Paul's Blog Entries for February 2024

Thursday 1st February 2024

Fedora Project

• Updated perltidy to 20240202 in Rawhide (see CHANGES.md for details)

Local Packages

• Updated perl-Perl-Tidy to 20240202 as per the Fedora perltidy package

• Updated sendmail to 8.18.1:

  • See RELEASE_NOTES for details

  • Includes fix for SMTP Smuggling issue (CVE-2023-51765)

• Rebuilt dovecot (2.3.21) for ICU 74 in Rawhide

Friday 2nd February 2024

Local Packages

• Updated curl (8.6.0) not to support the built-in manual for curl from Fedora 40 onwards (Bug #2262373)

• Updated perl-DateTime-TimeZone to 2.62:

  • This release is based on version 2024a of the Olson database
  • Contemporary changes for Kazakhstan and Palestine

Saturday 3rd February 2024

Fedora Project

• Updated perl-URI to 5.26 in Rawhide:

  • Add URI::geo (GH#141)

Monday 5th February 2024

Fedora Project

• Updated libgadu (1.12.2) in Rawhide to drop redundant build requirement perl-Test-Vars (Bug #2260472)

• Updated perl-Sendmail-PMilter to 1.27 in Rawhide:

  • Proper handling of die (CPAN RT#150737)

  • Fix child_exit and add milter_exit (CPAN RT#150611)

  • Setconn with unix socket permissions (CPAN RT#150270)

Local Packages

• Updated curl (8.6.0) to ignore response body to HEAD requests (GH#12842)

• Updated libxml2 to 2.12.5:

• Security:

  • xmlreader: Don't expand XIncludes when backtracking (CVE-2024-25062)

• Regressions:

  • parser: Fix crash in xmlParseInNodeContext with HTML documents

• Updated perl-Mail-SPF to 3.20240205:

  • Fix pod in Mail::SPF::Util (CPAN RT#93241)

  • Fix "char_str_list is not a valid sub" in new Net::DNS (CPAN RT#149825)

  • BREAKING CHANGE: spfd is now installed in /bin instead of /sbin; as a result, Mail::SPF now respects an install prefix and may more easily be installed in a non root and/or local lib environment

• Updated perl-Sendmail-PMilter to 1.27 as per the Fedora version

Tuesday 6th February 2024

Fedora Project

• Updated perl-MIME-Types to 2.26 in Rawhide:

  • IANA updates
  • Support multi-level extensions

• Updated perl-Module-Extract-Use to 1.052 in Rawhide:

  • Refresh distro, update email addresses

RPM Fusion Project

• Updated xv to 5.0.0 in Rawhide:

  • Removed all of the obsolete (and no longer used) make/imake-based build infrastructure

  • Removed the bundled copies of the source code for the external libraries used for JPEG and TIFF support (which were not used anyway)

Local Packages

• Updated perl-Mail-SPF to 3.20240206:

  • Remove signature file from distribution

• Updated perl-MIME-Types to 2.26 as per the Fedora version

• Updated perl-Module-Extract-Use to 1.052 as per the Fedora version

• Updated xv to 5.0.0 as per the RPM Fusion version

Wednesday 7th February 2024

Fedora Project

• Updated perl-MIME-tools to 5.514 in Rawhide:

  • Move the guts of the ambiguous_content method to MIME::Head

  • Add MIME::Entity->ambiguous_content that returns true if this entity or any of its parts, recursively, has a MIME::Head whose ambiguous_content method returns true

  • Keep MIME::Parser->ambiguous_content as a cached version of the most recently parsed $entity->ambiguous_content

  • Add some missing files to MANIFEST

Local Packages

• Updated curl (8.6.0) to drop the curl-minimal subpackage in favour of curl-full from Fedora 40 onwards (Bug #2262096)

• Updated perl-MIME-tools to 5.514 as per the Fedora version

Friday 9th February 2024

Fedora Project

• Updated perl-URI to 5.27 in Rawhide:

  • Add missing NAME section to POD of URI::geo (GH#142)

Sunday 11th February 2024

Fedora Project

• Updated perl-Business-ISBN-Data to 20240209.001 in Rawhide:

  • Data update for 20240209

• Updated perl-Module-Extract-Namespaces to 1.024 in Rawhide:

  • Refresh distro, update email address, release under new PAUSE ID BRIANDFOY

• Updated perl-Module-Extract-VERSION to 1.117 in Rawhide:

  • Refresh distro, update email address, move to BRIANDFOY

Local Packages

• Updated perl-Module-Extract-Namespaces to 1.024 as per the Fedora version

• Updated perl-Module-Extract-VERSION to 1.117 as per the Fedora version

• Updated perl-Software-License to 0.104006:

  • Use valid SPDX identifier for BSD license

  • Undefine SSLeay spdx_expression

  • Update URL to SSLeay license

Tuesday 13th February 2024

Local Packages

• Updated curl (8.6.0):

  • Revert "receive max buffer" + add test case
  • Temporarily disable test 0313

  • Remove Suggests of libcurl-minimal in curl-full

  • Add Provides for curl-full and curl-minimal

• Rebuilt geoipupdate (6.1.0) for golang 1.22.0

• Updated java-1.8.0-oracle to Java SE 8 update 401

Thursday 15th February 2024

Local Packages

• Updated perl-Net-DNS to 1.44:

  • Simplify testing of resolver error paths

  • Prevent read beyond end of RDATA in corrupt SVCB RR

Monday 19th February 2024

Local Packages

• Branched the development repository for Fedora 40

• Updated curl (8.6.0) to fix issue: leftovers after chunking should not be part of the curl buffer output (Bug #2264220)

Wednesday 21st February 2024

Fedora Project

• Updated perl-Compress-Raw-Lzma to 2.209 in F-40 and Rawhide:

  • Fix for READMEmd target

  • Raise skip count in t/001version.t (GH#11)

• Updated perl-IO-AIO to 4.81 in F-40 and Rawhide:

  • Work around a bug in musl w.r.t. to O_SEARCH and use EIO_O_PATH instead, verifying the semantics against the subset of O_PATH and O_SEARCH

  • aio_copy now tries to preallocate the destination file

  • fexecve configure test used the wrong pointer type

• Updated perl-IO-Compress-Lzma to 2.207 in F-40 and Rawhide (no functional changes)

Local Packages

• Updated perl-Compress-Raw-Bzip2 to 2.209:

  • Fix for READMEmd target

• Updated perl-Compress-Raw-Lzma to 2.209 as per the Fedora version

• Updated perl-Compress-Raw-Zlib to 2.208:

  • Upgrade to zlib 1.3.1 for upstream testing (GH#28)

  • Add author and abstract to Makefile.PL and META.* (GH#29)

  • Fix for READMEmd target (GH#30)

• Updated perl-IO-AIO to 4.81 as per the Fedora version

• Updated perl-IO-Compress to 2.207:

  • Add bin/zipdetails 4.000

  • Fix indirect syntax (GH#51)

• Updated perl-IO-Compress-Lzma to 2.207 as per the Fedora version

Friday 23rd February 2024

Fedora Project

• Updated perl-CPAN-Changes to 0.500003 in F-40 and Rawhide:

  • Fix calling ->name on an unnamed group

  • Fix ->set_changes call on groups

Local Packages

• New package perl-Pod-Coverage-TrustMe (0.002000)

• Updated perl-CPAN-Changes to 0.500003 as per the Fedora version

Saturday 24th February 2024

Fedora Project

• Updated perl-Expect to 1.36 in F-40 and Rawhide:

  • Made timeouts optional and added qr// regex support

Local Packages

• Updated c-ares to 1.27.0:

• This is a security, feature, and bugfix release
• Security:

  • Reading malformatted '/etc/resolv.conf', '/etc/nsswitch.conf' or the 'HOSTALIASES' file could result in a crash (CVE-2024-25629, https://github.com/c-ares/c-ares/security/advisories/GHSA-mg26-v6qh-x48q)

• Features:

  • New function 'ares_queue_active_queries()' to retrieve number of in-flight queries (GH#712)

  • New function 'ares_queue_wait_empty()' to wait for the number of in-flight queries to reach zero (GH#710)

  • New 'ARES_FLAG_NO_DEFLT_SVR' for 'ares_init_options()' to return a failure if no DNS servers can be found rather than attempting to use '127.0.0.1'; this also introduces a new ares status code of 'ARES_ENOSERVER' (GH#713)

• Changes:

  • EDNS packet size should be 1232 as per DNS Flag Day (GH#705)

• Bugfixes:

  • Windows DNS suffix search list memory leak (GH#711)

  • Fix warning due to ignoring return code of 'write()' (GH#709)

  • CMake: Don't override target output locations if not top-level (GH#708)

  • Fix building c-ares without thread support (GH#700)

• Updated perl-Expect to 1.36 as per the Fedora version

• Updated perl-Module-CoreList to 5.20240223:

  • Updated for v5.39.8

Monday 26th February 2024

Fedora Project

• Updated perl-Compress-Raw-Bzip2 to 2.210 in F-30 and Rawhide:

  • Fix Changes for 2.209

Local Packages

• Updated libgpg-error to 1.48 (https://dev.gnupg.org/T6441)

  • New configure option --with-libtool-modification (https://dev.gnupg.org/T6619)

  • New option parser flag to detect commands given without a double dash; there is also the new meta command "command-mode" to set this flag via a config file (https://dev.gnupg.org/T6978)

  • Added an es_fopen mode flag "sequential" with support on Windows

  • Added an es_fopen mode flag "wipe" to clean up internal buffers at close time (https://dev.gnupg.org/T6954)

  • New function gpgrt_wipememory (https://dev.gnupg.org/T6964)

  • Improvements to setenv on Windows

  • Fixed call to estream-printf string filters (https://dev.gnupg.org/T6737)

  • Many improvements to the yat2m tool

  • Updates to the build system

  • New symbols: ARGPARSE_FLAG_COMMAND, gpgrt_wipememory

• Updated perl-Compress-Raw-Bzip2 to 2.210 as per the Fedora version

Tuesday 27th February 2024

Local Packages

• Rebuilt perl-Compress-Raw-Lzma (2.209) for xz 5.6.0 in Fedora 40 onwards

• Updated perl-Compress-Raw-Zlib to 2.209:

  • Fix build failure with "c++-compat" warnings (GH#31)

• Updated python-passlib (1.7.4) to add build requires for extra sub-packages