summaryrefslogtreecommitdiff
path: root/net/wget
AgeCommit message (Collapse)AuthorFilesLines
2019-11-03net: align variable assignmentsrillig1-5/+5
pkglint -Wall -F --only aligned --only indent -r No manual corrections.
2019-08-11Bump PKGREVISIONs for perl 5.30.0wiz1-2/+2
2019-07-20*: recursive bump for nettle 3.5.1wiz1-2/+2
2019-05-26wget: Fix https:// handling with OpenSSL 1.1.1leot3-2/+51
Backport upstream commit 14e3712b8c39165219fa227bd11f6feae7b09a33 to fix https:// handling when openssl.cnf file is not found. PKGREVISION++
2019-04-07Update wget to 1.20.3, which fixes CVE-2019-5953gutteridge2-8/+7
It appears that the buffer overflow issue referred to is the same in both 1.20.2 and 1.20.3 (they had to fix the fix). Upstream changelog: * Changes in Wget 1.20.3 ** Fixed a buffer overflow vulnerability * Changes in Wget 1.20.2 ** NTLM authentication will retry under certain cases ** Fixed a buffer overflow vulnerability
2019-04-03Recursive revbump from textproc/icuryoon1-1/+2
2019-02-10updating wget to 1.20.1, which fixes CVE-2018-20483spz2-8/+7
Upstream changelog: * Changes in Wget 1.20.1 ** --xattr is no longer default since it introduces privacy issues. ** --xattr saves the Referer as scheme/host/port, user/pw/path/query/fragment are no longer saved to prevent privacy issues. ** --xattr saves the Original URL without user/password to prevent privacy issues. * Changes in Wget 1.20 ** Add new option `--retry-on-host-error` to treat local errors as transient and hence Wget will retry to download the file after a brief waiting period. ** Fixed multiple potential resource leaks as found by static analysis ** Wget will now not create an empty wget-log file when running with -q and -b switches together ** When compiled using the GnuTLS >= 3.6.3, Wget now has support for TLSv1.3 ** Now there is support for using libpcre2 for regex pattern matching ** When downloading over FTP recursively, one can now use the --{accept,reject}-regex switches to fine-tune the downloaded files ** Building Wget from the git sources now requires autoconf 2.63 or above. Building from the Tarballs works as it used to.
2018-12-09revbump after updating textproc/icuadam1-2/+2
2018-11-04Enable the psl option by default for wget.bsiegert2-4/+4
Enabling the PSL is a good thing for security and privacy, as it protects against all sorts of cookie shenanigans. Bump revision.
2018-08-22Recursive bump for perl5-5.28.0wiz1-1/+2
2018-07-28Add a "psl" option (off by default) to build wget with PSL.bsiegert1-2/+12
This improves privacy by restricting cookies to a well-known list of public suffixes. We can consider turning that option on by default in the future. Fixes PR pkg/53459.
2018-05-07wget: update to 1.19.5.wiz2-8/+7
* Changes in Wget 1.19.5 * Fix cookie injection (CVE-2018-0494) * Enable TLS1.3 with recent OpenSSL environment * New option --ciphers to set GnuTLS / OpenSSL ciphers directly * Updated CSS grammar to CSS 2.2 * Fixed several memleaks found by OSS-Fuzz * Fixed several buffer overflows found by OSS-Fuzz * Fixed several integer overflows found by OSS-Fuzz * Several minor bug fixes * Changes in Wget 1.19.4 * A major bug that caused GZip'ed pages to never be decompressed has been fixed * Support for Content-Encoding and Transfer-Encoding have been marked as experimental and disabled by default * Changes in Wget 1.19.3 * Prevent erroneous decompression of .gz and .tgz files with broken servers * Added support for HTTP 308 Permanent Redirect response * Fix a segfault in some cases where the Content-Type header is not sent * Support OpenSSL 1.1 builds without using deprecated features * Fix netrc file detection on Windows * Several minor bug fixes
2018-04-17Add p11-kit to gnutls/bl3.mk and bump dependencies.wiz1-1/+2
2017-11-23wget: update to 1.19.2.wiz4-95/+8
* Changes in Wget 1.19.2 * Fix CVE-2017-13089 (Stack overflow in HTTP protocol handling) * Fix CVE-2017-13090 (Heap overflow in HTTP protocol handling) * New option --compression for gzip Content-Encoding * New option --[no]-netrc to control .netrc parsing * Added GNU extensions to .netrc parsing * Improved IDNA 2003 compatibility * Fix VPATH issues * Improved and extended the test suite * Support Wayback Machine's X-Archive-Orig-last-modified * Several bug fixes
2017-11-14wget: Use devel/libidn2 and adjust `idn' option logic in options.mkleot2-4/+7
Since wget-1.19, libidn2 is needed for the IDN/IRIs support. Adjust the `idn' package option logic to reflect that and explicitly ask for it via CONFIGURE_ARGS. This should also fix the build without the `idn' option selected pointed out by john heasley via PR pkg/52726. Bump PKGREVISION
2017-10-26wget: patches for VE-2017-13089 and CVE-2017-13090tez4-3/+80
