[pkgsrc/pkgsrc-2018Q1]: pkgsrc/www/w3m Pullup ticket #5756 - req...

[spz <spz%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/7314245179bd
branches:  pkgsrc-2018Q1
changeset: 308253:7314245179bd
user:      spz <spz%pkgsrc.org@localhost>
date:      Sat May 19 08:57:22 2018 +0000

description:
Pullup ticket #5756 - requested by bsiegert
www/w3m: security update

Revisions pulled up:
- www/w3m/Makefile.common                                       1.66
- www/w3m/distinfo                                              1.31

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   leot
   Date:           Mon May 14 14:40:17 UTC 2018

   Modified Files:
            pkgsrc/www/w3m: Makefile.common distinfo

   Log Message:
   w3m{,-img}: Update www/w3m{,-img} to 0.5.3.20180125

   Changes:
   Debian's w3m 0.5.3+git20180125
   * bug fixes
     - fix stack overflow with malformed text [CVE-2018-6196]
     - fix null deref with malformed text [CVE-2018-6197]
     - fix /tmp file races only when ~/.w3m is unwritable [CVE-2018-6198]
     - do not remove w3mdict.cgi when "make distclean"
     - do not turn a form's GET into POST
     - correct <base ...> parsing
     - accept TERM?term
   * new feature
     - extend ssl_forbid_method to disable TLSv1.1


   To generate a diff of this commit:
   cvs rdiff -u -r1.65 -r1.66 pkgsrc/www/w3m/Makefile.common
   cvs rdiff -u -r1.30 -r1.31 pkgsrc/www/w3m/distinfo

diffstat:

 www/w3m/Makefile.common |   4 ++--
 www/w3m/distinfo        |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (33 lines):

diff -r b82eec3e4297 -r 7314245179bd www/w3m/Makefile.common
--- a/www/w3m/Makefile.common   Sat May 19 08:50:46 2018 +0000
+++ b/www/w3m/Makefile.common   Sat May 19 08:57:22 2018 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile.common,v 1.65 2017/07/10 12:26:53 joerg Exp $
+# $NetBSD: Makefile.common,v 1.65.8.1 2018/05/19 08:57:22 spz Exp $
 #
 # used by www/w3m/Makefile
 # used by www/w3m-img/Makefile
@@ -21,7 +21,7 @@
 USE_TOOLS+=    msgfmt
 USE_PKGLOCALEDIR=      yes
 
-W3M_VERS=      0.5.3+git20170102
+W3M_VERS=      0.5.3+git20180125
 W3M_PKGVERS=   ${W3M_VERS:S/+git/.0./}
 
 # For w3mman, xface2xpm, cgi scripts.
diff -r b82eec3e4297 -r 7314245179bd www/w3m/distinfo
--- a/www/w3m/distinfo  Sat May 19 08:50:46 2018 +0000
+++ b/www/w3m/distinfo  Sat May 19 08:57:22 2018 +0000
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.30 2017/02/19 18:35:13 snj Exp $
+$NetBSD: distinfo,v 1.30.12.1 2018/05/19 08:57:22 spz Exp $
 
-SHA1 (w3m-0.5.3+git20170102.tar.gz) = 5279c2cb577635e709fb5979acadd6b4371e5b99
-RMD160 (w3m-0.5.3+git20170102.tar.gz) = 1301f33b16f4532220b69faed7cd182074fa901f
-SHA512 (w3m-0.5.3+git20170102.tar.gz) = c077a003512a53856d2353d97ac2cbfdaebdeff8c914102475b6bbf095f218652235cc1098ce7173c9095216520d9e233e7dd23ea551ccf7263929e219ac04e5
-Size (w3m-0.5.3+git20170102.tar.gz) = 2180292 bytes
+SHA1 (w3m-0.5.3+git20180125.tar.gz) = 49df4a9c35f94c211ba2d904f7c72b8aa82e269d
+RMD160 (w3m-0.5.3+git20180125.tar.gz) = d899c863062f09d49aeea2ec1533c772729c50bc
+SHA512 (w3m-0.5.3+git20180125.tar.gz) = 61b8498b927569937c509460e291eeba6eb302d34ccd6e1bf4d1eb07ac73a3ac5a477161727d310324625be04b907f8c3e970382d08c9fa0846b371699f04e14
+Size (w3m-0.5.3+git20180125.tar.gz) = 2181743 bytes