[pkgsrc/pkgsrc-2018Q4]: pkgsrc/net/wget Pullup ticket #5908 - requested by spz

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/b0bcaccd678b
branches:  pkgsrc-2018Q4
changeset: 319609:b0bcaccd678b
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Sat Feb 16 11:17:47 2019 +0000

description:
Pullup ticket #5908 - requested by spz
net/wget: security fix

Revisions pulled up:
- net/wget/Makefile                                             1.144
- net/wget/distinfo                                             1.58

---
   Module Name: pkgsrc
   Committed By:        spz
   Date:                Sun Feb 10 19:49:58 UTC 2019

   Modified Files:
        pkgsrc/net/wget: Makefile distinfo

   Log Message:
   updating wget to 1.20.1, which fixes CVE-2018-20483

   Upstream changelog:
      * Changes in Wget 1.20.1

      ** --xattr is no longer default since it introduces privacy issues.

      ** --xattr saves the Referer as scheme/host/port, user/pw/path/query/fragment
         are no longer saved to prevent privacy issues.

      ** --xattr saves the Original URL without user/password to prevent
         privacy issues.

      * Changes in Wget 1.20

      ** Add new option `--retry-on-host-error` to treat local errors as
         transient and hence Wget will retry to download the file after
         a brief waiting period.

      ** Fixed multiple potential resource leaks as found by static analysis

      ** Wget will now not create an empty wget-log file when running with
         -q and -b switches together

      ** When compiled using the GnuTLS >= 3.6.3, Wget now has support for TLSv1.3

      ** Now there is support for using libpcre2 for regex pattern matching

      ** When downloading over FTP recursively, one can now use the
         --{accept,reject}-regex switches to fine-tune the downloaded files

      ** Building Wget from the git sources now requires autoconf 2.63 or above.
         Building from the Tarballs works as it used to.

diffstat:

 net/wget/Makefile |   5 ++---
 net/wget/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 8 deletions(-)

diffs (29 lines):

diff -r 533fdfbdbda9 -r b0bcaccd678b net/wget/Makefile
--- a/net/wget/Makefile Fri Feb 08 22:39:37 2019 +0000
+++ b/net/wget/Makefile Sat Feb 16 11:17:47 2019 +0000
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.143 2018/12/09 18:52:43 adam Exp $
+# $NetBSD: Makefile,v 1.143.2.1 2019/02/16 11:17:47 bsiegert Exp $
 
-DISTNAME=      wget-1.19.5
-PKGREVISION=   3
+DISTNAME=      wget-1.20.1
 CATEGORIES=    net
 MASTER_SITES=  ${MASTER_SITE_GNU:=wget/}
 EXTRACT_SUFX=  .tar.lz
diff -r 533fdfbdbda9 -r b0bcaccd678b net/wget/distinfo
--- a/net/wget/distinfo Fri Feb 08 22:39:37 2019 +0000
+++ b/net/wget/distinfo Sat Feb 16 11:17:47 2019 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.57 2018/05/07 06:48:39 wiz Exp $
+$NetBSD: distinfo,v 1.57.6.1 2019/02/16 11:17:47 bsiegert Exp $
 
-SHA1 (wget-1.19.5.tar.lz) = a28bbdfdee0d68271165b7e965fa5b9742ab65e8
-RMD160 (wget-1.19.5.tar.lz) = 8da0bc988f14e340d00c02b589b86f454cb8cb04
-SHA512 (wget-1.19.5.tar.lz) = 4cab6aa9ea7153230ed763f20d220c1184b6ac305a0eb74352f5e8aab2964ea57e5f4ea925b4b9d9a1acccc17d5747a0a2c01633765fe618828c0cddc3f16bb2
-Size (wget-1.19.5.tar.lz) = 2204066 bytes
+SHA1 (wget-1.20.1.tar.lz) = 6c46afab96031eba0429ceba7e1d6f8206b9a036
+RMD160 (wget-1.20.1.tar.lz) = 82f71ce2a47a052ed7fb7b0d18f0a62e62142b75
+SHA512 (wget-1.20.1.tar.lz) = d35cdb390c1a28efb756b86c6cdb5c19d40809883266b7a98c7916cda515e34600951f2ad3d148864b3ace2451f8db726c2b7025cc2dd2d692aafc59dae200f8
+Size (wget-1.20.1.tar.lz) = 2120611 bytes
 SHA1 (patch-doc_wget.texi) = 6db25b3500ff4617b5ade34d9013b1f9876104f8