Wednesday 6th November 2024
Fedora Project
Updated perl-Business-ISBN-Data to 20241105.001 in Rawhide:
- Data update for 20241105
Updated perl-URI to 5.31 (no changes) in Rawhide
Local Packages
Updated curl to 8.11.0:
curl: --create-dirs works for --dump-header as well
- gtls: Add P12 format support
- ipfs: Add options to disable
- TLS: TLSv1.3 earlydata support for curl
WebSockets: Make support official (non-experimental)
alt-svc: Honour data->state.httpwant
altsvc: Avoid using local buffer and memcpy
asyn-ares: Remove typecast, fix expire
autotools: Add support for 'unity' builds, enable in CI
bearssl: Avoid strpcy() when generating TLS version log message
- bearssl: Improved session handling, test exceptions
bufq: Unwrite fix
build: Add 'ldap' to 'libcurl.pc' 'Requires:'
build: Add pytest targets
- build: Clarify CA embed is for curl tool, mark default, improve summary
build: Detect and use '_setmode()' with Cygwin/MSYS, also use on Windows
build: Disable warning '-Wunreachable-code-break'
build: Fix clang-cl builds, add CI job
- build: Fix cross-compile check for poll with bionic
build: Fix possible '-Wformat-overflow' in lib557
build: Limit arc4random detection to no-SSL configs
- build: Show if CA bundle to embed was found
- build: Tidy up and improve versioned-symbols options
- build: Tidy up deprecation suppression, enable warnings for clang
certs: Add missing '-CAcreateserial' option for LibreSSL
checksrc: Add check for spaces around logical AND operators
checksrc: Added checks for colon operator in ternary expressions
checksrc: Check for spaces around '?', '>' and '<'
ci: Dump 'curl_config.h' to log in all jobs
CI: Run with standard mod_http2
cmake, Makefile.mk: Use -isystem for headers, silence BearSSL issues
cmake/FindCares: Fix version detection for c-ares 1.34.1
cmake/FindNGTCP2: Use library path as hint for finding crypto module
- cmake: Add missed variable to comment
cmake: Add native 'pkg-config' detection for mbedTLS, MSH3, Quiche, Rustls, wolfSSL
- cmake: Allow building tests in unity mode
cmake: Apply 'WIN32_LEAN_AND_MEAN' to all feature checks
cmake: Avoid setting 'BUILD_TESTING'
cmake: Clear package version after 'pkg-config' detection
cmake: Delete unused NEED_LBER_H, HAVE_LDAP_H
cmake: Detect 'HAVE_NETINET_IN6_H', 'HAVE_CLOSESOCKET_CAMEL', 'HAVE_PROTO_BSDSOCKET_H'
cmake: Detect GNU GSS
- cmake: Disable default OpenSSL if BearSSL, GnuTLS or Rustls is enabled
cmake: Do not propagate unused 'HAVE_GSSAPI_GSSAPI_KRB5_H' to C
cmake: Document '-D' and env build options
cmake: Drop obsolete items from 'TODO' and 'INSTALL-CMAKE'
- cmake: Drop redundant assignments
cmake: Drop redundant zlib var, rename function (internals)
cmake: Expand CURL_USE_PKGCONFIG to non-cross MINGW
- cmake: Fix broken dependency chain for cmdline-opts, tidy-ups
cmake: Fix compile warnings for clang-cl
- cmake: Fix missing spacing in log message
cmake: Limit 'CURL_STATIC_CRT' to MSVC
cmake: Make 'test-ci' target skip building dependencies
cmake: Mark as advanced some internal Find* variables
cmake: Re-add 'generate-curl.1' dependency for 'src' just in case
cmake: Rename LDAP dependency config variables to match Find modules
cmake: Replace 'check_include_file_concat()' for LDAP and GSS detection
cmake: Replace 'CURL_*_DIR' with '{PROJECT,CMAKE_CURRENT}_*_DIR'
cmake: Require quictls (or fork) when using msh3 on non-Windows
- cmake: Separate target for examples, optimize CI, fix fallouts
cmake: Set version for 'project()' and add CPack support
cmake: Stop adding dependency headers to global 'CMAKE_REQUIRED_INCLUDES'
- cmake: Sync torture test parallelism with autotools
cmake: Tidy up 'CURL_DISABLE_FORM_API' initialization
- cmake: Tidy up and shorten symbol hiding initialization
- cmake: Tidy up line order
- cmake: Tidy up picky warning initialization
- cmake: Tidy-ups and rebase fixups
- cmake: Tweaks around debug mode and hidden symbols
- cmake: Untangle feature detection interdependencies
cmake: Use 'list(APPEND)' on 'CURL_INCLUDES'
- cmake: Use OpenSSL for LDAP detection only if available
cmake: Use the 'BSD' variable
config: Rename the OS define to CURL_OS to reduce collision risk
configure: Add GSS to 'libcurl.pc' 'Depends:'
- configure: Catch Apple in more target triplets
configure: Drop duplicate feature checks for 'poll()', 'if_nametoindex()'
configure: Drop unused bare 'socket.h' detection
- configure: Improve help string for some options
conncache: Find bundle again in case it is removed
conncache: More efficient implementation of cpool_remove_bundle
- cookie: Overhaul and clean-up
curl-rustls.m4: Set linker flags to allow rustls build on macos
curl.h: Remove the struct pointer for CURL/CURLSH/CURLM typedefs
- curl: Add build options for safe/no CA bundle search (Windows)
- curl: Detect ECH support dynamically, not at build time
curl_addrinfo: Support operating systems with only getaddrinfo(3)
curl_multi_perform.md: Fix typo
curl_trc: Fix build with verbose messages disabled
curl_url_set.md: Document HOST handling when URL is parsed
curl_ws_recv.md: The 'meta' pointer is only returned on success
curl_ws_recv: Return recv 0 and point meta to NULL on all errors
CURLMOPT_PIPELINING.md: Clarify that CURLPIPE_NOTHING is not default
CURLOPT_APPEND.md: Goes for SFTP as well
CURLOPT_HEADERFUNCTION.md: Do not modify the passed in buffer
DISABLED: Disable test 1060 with hyper
DISTROS: Avoid use of "very"
Dockerfile: Update Docker digest to d830561
docs/cmdline-opts: GnuTLS supports PKCS#11 URI in --cert option
- docs: Clarify FTP over HTTP proxy functionality somewhat
- docs: Fix a typo in some cipher options
ech: Spelling, whitespace, say '--ech' default config
- ftp: Fix 0-length last write on upload from stdin
- ftp: Move listen handling to socket filter
- GHA: Optimize test prereq steps
- gnutls: Use session cache for QUIC
hsts: Avoid the local buffer and memcpy on lookup
hsts: Improve subdomain handling (CVE-2024-9681)
- hsts: Support "implied LWS" properly around max-age
- http2: Auto reset stream on server eos
http_aws_sigv4: Avoid local buffer and strcpy
INSTALL-CMAKE.md: Mention focus on shared libraries
INSTALL-CMAKE: Fix punctuation and a typo
INSTALL.md: Fix a typo that slipped in to RISC OS
json.md: Cli-option '--json' is an alias of '--data-binary'
lib, src, tests: Added space around ternary expressions
lib/cw-out: Initialize 'flush_all' directly
lib/src: White space edits to comply better with code style
lib: Avoid assigning 'result' temporarily
lib: Fix disabled-verbose-strings + enable-debug build warnings
- lib: Fix unity builds with BearSSL, MSH3, Quiche, OmniOS
lib: Move curl_path.[ch] into vssh/
lib: msnprintf tidy-ups
lib: Remove Curl_ prefix from static functions
- lib: Remove function pointer typecasts for hmac/sha256/md5
lib: Use bool/TRUE/FALSE properly
libcurl/opts: Improve phrasing for connection cap related options
libssh.c: Handle EAGAINS during proto-connect correctly
libssh2: Delete duplicate 'break'
libssh2: Put the readdir buffers into struct
libssh2: Use the Curl_* memory functions to avoid memdebug
- libssh2: Use the filename buffer when getting the homedir
libtests: Generate the lib1521 atomically
- mbedTLS: Fix handling of TLSv1.3 sessions
- mbedtls: Handle session as blobs
mbedtls: Remove failf() use from mbedtls_random
mk-lib1521: Fix the long return code check
mprintf: Do not ignore length modifiers of '%o', '%x', '%X'
mprintf: Treat '%o' as unsigned, add tests for '%o', '%x', '%X'
mqtt: Fix mqtt.md wording and add clearer explanation
multi.c: Make stronger check for paused transfer before asserting
multi.c: warn/assert on stall only without timer
- multi: Avoid reading whole struct pointer from pointer
multi: Convert Curl_follow to static multi_follow
multi: Make curl_multi_cleanup invalidate magic latter
multi: Make multi_handle_timeout use the connect timeout
multi: Split multi_runsingle into sub functions
negotiate: Conditional check around GSS & SSL specific code
netrc: Cache the netrc file in memory
ngtcp2: Do not loop on recv
ngtcp2: Set max window size to 10x of initial (128KB)
- openssl quic: Populate x509 store before handshake
openssl: Convert a memcpy to dynbuf use
- openssl: Extend the OpenSSL error messages
- openssl: Improve retries on shutdown
openssl: Remove two strcpy() calls
- OS400: Don't delete source files when building with debug
packages/OS400/curlmain: Remove the strncpy calls
processhelp.pm: Improve taskkill calls (Windows)
- pytest: Fix run against multissl curl
pytest: Improve pytest_07_42a reliability
pytest: Include 'buildinfo.txt' in the output
- pytest: Include curl version string and python platform in log
- pytest: Show curl features and protocols
quic: Use send/recvmmsg when available
- quic: Use the session cache with wolfSSL as well
- request: On shutdown send, proceed normally on timeout
runtests.md: Suggest a value for -j for torture tests
- runtests: Add comment for handle64 pathsep requirement
- runtests: Drop unused code for old/classic-mingw support
- runtests: Pass single backslashes with Windows Perl
runtests: Use deterministic sort for 'TESTINFO' lines
- schannel: Fix TLS cert verification by IP SAN
schannel: Ignore error on recv beyond close notify
