Subject: CVS commit: pkgsrc/net/wget
From: S.P.Zeidler
Date: 2019-02-10 20:49:58
Message id: 20190210194958.F2862FB16@cvs.NetBSD.org

Log Message:
updating wget to 1.20.1, which fixes CVE-2018-20483

Upstream changelog:
   * Changes in Wget 1.20.1

   ** --xattr is no longer default since it introduces privacy issues.

   ** --xattr saves the Referer as scheme/host/port, user/pw/path/query/fragment
      are no longer saved to prevent privacy issues.

   ** --xattr saves the Original URL without user/password to prevent
      privacy issues.

   * Changes in Wget 1.20

   ** Add new option `--retry-on-host-error` to treat local errors as
      transient and hence Wget will retry to download the file after
      a brief waiting period.

   ** Fixed multiple potential resource leaks as found by static analysis

   ** Wget will now not create an empty wget-log file when running with
      -q and -b switches together

   ** When compiled using the GnuTLS >= 3.6.3, Wget now has support for TLSv1.3

   ** Now there is support for using libpcre2 for regex pattern matching

   ** When downloading over FTP recursively, one can now use the
      --{accept,reject}-regex switches to fine-tune the downloaded files

   ** Building Wget from the git sources now requires autoconf 2.63 or above.
      Building from the Tarballs works as it used to.

Files:
RevisionActionfile
1.144modifypkgsrc/net/wget/Makefile
1.58modifypkgsrc/net/wget/distinfo