2017-05-15Add a patch for CVE-2017-6508 from upstream.kim2-2/+12
2017-02-20Update to 1.19.1ryoon4-81/+7
Changelog: * Changes in Wget 1.19.1 * Fix bugs, a regression, portability/build issues * Add new option --retry-on-http-error * Changes in Wget 1.19 * New option --use-askpass=COMMAND. Fetch user/password by calling an external program. * Use IDNA2008 (+ TR46 if available) through libidn2 * When processing a Metalink header, --metalink-index=<number> allows to process the header's application/metalink4+xml files. * When processing a Metalink file, --trust-server-names enables the use of the destination file names specified in the Metalink file, otherwise a safe destination file name is computed. * When processing a Metalink file, enforce a safe destination path. Remove any drive letter prefix under w32, i.e. 'C:D:file'. Call libmetalink's metalink_check_safe_path() to prevent absolute, relative, or home paths: https://tools.ietf.org/html/rfc5854#section-4.1.2.1 https://tools.ietf.org/html/rfc5854#section-4.2.8.3 * When processing a Metalink file, --directory-prefix=<prefix> sets the top of the retrieval tree to prefix for Metalink downloads. * When processing a Metalink file, reject downloaded files which don't agree with their own metalink:size value: https://tools.ietf.org/html/rfc5854#section-4.2.16 * When processing a Metalink file, with --continue resume partially downloaded files and keep fully downloaded files even if they fail the verification. * When processing a Metalink file, create the parent directories of a "path/file" destination file name: https://tools.ietf.org/html/rfc5854#section-4.1.2.1 https://tools.ietf.org/html/rfc5854#section-4.2.8.3 * On a recursive download, append a .tmp suffix to temporary files that will be deleted after being parsed, and create them readable/writable only by the owner. * New make target 'check-valgrind' * Fix several bugs * Fix compatibility issues
2016-10-30add a patch for CVE-2016-7098 from upstreamspz3-3/+60
2016-09-19Recursive PKGREVISION bump for gnutls shlib major bump.wiz1-2/+2
2016-07-09Bump PKGREVISION for perl-5.24.0 for everything mentioning perl.wiz1-1/+2
2016-06-11Updated wget to 1.18.wiz3-8/+23
* Changes in Wget 1.18 * By default, on server redirects to a FTP resource, use the original URL to get the local file name. Close CVE-2016-4971. This introduces a backward-incompatibility for HTTP->FTP redirects and any script that relies on the old behaviour must use --trust-server-names. * Check the HSTS file is not world-writable before using it. * Parse <img srcset> attributes on a recursive download. * Fix problem with SNI server names having trailing dot(s) * New options --bind-dns-address and --dns-servers. * When Wget is built with libiconv, it now converts non-ASCII URIs to the locale's codeset when it creates files. The encoding of the remote files and URIs is taken from --remote-encoding, defaulting to UTF-8. The result is that non-ASCII URIs and files downloaded via HTTP/HTTPS and FTP will have names on the local filesystem that correspond to their remote names.
2016-03-05Bump PKGREVISION for security/openssl ABI bump.jperkin1-1/+2
2015-12-13Update wget to 1.17.1:wiz3-40/+7
* Changes in Wget 1.17.1 * Fix compile error when IPv6 is disabled or SSL is not present. * Fix HSTS memory leak. * Fix progress output in non-C locales. * Fix SIGSEGV when -N and --content-disposition are used together. * Add --check-certificate=quiet to tell wget to not print any warning about invalid certificates.
2015-11-23Fix linker errors when building with --disable-ipv6.schmonz2-1/+34
2015-11-21Update wget to 1.17:wiz2-7/+7
* Changes in Wget 1.17 ** Remove FTP passive to active fallback due to privacy concerns. ** Add support for --if-modified-since. ** Add support for metalink through --input-metalink and --metalink-over-http. ** Add support for HSTS through --hsts and --hsts-file. ** Add option to restrict filenames under VMS. ** Add support for --rejected-log which logs to a separate file the reasons why URLs are being rejected and some context around it. ** Add support for FTPS. ** Do not download/save file on error when --spider enabled ** Add --convert-file-only option. This option converts only the filename part of the URLs, leaving the rest of the URLs untouched.
2015-08-23Bump PKGREVISION for nettle shlib major bump.wiz1-2/+2
2015-06-12Recursive PKGREVISION bump for all packages mentioning 'perl',wiz1-1/+2
having a PKGNAME of p5-*, or depending such a package, for perl-5.22.0.
2015-03-11Update to 1.16.3:wiz3-26/+6
* Changes in Wget 1.16.3 ** Fix a regression introduced by wget 1.16.2 that --quiet is not really quiet anymore.