schannel: Reclassify extra-verbose schannel_recv messages
select: Use poll() if existing, avoid poll() with no sockets
- sendf: Add condition to max-filesize check
- server/mqttd: Fix two memory leaks
setopt: Avoid superfluous length checks before strcmp()
setopt: Return error for bad input to CURLOPT_RTSP_REQUEST
setopt_cptr: Make overflow check only done when needed
singleuse: Make 'git grep' faster, add Apple 'nm' support
smb: Do not redefine 'getpid' on Windows
smb: Replace use of strcpy() with snprintf()
socks_gssapi: Switch to dynbuf from buffer with strcpy
source: Avoid use of 'very' in comments
src/lib: Remove redundant ternary operators
src: Guard for double declaration of 'curl_ca_embed' in unity builds
sws: Fix unused static function with 'TCP_NODELAY' undefined
telnet: Avoid two strcpy() by pointing to the strings instead
test1035: Convert host name back to utf8 as should be
test1515: Add tracing and more debug info
test1540: Add debug logging
test190: Replace %FTPTIME2 with a fixed value
test1915: Add tracing and connect timeout
test1915: Remove wrong comment
test2502: Add libtest debug tracing
test504: Fix handling on pending connect
testrun: Explicitly set proper IP address for stunnel listen/connect
- tests/http: Fix ubuntu GnuTLS CI failures
- tests/scorecard: Allow remote server test
tests/server/util.c: Remove use of strncpy
tests/valgrind.pm: Fix warnings with no valgrind report to show
tests/valgrind.supp: Remove a travis suppression, add a Debian
tests: Add and use '%PERL' variable to refer to the Perl binary
tests: Add codeset-utf8 as a feature
tests: Add file: tests with existing files
- tests: Allow pytests to run in out-of-tree builds
tests: Capture stdin to get the vsftpd version number
tests: Change Python code style to pass ruff checks
- tests: Check http/2 and http/3 server responsiveness
- tests: Delete duplicate macro check
tests: Enable additional ruff Python lint options
tests: Fix '%POSIX_PWD' on native Windows Perl
tests: Fix callback signatures to please UndefinedBehaviorSanitizer
tests: Fix FILEFORMAT <file name=""> directive
tests: Fix keyword for test1411
- tests: Fix shell quoting on native Windows Perl
- tests: Fix some Python typing issues
tests: Fixup 'checkcmd' 'PATH' on non-unixy platforms
- tests: Improve mqtt server handling
tests: Introduce %CLIENT6IP-NB
- tests: Let openssl generate random cert serials
tests: libtests and unit tests need explicit #include memdebug
- tests: Make precheck for HTTP on 127.0.0.1 into a feature
tests: Only log warnings or worse by default in smbserver
tests: postcheck is now in verify
- tests: Remove all valgrind disable instructions
- tests: Remove debug requirement on 38 tests
tests: Remove the %FTPTIME3 variable
tests: Replace '%PWD' with '%FILE_PWD' for 'file://'
tests: Replace '%PWD' with '%SSH_PWD' in SCP/SFTP tests
tests: Replace hard-coded '/dev/null' with variable
tests: Simplify 'pathhelp.pm', avoid using external tools
- tests: Speed up builds with single-binary test bundles
- tests: Testrunner fairness
- tests: Testrunner reliability improvements
tests: Use '-4' where needed
tests: Use a set for several of the curl_props
tftp: Avoid two memcpy/strcpy
tidy-up: Rename CURL_WINDOWS_APP to CURL_WINDOWS_UWP
tls: Avoid abusing CURLE_SSL_ENGINE_INITFAILED
tool: Support --show-headers and --remote-header-name
tool_doswin: Simplify; remove unused options and strncpy calls
tool_getparam: Drop unused time() call
tool_getparam: Replace two uses of strncpy(), ban strncpy
tool_operate: Make --skip-existing work for --parallel
tool_operate: Reuse the schannel backend check
tool_xattr: Create the user.creator xattr attribute
unit1307: Tidy up Apple OS detection
unit1660: Fix unreachable code warning in no-SSL builds
- url: Connection reuse on h3 connections
- url: Use same credentials on redirect
- urlapi: Drop unused header
- urlapi: Normalize the IPv6 address
- version: Minor clean-ups
- version: Say quictls in MSH3 builds
vquic: Fix compiler warning with gcc + MUSL
vquic: recv_mmsg, use fewer, but larger buffers
vtls: Convert Curl_pin_peer_pubkey to use dynbuf
vtls: Convert pubkey_pem_to_der to use dynbuf
warnless: Remove curlx_sktosi and curlx_sitosk
winbuild/README: Consolidate command prompt section
winbuild/README: Document how to clean a build
- winbuild: Add initial wolfSSL support
winbuild: Drop 'gen_resp_file.bat'
wolfssl: Convert malloc + memcpys to dynbuf for cipher string
- wolfSSL: Fix handling of TLSv1.3 sessions
- wolfssl: No more use of the OpenSSL API
- wolfssl: Use old version API without openssl extra