Path to this page:
Subject: CVS commit: [pkgsrc-2018Q1] pkgsrc/net/wget
From: Benny Siegert
Date: 2018-05-08 17:04:02
Message id: 20180508150402.DAC7EFBEC@cvs.NetBSD.org
Log Message:
Pullup ticket #5753 - requested by wiz
net/wget: security fix
Revisions pulled up:
- net/wget/Makefile 1.140
- net/wget/distinfo 1.57
---
Module Name: pkgsrc
Committed By: wiz
Date: Mon May 7 06:48:39 UTC 2018
Modified Files:
pkgsrc/net/wget: Makefile distinfo
Log Message:
wget: update to 1.19.5.
* Changes in Wget 1.19.5
* Fix cookie injection (CVE-2018-0494)
* Enable TLS1.3 with recent OpenSSL environment
* New option --ciphers to set GnuTLS / OpenSSL ciphers directly
* Updated CSS grammar to CSS 2.2
* Fixed several memleaks found by OSS-Fuzz
* Fixed several buffer overflows found by OSS-Fuzz
* Fixed several integer overflows found by OSS-Fuzz
* Several minor bug fixes
* Changes in Wget 1.19.4
* A major bug that caused GZip'ed pages to never be decompressed has been fixed
* Support for Content-Encoding and Transfer-Encoding have been marked as
experimental and disabled by default
* Changes in Wget 1.19.3
* Prevent erroneous decompression of .gz and .tgz files with broken servers
* Added support for HTTP 308 Permanent Redirect response
* Fix a segfault in some cases where the Content-Type header is not sent
* Support OpenSSL 1.1 builds without using deprecated features
* Fix netrc file detection on Windows
* Several minor bug fixes
Files: