.3: Remove unused variable from example

    • CURLOPT_INFILESIZE.3: Mention -1 triggers chunked

    • CURLOPT_MIMEPOST.3: Clarify what setting to NULL means

    • CURLOPT_SSH_PRIVATE_KEYFILE.3: Expand on the file search

    • docs/libcurl/libcurl.3: Clean-ups and improvements

    • docs: Add more .IP after .RE to fix indentation of generated paragraphs

    • docs: Fix missing parameter names in examples
    • docs: Update CURLOPT_UPLOAD.3

    • docs: Update HTTP3.md for newer ngtcp2 and nghttp3

    • docs: Use a space after RFC when spelling out RFC numbers
    • example/connect-to: Show CURLOPT_CONNECT_TO

    • example/crawler: Also set CURLOPT_AUTOREFERER

    • example/crawler: Make it use a few more options

    • example/default-scheme: Set the default scheme for schemeless URLs

    • example/hsts-preload: Show one way to HSTS preload

    • example/http2-download: Set CURLOPT_BUFFERSIZE

    • example/ipv6: Feature CURLOPT_ADDRESS_SCOPE in use

    • example/maxconnects: Set maxconnect example

    • example/opensslthreadlock: Remove

    • examples/ftpuploadresume.c: Add use of CURLOPT_ACCEPTTIMEOUT_MS

    • examples/http-options: Show how to send "OPTIONS *"

    • examples/https.c: Use CURLOPT_CA_CACHE_TIMEOUT

    • examples/multi-debugcallback.c: Avoid the bool typedef

    • examples/smtp-mime: Use CURLOPT_MAIL_RCPT_ALLOWFAILS

    • examples/unixsocket.c: Example using CURLOPT_UNIX_SOCKET_PATH

    • examples/websocket.c: WebSocket example using CONNECT_ONLY

    • examples: Make use of CURLOPT_(REDIR_|)PROTOCOLS_STR

    • fopen: Fix conversion warning on 32-bit Android

    • fopen: Optimize (fixes fopen race condition, CVE-2023-32001)

    • hostip.c: Move macOS-specific calls into global init call

    • HTTP/2: Upload handling fixes
    • http2: Better support for --limit-rate

    • http2: Error stream resets with code CURLE_HTTP2_STREAM

    • http2: Fix crash in handling stream weights
    • http2: Fix variable type
    • http2: h2 and h2-PROXY connection alive check fixes
    • http2: Raise header limitations above and beyond
    • http2: Send HEADER and DATA together if possible

    • http2: Treat initial SETTINGS as a WINDOW_UPDATE

    • HTTP3.md: Update openssl version

    • http3/ngtcp2: Upload EAGAIN handling

    • http: Rectify the outgoing Cookie: header field size check

    • hyper: Fix EOF handling on input
    • hyper: Unslow
    • imap-append.c: Update to make it more likely to work

    • imap: Provide method to disable SASL if it is advertised
    • krb5: Add typecast to please Coverity
    • libcurl-url.3: Also mention CURLUPART_ZONEID

    • libcurl-ws.3. WebSocket API overview

    • libssh2: Provide error message when setting host key type fails
    • libssh2: Use custom memory functions
    • ngtcp2: Assigning timeout, but value is overwritten before used
    • ngtcp2: Build with 0.17.0 and nghttp3 0.13.0
    • ngtcp2: Use ever increasing timestamp in IO
    • quiche: Avoid NULL deref in debug logging

    • quiche: Fix defects found in latest Coverity report
    • quote.d: Fix indentation of generated paragraphs

    • runtests: Abort test run after failure without -a

    • runtests: Better handle ^C during slow tests

    • runtests: Consistently write the test check summary block

    • runtests: Create multiple test runners when requested

    • runtests: Include missing valgrind package

    • runtests: Make test file directories in log/N

    • runtests: Rename server command file

    • runtests: Use more consistent failure lines

    • runtests: Work around a perl without SIGUSR1

    • runtests: Give each server a unique log lock file

    • scripts: Fix GHA matrix job detection in cijobs.pl

    • sectransp: Fix EOF handling

    • system.h: Remove __IBMC__/__IBMCPP__ guards and apply to all z/OS compiles

    • test2600: Fix the description

    • test427: Verify sending more cookies than fit in a 8190 bytes line

    • tests/http: Add mod_h2 directive 'H2ProxyRequests'

    • tests/servers.pm: Pick unused port number with a server socket

    • tests/servers: Generate temp names in /tmp for unix domain sockets

    • tests: Fix error messages and handling around sockets
    • tests: Improve reliability of TFTP tests
    • testutil: Allow multiple %-operators on the same line

    • timeval: Use CLOCK_MONOTONIC_RAW if available

    • tls13-ciphers.d: Include Schannel

    • tool: Remove exclamation marks from error/warning messages
    • tool: Remove newlines from all helpf/notef/warnf/errorf calls

    • tool_easysrc.h: Correct 'easysrc_perform' for 'CURL_DISABLE_LIBCURL_OPTION'

    • tool_getparam: Fix comment

    • tool_operate: Allow cookie lines up to 8200 bytes

    • tool_parsecfg: Accept line lengths up to 10M

    • tool_urlglob: Use curl_off_t instead of longs

    • tool_writeout_json: Fix encoding of control characters

    • transfer: Clear credentials when redirecting to absolute URL
    • urlapi: Have *set(PATH) prepend a slash if one is missing

    • urlapi: Scheme must start with alpha
    • vtls: Avoid memory leak if sha256 call fails

    • websocket-cb: Example doing WebSocket download using callback

    • wolfssl: Detect when TLS 1.2 support is not built into wolfssl
    • wolfssl: Support setting CA certificates as blob
    • ws: Make the curl_ws_meta() return pointer a const

  • I had to disable http2 support in the Fedora 25 build (GH#11470)

  • Updated perl-Net-SMTP-TLS (0.12) to use SPDX-format license tag

  • Updated perl-Perl-Critic-Lax (0.014) to avoid use of deprecated patch syntax

  • Updated perl-Pod-MinimumVersion (50) to use SPDX-format license tag

  • Updated perl-Search-Elasticsearch (8.00) to drop the MODULE_COMPAT dependency from Fedora 38 onwards

  • Updated perl-Sendmail-PMilter (1.24) to drop the MODULE_COMPAT dependency from Fedora 38 onwards

  • Updated perl-Sys-HostAddr (0.993) to use SPDX-format license tag

  • Updated perl-Test-File (1.993) to drop the MODULE_COMPAT dependency from Fedora 38 onwards

  • Updated perl-Test-InDistDir (1.112071) to use %license unconditionally

  • Updated perl-Test-Most (0.38) to drop the MODULE_COMPAT dependency from Fedora 38 onwards

  • Updated perl-Test-Unit-Lite (0.1202) to drop the MODULE_COMPAT dependency from Fedora 38 onwards

  • Updated perl-Types-Path-Tiny (0.006) to use SPDX-format license tag

  • Rebuilt ansible-collection-community-libvirt (1.2.0), bluefish (2.2.14), and Judy (1.0.5) for the Fedora_39_Mass_Rebuild


Recent