Re: [GNUnet-developers] [release] gnurl 7.65.0

[ng0]

address@hidden transcribed 3.5K bytes:
> Hi,
> 
> I have just released gnurl 7.65.0, following the 7.65.0 release of curl
> on 2019-05-22.
> 
> CHANGELOG
> ---------
> 
> Changes, gnurl specific:
> 
> * (build) nroff should no longer be a build-time dependency:
>   * enforce built-in manual to be always 'off'
>   * gnurl.1 is no longer assembled by a perl + nroff
>   * gnurl.1 and some other pages are now mdoc documents

I wanted to point out a bit more about this besides my own preference
for not generated documentation and moving towards appropriate documentation
for gnurl: Size differences.

You can also achieve this with curl by passing the right configure
flag, but gnurl defaults to having the built-in manual now off.

What this means for the pkgsrc package I maintain:

version | total | bin/gnurl | bin/gnurl-config
7.63.0 | 923068 | 193552 | 6077
7.64.0 | 927979 | 196816 | 6108
7.64.1 | 896640 | 181656 | 6333
7.65.0 | 845307 | 139768 | 6378

The size difference for gnurl-config comes from the fact
that it was recently fixed to function properly.

> * (build) started to adjust gnurl.1 post-mdoc conversion
> * (tests) python is detected through autoconfigure and not env(1)
> 
> The usual curl Changelog applies, in particular I want to point
> out these fixes by curl:
> 
> * CVE-2019-5435: Integer overflows in curl_url_set
>   - https://curl.haxx.se/docs/CVE-2019-5435.html
> * CVE-2019-5436: tftp: use the current blksize for recvfrom() 
>   - https://curl.haxx.se/docs/CVE-2019-5436.html
> 
> CHECKSUMS
> ---------
> 
> cat gnurl-7.65.0.sum.txt
> SHA1 (gnurl-7.65.0.tar.gz) = cbdf13773842827d43a9473e41f33bd036ed090f
> SHA1 (gnurl-7.65.0.tar.Z) = e06ace1dbc6253d7463c0e95d36d7337de7d9fba
> SHA1 (gnurl-7.65.0.pax.Z) = 70ffda75c9e35ca69a26134b11a35a749781ceb1
> SHA512 (gnurl-7.65.0.tar.gz) = 
> aa8bbc8510d10f111348ec50fa1334f1bdd419248ea5747e8b77cad5e7236e6647ae327e8edc6c64cb3eed639b3b2f2b6d7c91389a904364768b19836f0c54f0
> SHA512 (gnurl-7.65.0.tar.Z) = 
> 21c945a177f60de1d92e9028070904cfba29a0efdfbef4afc0450d5236e3bcfb0e82f4ec638aa1f3427ab1a8fdb77c8358d5c44d3c8787b310d2a7eeb69baa41
> SHA512 (gnurl-7.65.0.pax.Z) = 
> 8f9d0e3297a83443403f64e92dbabeace78e57528ce5ad29281fb155592fccd24b147cdc02723c9d22fd2de7714931442f2f3b9f8bdbf1e9d45e542ac7efd095
> RMD160 (gnurl-7.65.0.tar.gz) = 3c8b770c3159cb1452a0dd154c2f05b2c25f5343
> RMD160 (gnurl-7.65.0.tar.Z) = fa81c13fbcd0dbae7c8d88e9e32294db774095df
> RMD160 (gnurl-7.65.0.pax.Z) = f08729cfe3cf8f1ef5aecfb8c9e951bd3d69c2b6
> 
> DOWNLOADS
> ---------
> 
> The files can be be found as usual on the gnu ftp and ftpmirrors in
> the gnunet subfolder. New is a signed checksum file (gnurl-$version.sum.txt).



> _______________________________________________
> GNUnet-developers mailing list
> address@hidden
> https://lists.gnu.org/mailman/listinfo/gnunet-developers

signature.asc
Description: PGP signature