2019-08-11 15:25:21 by Thomas Klausner | Files touched by this commit (3557) |
Log message:
Bump PKGREVISIONs for perl 5.30.0
|
2019-07-21 00:46:59 by Thomas Klausner | Files touched by this commit (595) |
Log message:
*: recursive bump for nettle 3.5.1
|
2019-05-26 20:10:49 by Leonardo Taccari | Files touched by this commit (3) |
Log message:
wget: Fix https:// handling with OpenSSL 1.1.1
Backport upstream commit 14e3712b8c39165219fa227bd11f6feae7b09a33
to fix https:// handling when openssl.cnf file is not found.
PKGREVISION++
|
2019-04-07 11:02:00 by David H. Gutteridge | Files touched by this commit (2) |
Log message:
Update wget to 1.20.3, which fixes CVE-2019-5953
It appears that the buffer overflow issue referred to is the same in
both 1.20.2 and 1.20.3 (they had to fix the fix).
Upstream changelog:
* Changes in Wget 1.20.3
** Fixed a buffer overflow vulnerability
* Changes in Wget 1.20.2
** NTLM authentication will retry under certain cases
** Fixed a buffer overflow vulnerability
|
2019-04-03 02:33:20 by Ryo ONODERA | Files touched by this commit (748) |
Log message:
Recursive revbump from textproc/icu
|
2019-02-10 20:49:58 by S.P.Zeidler | Files touched by this commit (2) |
Log message:
updating wget to 1.20.1, which fixes CVE-2018-20483
Upstream changelog:
* Changes in Wget 1.20.1
** --xattr is no longer default since it introduces privacy issues.
** --xattr saves the Referer as scheme/host/port, user/pw/path/query/fragment
are no longer saved to prevent privacy issues.
** --xattr saves the Original URL without user/password to prevent
privacy issues.
* Changes in Wget 1.20
** Add new option `--retry-on-host-error` to treat local errors as
transient and hence Wget will retry to download the file after
a brief waiting period.
** Fixed multiple potential resource leaks as found by static analysis
** Wget will now not create an empty wget-log file when running with
-q and -b switches together
** When compiled using the GnuTLS >= 3.6.3, Wget now has support for TLSv1.3
** Now there is support for using libpcre2 for regex pattern matching
** When downloading over FTP recursively, one can now use the
--{accept,reject}-regex switches to fine-tune the downloaded files
** Building Wget from the git sources now requires autoconf 2.63 or above.
Building from the Tarballs works as it used to.
|
2018-12-09 19:52:52 by Adam Ciarcinski | Files touched by this commit (724) |
Log message:
revbump after updating textproc/icu
|
2018-11-04 17:34:57 by Benny Siegert | Files touched by this commit (2) |
Log message:
Enable the psl option by default for wget.
Enabling the PSL is a good thing for security and privacy, as it protects
against all sorts of cookie shenanigans.
Bump revision.
|
2018-08-22 11:48:07 by Thomas Klausner | Files touched by this commit (3558) |
Log message:
Recursive bump for perl5-5.28.0
|
2018-07-28 14:29:20 by Benny Siegert | Files touched by this commit (1) |
Log message:
Add a "psl" option (off by default) to build wget with PSL.
This improves privacy by restricting cookies to a well-known list of
public suffixes.
We can consider turning that option on by default in the future.
Fixes PR pkg/53459.
|