2015-03-02Add patch from GIT repository to get the "--quiet" option work again.tron3-2/+22
Bump package revision because of this bug fix.
2015-03-01Update to 1.16.2:wiz2-7/+7
* Changes in Wget 1.16.2 ** Native uuid generation on Windows ** Fix build on Solaris ** Allow progress bar on stderr when -o is used ** Accept 5-digit port numbers in FTP EPSV responses. ** Support older versions of flex. ** Updated translations.
2014-12-12Update to 1.16.1:wiz2-6/+6
* Changes in Wget 1.16.1 ** Add --enable-assert configure option. ** Use pkg-config to check for libraries presence. ** Do not limit --secure-protocol=auto|pfs to TLSv1.0. ** Add --secure-protocol=TLSv1_1|TLSv1_2 . ** Full C89 source code compliance. ** Select and use the most secure authentication scheme with HTTP connections. ** Fix issues with turkish locales. ** Handle 504 Gateway Timeout. ** New option --crl-file to load Certificate Revocation Lists. ** Add valgrind support to tests suite. ** Fix an off-by-one problem in the progress bar (introduced in 1.16).
2014-10-28update to 1.16drochner2-7/+6
changes: ** No longer create local symbolic links by default. Closes CVE-2014-4877. ** Use libpsl for verifying cookie domains. (not in pkgsrc yet) ** Default progress bar output changed. ** Introduce --show-progress to force display the progress bar. ** Introduce --no-config. The wgetrc files will not be read. ** Introduce --start-pos to allow starting downloads from a specified position. ** Fix a problem with ISA Server Proxy and keep-alive connections.
2014-05-29Bump for perl-5.20.0.wiz1-2/+2
Do it for all packages that * mention perl, or * have a directory name starting with p5-*, or * depend on a package starting with p5- like last time, for 5.18, where this didn't lead to complaints. Let me know if you have any this time.
2014-04-26The "ssl" option group is required. Other values than "gnutls" or "openssl"tron1-6/+4
are not allowed and it is therefore not possible to build this package without SSL support (which is good). Remove makefile snippet which made it look like it was possible to do this.
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron1-1/+2
2014-01-28Remove duplicate options.tron1-2/+2
2014-01-27Update to 1.15:wiz2-7/+6
* Changes in Wget 1.15 ** Add support for --method. ** Add support for file names longer than MAX_FILE. ** Support FTP listing for the FTP Server on Windows Server 2008 R2. ** Fix a regression when -c and --content-disposition are used together. ** Support shorthand URLs in an input file. ** Fix -c with servers that don't specify a content-length. ** Add support for MD5-SESS ** Do not fail on non fatal GNU TLS alerts during handshake. ** Add support for --https-only. When used wget will follow only HTTPS links in recursive mode. ** Support Perfect-Forward Secrecy in --secure-protocol. ** Fix a problem with some IRI links that are not followed when contained in a HTML document. ** Support some FTP servers that return an empty list with "LIST -a". ** Specify Host with the HTTP CONNECT method. ** Use the correct HTTP method on a redirection.
2013-06-01Replace patch for generated file with patch for source file.wiz3-66/+50
2013-05-31Newer pod2man does not like numeric =itemmartin2-1/+66
2013-05-31Bump all packages for perl-5.18, thatwiz1-2/+2
a) refer 'perl' in their Makefile, or b) have a directory name of p5-*, or c) have any dependency on any p5-* package Like last time, where this caused no complaints.
2013-02-26replace shebang for a perl script.obache1-1/+3
/usr/bin/env is not portable (ex. /bin/env for Haiku). noticed by diger in pkgsrc-users@.
2013-02-06PKGREVISION bumps for the security/openssl 1.0.1d update.jperkin1-2/+2
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-3/+1
2012-10-03Bump all packages that use perl, or depend on a p5-* package, orwiz1-1/+2
are called p5-*. I hope that's all of them.
2012-08-12Update to 1.14:wiz2-7/+6
* Changes in Wget 1.14 ** Add support for content-on-error. It allows to store the HTTP payload on 4xx or 5xx errors. ** Add support for WARC files. ** Fix a memory leak problem in the GNU TLS backend. ** Autoreconf works again for distributed tarballs. ** Print some diagnostic messages to stderr not to stdout. ** Report stdout close errors. ** Accept the --report-speed option. ** Enable client certificates when GNU TLS is used. ** Add support for TLS Server Name Indication. ** Accept the arguments --accept-reject and --reject-regex. ** The GNU TLS backend honors correctly the timeout value. ** Add support for RFC 2617 Digest Access Authentication.
2012-06-12Add inet6 to default suggested options. It's 2012.wiz1-2/+2
2012-05-08Switch distfile to .xzadam2-5/+6
2011-11-26Add missing devel/zlib buildlink.sbd1-2/+3
Bump PKGREVISION
2011-11-22Revert last change per joerg@'s objections.shattered1-2/+1
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-28 18:09:39 +0000