Hello community,
here is the log from the commit of package perl-IO-Socket-SSL for
openSUSE:Factory checked in at 2018-08-27 12:56:53
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/perl-IO-Socket-SSL (Old)
and /work/SRC/openSUSE:Factory/.perl-IO-Socket-SSL.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "perl-IO-Socket-SSL"
Mon Aug 27 12:56:53 2018 rev:79 rq:631330 version:2.059
Changes:
--------
--- /work/SRC/openSUSE:Factory/perl-IO-Socket-SSL/perl-IO-Socket-SSL.changes
2018-07-23 17:58:15.629135678 +0200
+++
/work/SRC/openSUSE:Factory/.perl-IO-Socket-SSL.new/perl-IO-Socket-SSL.changes
2018-08-27 12:57:00.276662440 +0200
@@ -1,0 +2,13 @@
+Thu Aug 16 05:31:05 UTC 2018 - [email protected]
+
+- updated to 2.059
+ see /usr/share/doc/packages/perl-IO-Socket-SSL/Changes
+
+ 2.058 2018/08/15
+ - fix memleak when CRL are used.
+ Thanks to Franz Skale for report and patch
+ https://rt.cpan.org/Ticket/Display.html?id=125867
+ - fix memleak when using stop_SSL and threads, reported by Paul Evans
+ https://rt.cpan.org/Ticket/Display.html?id=125867#txn-1797132
+
+-------------------------------------------------------------------
Old:
----
IO-Socket-SSL-2.058.tar.gz
New:
----
IO-Socket-SSL-2.059.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ perl-IO-Socket-SSL.spec ++++++
--- /var/tmp/diff_new_pack.DD24QH/_old 2018-08-27 12:57:01.336663600 +0200
+++ /var/tmp/diff_new_pack.DD24QH/_new 2018-08-27 12:57:01.340663605 +0200
@@ -17,7 +17,7 @@
Name: perl-IO-Socket-SSL
-Version: 2.058
+Version: 2.059
Release: 0
%define cpan_name IO-Socket-SSL
Summary: Nearly transparent SSL encapsulation for IO::Socket::INET
++++++ IO-Socket-SSL-2.058.tar.gz -> IO-Socket-SSL-2.059.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/IO-Socket-SSL-2.058/Changes
new/IO-Socket-SSL-2.059/Changes
--- old/IO-Socket-SSL-2.058/Changes 2018-07-19 09:47:34.000000000 +0200
+++ new/IO-Socket-SSL-2.059/Changes 2018-08-15 18:08:30.000000000 +0200
@@ -1,3 +1,9 @@
+2.058 2018/08/15
+- fix memleak when CRL are used.
+ Thanks to Franz Skale for report and patch
+ https://rt.cpan.org/Ticket/Display.html?id=125867
+- fix memleak when using stop_SSL and threads, reported by Paul Evans
+ https://rt.cpan.org/Ticket/Display.html?id=125867#txn-1797132
2.058 2018/07/19
- fix t/session_ticket.t: it failed with OpenSSL 1.1.* since this version
expects the extKeyUsage of clientAuth in the client cert also to be allowed
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/IO-Socket-SSL-2.058/META.json
new/IO-Socket-SSL-2.059/META.json
--- old/IO-Socket-SSL-2.058/META.json 2018-07-19 09:54:01.000000000 +0200
+++ new/IO-Socket-SSL-2.059/META.json 2018-08-15 18:11:50.000000000 +0200
@@ -4,7 +4,7 @@
"Steffen Ullrich <[email protected]>, Peter Behroozi, Marko Asplund"
],
"dynamic_config" : 1,
- "generated_by" : "ExtUtils::MakeMaker version 7.1001, CPAN::Meta::Converter
version 2.150005",
+ "generated_by" : "ExtUtils::MakeMaker version 7.0401, CPAN::Meta::Converter
version 2.150001",
"license" : [
"perl_5"
],
@@ -50,6 +50,5 @@
"url" : "https://github.com/noxxi/p5-io-socket-ssl"
}
},
- "version" : "2.058",
- "x_serialization_backend" : "JSON::PP version 2.27300"
+ "version" : "2.059"
}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/IO-Socket-SSL-2.058/META.yml
new/IO-Socket-SSL-2.059/META.yml
--- old/IO-Socket-SSL-2.058/META.yml 2018-07-19 09:54:01.000000000 +0200
+++ new/IO-Socket-SSL-2.059/META.yml 2018-08-15 18:11:50.000000000 +0200
@@ -7,7 +7,7 @@
configure_requires:
ExtUtils::MakeMaker: '0'
dynamic_config: 1
-generated_by: 'ExtUtils::MakeMaker version 7.1001, CPAN::Meta::Converter
version 2.150005'
+generated_by: 'ExtUtils::MakeMaker version 7.0401, CPAN::Meta::Converter
version 2.150001'
license: perl
meta-spec:
url: http://module-build.sourceforge.net/META-spec-v1.4.html
@@ -25,5 +25,4 @@
homepage: https://github.com/noxxi/p5-io-socket-ssl
license: http://dev.perl.org/licenses/
repository: https://github.com/noxxi/p5-io-socket-ssl
-version: '2.058'
-x_serialization_backend: 'CPAN::Meta::YAML version 0.018'
+version: '2.059'
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/IO-Socket-SSL-2.058/lib/IO/Socket/SSL.pm
new/IO-Socket-SSL-2.059/lib/IO/Socket/SSL.pm
--- old/IO-Socket-SSL-2.058/lib/IO/Socket/SSL.pm 2018-07-19
09:45:08.000000000 +0200
+++ new/IO-Socket-SSL-2.059/lib/IO/Socket/SSL.pm 2018-08-15
18:03:29.000000000 +0200
@@ -13,7 +13,7 @@
package IO::Socket::SSL;
-our $VERSION = '2.058';
+our $VERSION = '2.059';
use IO::Socket;
use Net::SSLeay 1.46;
@@ -1435,6 +1435,7 @@
delete ${*$self}{_SSL_object};
${*$self}{'_SSL_opened'} = 0;
delete $SSL_OBJECT{$ssl};
+ delete $CREATED_IN_THIS_THREAD{$ssl};
untie(*$self);
}
@@ -2506,6 +2507,7 @@
Net::SSLeay::BIO_free($bio);
if ( $crl ) {
Net::SSLeay::X509_STORE_add_crl(Net::SSLeay::CTX_get_cert_store($ctx), $crl);
+ Net::SSLeay::X509_CRL_free($crl);
} else {
return IO::Socket::SSL->error("Invalid certificate
revocation list");
}