[pkgsrc/pkgsrc-2019Q1]: pkgsrc/net/wget Pullup ticket #5941 - requested by gu...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/e373d8da71e4
branches:  pkgsrc-2019Q1
changeset: 408232:e373d8da71e4
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Wed Apr 10 09:24:20 2019 +0000

description:
Pullup ticket #5941 - requested by gutteridge
net/wget: security fix

Revisions pulled up:
- net/wget/Makefile                                             1.146
- net/wget/distinfo                                             1.59

---
   Module Name: pkgsrc
   Committed By:        gutteridge
   Date:                Sun Apr  7 09:02:00 UTC 2019

   Modified Files:
        pkgsrc/net/wget: Makefile distinfo

   Log Message:
   Update wget to 1.20.3, which fixes CVE-2019-5953

   It appears that the buffer overflow issue referred to is the same in
   both 1.20.2 and 1.20.3 (they had to fix the fix).

   Upstream changelog:
   * Changes in Wget 1.20.3

   ** Fixed a buffer overflow vulnerability

   * Changes in Wget 1.20.2

   ** NTLM authentication will retry under certain cases

   ** Fixed a buffer overflow vulnerability

diffstat:

 net/wget/Makefile |   4 ++--
 net/wget/distinfo |  10 +++++-----
 2 files changed, 7 insertions(+), 7 deletions(-)

diffs (28 lines):

diff -r 978cc5486960 -r e373d8da71e4 net/wget/Makefile
--- a/net/wget/Makefile Sun Apr 07 15:00:50 2019 +0000
+++ b/net/wget/Makefile Wed Apr 10 09:24:20 2019 +0000
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.144 2019/02/10 19:49:58 spz Exp $
+# $NetBSD: Makefile,v 1.144.2.1 2019/04/10 09:24:20 bsiegert Exp $
 
-DISTNAME=      wget-1.20.1
+DISTNAME=      wget-1.20.3
 CATEGORIES=    net
 MASTER_SITES=  ${MASTER_SITE_GNU:=wget/}
 EXTRACT_SUFX=  .tar.lz
diff -r 978cc5486960 -r e373d8da71e4 net/wget/distinfo
--- a/net/wget/distinfo Sun Apr 07 15:00:50 2019 +0000
+++ b/net/wget/distinfo Wed Apr 10 09:24:20 2019 +0000
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.58 2019/02/10 19:49:58 spz Exp $
+$NetBSD: distinfo,v 1.58.2.1 2019/04/10 09:24:20 bsiegert Exp $
 
-SHA1 (wget-1.20.1.tar.lz) = 6c46afab96031eba0429ceba7e1d6f8206b9a036
-RMD160 (wget-1.20.1.tar.lz) = 82f71ce2a47a052ed7fb7b0d18f0a62e62142b75
-SHA512 (wget-1.20.1.tar.lz) = d35cdb390c1a28efb756b86c6cdb5c19d40809883266b7a98c7916cda515e34600951f2ad3d148864b3ace2451f8db726c2b7025cc2dd2d692aafc59dae200f8
-Size (wget-1.20.1.tar.lz) = 2120611 bytes
+SHA1 (wget-1.20.3.tar.lz) = 021929778956b7d71cf5c4fd98b4c719b293088d
+RMD160 (wget-1.20.3.tar.lz) = 799ac821c7ffde9d2cb3007a6ce4114a66181ce6
+SHA512 (wget-1.20.3.tar.lz) = 95fb064f0d79b0a3178a83322f58a85a3a036fb300ed759eb67a538f0bbacdd552f6cbeb60d63b4f0113e8467d923a5ce7ac5570b7a4ce1733b3dfd559bb33b2
+Size (wget-1.20.3.tar.lz) = 2135272 bytes
 SHA1 (patch-doc_wget.texi) = 6db25b3500ff4617b5ade34d9013b1f9876104f8