PaulHowarth/Blog/2024-12-11

Wednesday 11th December 2024

Fedora Project

Local Packages

  • Updated curl to 8.11.1:

    • build: Fix ECH to always enable HTTPS RR
    • build: Fix MSVC UWP builds
    • build: Omit certain deps from 'libcurl.pc' unless found via 'pkg-config'

    • build: Use '_fseeki64()' on Windows, drop detections

    • cmake: Do not echo most inherited 'LDFLAGS' to config files

    • cmake: Drop cmake args list from 'buildinfo.txt'

    • cmake: Include 'wolfssl/options.h' first

    • cmake: Remove legacy unused IMMEDIATE keyword

    • cmake: Restore cmake args list in 'buildinfo.txt'

    • cmake: Set 'CURL_STATICLIB' for static lib when 'SHARE_LIB_OBJECT=OFF'

    • cmake: Sync GSS config code with other deps
    • cmake: Typo in comment
    • cmake: Work around 'ios.toolchain.cmake' breaking feature-detections

    • cmakelint: Fix to check root 'CMakeLists.txt'

    • cmdline/ech.md: Formatting clean-ups

    • configure: Add FIXMEs for disabled pkg-config references

    • configure: Do not echo most inherited 'LDFLAGS' to config files

    • configure: Replace '$#' shell syntax

    • cookie: Treat cookie name case sensitively
    • curl-rustls.m4: Keep existing 'CPPFLAGS'/'LDFLAGS' when detected

    • curl.h: Mark two error codes as obsolete

    • curl: --continue-at is mutually exclusive with --no-clobber

    • curl: --continue-at is mutually exclusive with --range

    • curl: --continue-at is mutually exclusive with --remove-on-error

    • curl: --test-duphandle in debug builds runs "duphandled"

    • curl: Do more command line parsing in sub functions
    • curl: Rename struct var to fix AIX build
    • curl: Use realtime in trace timestamps
    • curl_multi_socket_all.md: Soften the deprecation warning

    • CURLOPT_PREREQFUNCTION.md: Add result code on failure

    • digest: Produce a shorter cnonce in Digest headers
    • DISTROS: Update Alt Linux links
    • dmaketgz: Use --no-cache when building docker image

    • docs: Bring back ALTSVC.md and HSTS.md

    • docs: Document default 'User-Agent'

    • docs: Suggest --ssl-reqd instead of --ftp-ssl

    • duphandle: Also init netrc

    • ECH: Enable support for the AWS-LC backend
    • hostip: Don't use the resolver for FQDN localhost
    • http_negotiate: Allow for a one byte larger channel binding buffer

    • http_proxy: Move dynhds_add_custom here from http.c

    • KNOWN_BUGS: Setting a disabled option should return CURLE_NOT_BUILT_IN

    • krb5: Fix socket/sockindex confusion, MSVC compiler warnings

    • lib: Fixes for wolfSSL OPENSSL_COEXIST

    • libssh: Use libssh sftp_aio to upload file

    • libssh: When using IPv6 numerical address, add brackets
    • macos: Disable gcc 'availability' workaround as needed
    • mbedtls: Call psa_crypt_init() in global init

    • mime: Fix reader stall on small read lengths
    • mk-ca-bundle: Remove CKA_NSS_SERVER_DISTRUST_AFTER conditions

    • mprintf: Fix the integer overflow checks

    • multi: Add clarifying comment for wakeup_write()

    • multi: Fix callback for 'CURLMOPT_TIMERFUNCTION' not being called again when...

    • netrc: Address several netrc parser flaws (CVE-2024-11053)

    • netrc: Support large file, longer lines, longer tokens
    • nghttp2: Use custom memory functions
    • OpenSSL: Improve error message on expired certificate
    • openssl: Remove three "Useless Assignments"
    • openssl: Stop using SSL_CTX_ function prefix for our functions

    • os400: Fix IBMi builds
    • os400: Fix IBMi EBCDIC conversion of arguments
    • pytest: Add test for use of CURLMOPT_MAX_HOST_CONNECTIONS

    • rtsp: Check EOS in the RTSP receive and return an error code
    • schannel: Remove TLS 1.3 ciphersuite-list support
    • setopt: Fix CURLOPT_HTTP_CONTENT_DECODING

    • setopt: Fix missing options for builds without HTTP and MQTT
    • show-headers.md: Clarify the headers are saved with the data

    • socket: Handle binding to "host!<ip>"

    • socketpair: Fix enabling 'USE_EVENTFD`

    • strtok: Use namespaced 'strtok_r' macro instead of redefining it

    • tests: Add the ending time stamp in testcurl.pl

    • tests: Re-enable 2086, and 472, 1299, 1613 for Windows
    • TODO: Consider OCSP stapling by default
    • tool_formparse: Remove use of sscanf()

    • tool_getparam: Parse --localport without using sscanf

    • tool_getpass: Fix UWP '-Wnull-dereference'

    • tool_getpass: Replace 'getch()' call with '_getch()' on Windows

    • tool_urlglob: Parse character globbing range without sscanf

    • vtls: Fix compile warning when ALPN is not available
  • Rebuilt libnet (1.3) to align with the October 2024 mass rebuild for EL-10

  • Updated perl-File-Find-Object to 0.3.9 as per the Fedora version


Recent