PaulHowarth/Blog/2025-10

Paul's Blog Entries for October 2025

Wednesday 1st October 2025

Fedora Project

  • Updated libssh2 to 1.11.1 in EPEL-9 to address CVE-2023-6918 (missing checks for return values for digests) and CVE-2023-48795 (prefix truncation attack on Binary Packet Protocol (BPP) - "Terrapin")

Wednesday 8th October 2025

Fedora Project

  • Updated perl-Business-ISBN-Data to 20251003.001 in F-43 and Rawhide:

    • Data update for 2025-10-03

  • Updated perl-Specio to 0.53 in F-43 and Rawhide:

    • Fixed a test failure when trying to open $^X on some platforms

Local Packages

  • Rebuilt libidn (1.43) for java-25-openjdk as system JDK in Rawhide

  • Updated perl-PPIx-Regexp to 0.091:

    • Avoid "Possible attempt to escape whitespace" warning, which is emitted in perl-5.43.2 and forward

    • Revise internal usage of 'PPI::Document'

  • Updated perl-Specio to 0.53 as per the Fedora version

Thursday 9th October 2025

Fedora Project

  • Updated perl-Business-ISBN-Data to 20251009.001 in F-43 and Rawhide:

    • Data update for 2025-10-09

Friday 10th October 2025

Fedora Project

  • Updated perl-YAML-Syck to 1.35 in F-43 and Rawhide:

    • Address parsing error related to string detection on read for empty strings

Local Packages

  • Updated dovecot (2.4.1) to fix CVE-2025-30189: users would end up overwriting each other in cache

  • Rebuilt geoipupdate (7.1.1) to sync with Rawhide

  • Updated libgpg-error to 1.56 (https://dev.gnupg.org/T7625):

    • Support the %b conversion specifier in the estream printf functions

    • New spawn GPGRT_PROCESS_STDIO_NUL to be used on Windows to share the "nul" device (https://dev.gnupg.org/T7723)

    • Support pipe I/O for GPGRT_PROCESS_DETACHED on Windows (https://dev.gnupg.org/T7716)

    • New mode keyword "share=xxx" for gpgrt_fopen

    • Change the default method to get the number of fds to close; this fixes a spawning problem on certain POSIX machines (https://dev.gnupg.org/T7696)

    • Fix some cases of inheriting HANDLEs on Windows (https://dev.gnupg.org/T7716)

    • New system configurations for 64-bit Android, i686 Android, x86_64 Android and an armv7a alias to arm for Android

    • Set build-specific build variable for zOS

    • New symbols: GPG_ERR_UNEXPECTED_PACKET, GPGRT_PROCESS_STDIO_NUL

  • Updated perl-YAML-Syck to 1.35 as per the Fedora version

Saturday 11th October 2025

Fedora Project

  • Updated perl-YAML-Syck to 1.36 in F-43 and Rawhide:

    • Address memory corruption leading to 'str' value being set on empty keys

Local Packages

  • Updated perl-YAML-Syck to 1.36 as per the Fedora version

Monday 13th October 2025

Fedora Project

  • Updated perl-Perl-Critic-Pulp to 100 in F-43 and Rawhide:

    • ProhibitUnknownBackslash: allow \F new in Perl 5.16

Local Packages

  • Updated perl-Perl-Critic-Pulp to 100 as per the Fedora version

Tuesday 14th October 2025

Local Packages

  • Updated curl in development repository to new upstream release candidate 8.17.0~rc1

Friday 17th October 2025

Fedora Project

  • Updated perl-YAML-Syck to 1.36 in F-41, F-42, EPEL-9 and EPEL-10 to address CVE-2025-11683 YAML::Syck potential information disclosure

Local Packages

  • Updated dovecot (2.4.1) to enable FTS flatcurve in Fedora 30 onwards

  • Updated perl-Type-Tiny to 2.008004:

  • Documentation:

    • Type::Tiny pod syntax fix

  • Other:

    • Added: Type::Tiny::Duck (used by HasMethods) now includes a new_intersection constructor

