PaulHowarth/Blog/2024-03-27

Wednesday 27th March 2024

Local Packages

  • Updated curl to 8.7.1:

    • configure: Add --disable-docs flag

    • CURLINFO_USED_PROXY: Return bool whether the proxy was used

    • digest: Support SHA-512/256

    • DoH: Add trace configuration
    • write-out: Add '%{proxy_used}'

    • ALTSVC.md: Correct a typo

    • asyn-ares: Fix data race warning
    • asyn-thread: Use wakeup_close to close the read descriptor

    • badwords: Use hostname, not host name
    • BINDINGS: Add mcurl, the python binding

    • bufq: Writing into a softlimit queue cannot be partial

    • c-hyper: Add header collection writer in hyper builds

    • cd2nroff: gen: Make '\>' in input to render as plain '>' in output

    • cd2nroff: Remove backticks from titles

    • checksrc.pl: Fix handling .checksrc with CRLF

    • cmake: Add USE_OPENSSL_QUIC support

    • cmake: Add warning for using TLS libraries without 1.3 support

    • cmake: Enable 'ENABLE_CURL_MANUAL' by default

    • cmake: Fix 'CURL_WINDOWS_SSPI=ON' with Schannel disabled

    • cmake: Fix function description in comment

    • cmake: Fix install for older CMake versions

    • cmake: Fix libcurl.pc and curl-config library specifications

    • cmdline-docs/Makefile: Avoid using a fixed temp file name

    • cmdline-docs: Quote and angle bracket clean-up

    • cmdline-opts/_EXITCODES: Sync with libcurl-errors

    • cmdline-opts/_VARIABLES.md: Improve the description

    • cmdline-opts/_VERSION: Provide %VERSION correctly

    • cmdline-opts: Shorter help texts

    • configure Add pkg-config support to rustls detection

    • configure: Add warning for using TLS libraries without 1.3 support

    • configure: Build and install shell completions when enabled

    • configure: Do not link with nghttp3 unless necessary

    • configure: Don't build shell completions when disabled

    • configure: Don't make shell completions without perl

    • configure: Find libpsl with pkg-config

    • connect.c: Fix typo

    • CONTRIBUTE: Update the section on documentation format

    • cookie.md: Provide an example sending a fixed cookie

    • cookie: If psl fails, reject the cookie

    • curl: exit on config file parser errors

    • curl: Make --libcurl output better CURLOPT_*SSLVERSION

    • curl: When allocating variables, add the name into the struct

    • curl_setup.h: Add curl_uint64_t internal type

    • curldown: Fix email address in Copyright

    • CURLMOPT_MAX*: Mention what happens if changed mid-transfer

    • CURLOPT_INTERFACE.md: Remove spurious ampersand, add see-also

    • CURLOPT_POSTQUOTE.md: Fix typo

    • CURLOPT_SSL_CTX_FUNCTION.md: No promises of lifetime after return

    • CURLOPT_WRITEFUNCTION.md: Typo fix

    • digest: Add check for hashing error

    • dist: Make sure the http tests are in the tarball
    • DISTROS: Add document with distro pointers

    • docs/libcurl: Add TLS backend info for all TLS options

    • docs/libcurl: Generate PROTOCOLS from meta-data

    • docs: Add missing slashes to SChannel client certificate documentation
    • docs: Add necessary setup for nghttp3

    • docs: ASCII version of manpage without nroff

    • docs: dist curl*.1 and install without perl

    • docs: Make curldown do angle brackets like markdown

    • docs: Make each libcurl man specify protocol(s)

    • docs: Make sure curl.1 is included in dist tarballs

    • docs: Update minimal binary size in INSTALL.md

    • docs: Use present tense

      & examples: Use present tense in comments

    • file: Use xfer buf for file:// transfers

    • fopen: Fix narrowing conversion warning on 32-bit Android

    • form-string.md: Correct the example

    • ftp: Do lineend conversions in client writer
    • ftp: Fix socket wait activity in ftp_domore_getsock

    • ftp: Tracing improvements
    • ftp: Treat a 226 arriving before data as a signal to read data

    • gen.pl: Make the "manpageification" faster

    • gen: Make '\>' in input to render as plain '>' in output

    • getparam: Make --ftp-ssl work again

    • GHA/linux: Add sysctl trick to work-around GitHub runner issue

    • GIT-INFO: Convert to markdown

    • GOVERNANCE: Document the core team

    • header.md: Remove backslash, make nicer markdown

    • HTTP/2: Write response directly
    • http2, http3: Return CURLE_PARTIAL_FILE when bytes were received

    • http2: Fix push discard

    • http2: Memory errors in the push callbacks are fatal

    • http2: Minor tweaks to optimize two struct sizes

    • http2: Push headers better clean-up (CVE-2024-2398)

    • http2: Remove the third (unused) argument from http2_data_done()

    • HTTP3.md: Adjust the OpenSSL QUIC install instructions

    • http: Better error message for HTTP/1.x response without status line

    • http: Improve response header handling, save CPU cycles

    • http: Move headers collecting to writer

    • http: Remove stale comment about rewindbeforesend

    • http: Separate response parsing from response action

    • http_chunks: Fix the accounting of consumed bytes

    • http_chunks: Remove unused 'endptr' variable

    • https-proxy: Use IP address and cert with IP in alt names

    • hyper: Implement unpausing via client reader
    • ipv6.md: Mention IPv4 mapped addresses

    • KNOWN_BUGS: POP3 issue when reading small chunks

    • lib1598: Fix 'CURLOPT_POSTFIELDSIZE' usage

    • lib582: Remove code causing warning that is never run

    • lib: Add 'void *ctx' to reader/writer instances

    • lib: Convert Curl_get_line to use dynbuf

    • lib: Curl_read/Curl_write clarifications

    • lib: Enhance client reader resume + rewind

    • lib: Initialize output pointers to NULL before calling strto[ff,l,ul]

    • lib: Keep conn IP information together

    • lib: Move 'done' parameter to SingleRequests

    • lib: Remove curl_mimepart object when CURL_DISABLE_MIME

    • libcurl-docs: Clean-ups

    • libcurl-security.md: Active FTP passes on the local IP address

    • libssh/libssh2: Return error on too big range

    • MANUAL.md: Fix typo

    • mbedtls: Fix building when MBEDTLS_X509_REMOVE_INFO flag is defined

    • mbedtls: Fix pytest for newer versions (CVE-2024-2466)

    • mbedtls: Properly clean up the thread-shared entropy

    • mbedtls: Use mbedtls_ssl_conf_{min|max}_tls_version

    • md4: Include strdup.h for the memdup proto

    • mime: Add client reader
    • misc: Fix typos in docs and lib
    • mkhelp: Simplify the generated hugehelp program

    • mprintf: Fix format prefix I32/I64 for windows compilers

    • multi: Add xfer_buf to multi handle

    • multi: Fix multi_sock handling of select_bits

    • multi: Make add_handle free any multi_easy

    • ngtcp2: No recvbuf for stream

    • ntml_wb: Fix buffer type typo

    • OpenSSL QUIC: Adapt to v3.3.x
    • openssl-quic: Check on Windows that socket conv to int is possible

    • openssl-quic: Fix BIO leak and Windows warning

    • openssl-quic: Fix unity build, casing, indentation

    • OS400: Avoid using awk in the build scripts

    • paramhlp: Fix CRLF-stripping files with "-d @file"

    • proxy1.0.md: Fix example

    • pytest: Adapt to API change

    • request: Clarify message when request has been sent off

    • rustls: Make curl compile with 0.12.0

    • schannel: Fix hang on unexpected server close

    • scripts: Fix cijobs.pl for Azure and GHA

    • sendf: Ignore response body to HEAD

    • setopt: Fix check for CURLOPT_PROXY_TLSAUTH_TYPE value

    • setopt: Fix disabling all protocols (CVE-2024-2004)

    • sha512_256: Add support for GnuTLS and OpenSSL

    • smtp: Fix STARTTLS

    • SPONSORS: Describe the basics

    • strtoofft: Fix the overflow check

    • test1541: Verify getinfo values on first header callback

    • test1165: Improve pattern matching

    • tests: Support setting/using blank content environment variables

    • TIMER_STARTTRANSFER: Set the same for everyone

    • TLS: Start shutdown only when peer did not already close
    • TODO: Update 13.11 with more information

    • tool_cb_hdr: Only parse etag + content-disposition for 2xx

    • tool_getparam: Accept a blank -w ""

    • tool_getparam: Handle non-existing (out of range) short-options

    • tool_operate: Change precedence of server Retry-After time

    • tool_operate: Do not set CURLOPT_QUICK_EXIT in debug builds

    • trace-config.md: Remove the mutexed options list

    • transfer.c: Break receive loop in speed limited transfers

    • transfer: Improve Windows SO_SNDBUF update limit

    • urldata: Move authneg bit from conn to Curl_easy

    • version: Allow building with ancient libpsl

    • vquic-tls: Fix the error code returned for bad CA file (CVE-2024-2379)

    • vtls: Fix tls proxy peer verification
    • vtls: Revert "receive max buffer" + add test case
    • VULN-DISCLOSURE-POLICY.md: Update detail about CVE requests

    • websocket: Fix curl_ws_recv()

    • wolfSSL: Do not call the stub function wolfSSL_BIO_set_init()

    • write-out.md: Clarify error handling details

  • Updated dovecot (2.3.21) to drop i686 build from Fedora 40 onwards as per Changes/EncourageI686LeafRemoval

  • Updated perl-Variable-OnDestruct to 0.08:

    • Revert not catching exceptions from destruct handlers
    • Restore functionality on perl ≤ 5.12


Recent