Sunday 19th October 2025

Local Packages

  • Updated `perl-B-Keywords: update to 1.29

    • Fix new 5.43 warning with qw($\) (GH#10)

Monday 20th October 2025

Fedora Project

  • Updated geoipupdate (7.1.1) in Rawhide to convert to new vendoring guidelines (PR#1)

  • Updated perl-Finance-Quote to 1.67 in F-41, F-42, F-43, Rawhide, EPEL-9, EPEL-10:

    • Fixed ASEGR.pm; web site redesigned, URL used for data was no longer working (GH#509)

    • Fixed TesouroDireto.pm using Tesouro Transparente as data source (GH#527)

    • Added a new module to fetch data from SwissFundData (GH#515)

    • Handle no trade date in BorsaItaliana.pm (GH#528)

    • Added methodinfo() to MarketWatch.pm and BorsaItaliana.pm

    • Fixed MorningstarCH.pm

    • Fixed MorningstarUK.pm

Tuesday 21st October 2025

Fedora Project

  • Updated perl-Business-ISBN-Data to 20251021.001 in Rawhide:

    • Data update for 2025-10-21

Local Packages

  • Updated curl in development repository to the new upstream release candidate 8.17.0~rc2

Friday 24th October 2025

Local Packages

  • Updated perl-Module-CoreList to 5.20251022:

    • Updated for v5.43.4

Monday 27th October 2025

Fedora Project

  • Updated perl-Business-ISBN-Data to 20251024.001 in Rawhide:

    • Data update for 2025-10-24

  • Updated perl-Compress-Raw-Bzip2 to 2.214 in Rawhide:

    • Development workflow updates, no functional changes

  • Updated perl-Compress-Raw-Lzma to 2.214 in Rawhide:

    • Development workflow updates, no functional changes

  • Updated perl-Compress-Raw-Zlib to 2.214 in Rawhide:

    • Development workflow updates, no functional changes

  • Updated perl-IO-Compress to 2.214 in Rawhide:

    • Various workflow updates

    • IO::Compress::Gzip accidentally modified the $EXPORT_TAGS{all}->@* of other modules (GH#64)

    • Fix typos in streamzip (GH#59)

    • Fix documentation for get_Bufsize in Compress::Raw::Zlib (Compress::Raw::Zlib GH#34)

  • Updated perl-IO-Compress-Lzma to 2.214 in Rawhide:

    • Various workflow updates

    • Stop accidentally modifying the $EXPORT_TAGS{all}->@* of other modules (IO::Compress GH#64)

Local Packages

  • Updated java-1.8.0-oracle to Java SE 8 Update 471

  • Updated the perl-IO-Compress stack to 2.214 as per the Fedora version

Wednesday 29th October 2025

Local Packages

  • Updated smf-sav (2.1) to build with -DSM_CONF_STDBOOL_H=1 to avoid issues with the libmilter API

Thursday 30th October 2025

Fedora Project

  • Updated perl-Mouse to 2.6.0 in Rawhide:

    • Update minimum perl version from 5.8 => 5.10 (GH#112)

Local Packages

  • Updated curl in the development repository to the new upstream release candidate 8.17.0~rc3

  • Updated metamail (2.7) to port from termio.h to termios.h and add fixes for c99 compatibility

  • Updated perl-Mouse to 2.6.0 as per the Fedora version

Friday 31st October 2025

Fedora Project

  • Updated bluefish to 2.2.18 in F-23, F-43, Rawhide and EPEL-10:

    • Much better CSS language support

    • The colour editor now also supports hsl() and rgb() style colours

    • Show colours by just hovering the mouse over a colour code

    • Reinstate feature to dynamically change a shortcut key by hovering the mouse over a menu item and pressing a new shortcut key again; this feature was present in all gtk2 applications and has not been working for bluefish gtk3 builds until now

    • Remove the infobrowser from the build since it no longer compiles with new libxml versions; this plugin was already deprecated and disabled by default for years

Local Packages

  • Updated bluefish to 2.2.18 as per the Fedora version

Previous Month: September 2025

Recent