CVS commit: [pkgsrc-2018Q4] pkgsrc/net/wget

["Benny Siegert" <bsiegert%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bsiegert
Date:           Sat Feb 16 11:17:47 UTC 2019

Modified Files:
        pkgsrc/net/wget [pkgsrc-2018Q4]: Makefile distinfo

Log Message:
Pullup ticket #5908 - requested by spz
net/wget: security fix

Revisions pulled up:
- net/wget/Makefile                                             1.144
- net/wget/distinfo                                             1.58

---
   Module Name: pkgsrc
   Committed By:        spz
   Date:                Sun Feb 10 19:49:58 UTC 2019

   Modified Files:
        pkgsrc/net/wget: Makefile distinfo

   Log Message:
   updating wget to 1.20.1, which fixes CVE-2018-20483

   Upstream changelog:
      * Changes in Wget 1.20.1

      ** --xattr is no longer default since it introduces privacy issues.

      ** --xattr saves the Referer as scheme/host/port, user/pw/path/query/fragment
         are no longer saved to prevent privacy issues.

      ** --xattr saves the Original URL without user/password to prevent
         privacy issues.

      * Changes in Wget 1.20

      ** Add new option `--retry-on-host-error` to treat local errors as
         transient and hence Wget will retry to download the file after
         a brief waiting period.

      ** Fixed multiple potential resource leaks as found by static analysis

      ** Wget will now not create an empty wget-log file when running with
         -q and -b switches together

      ** When compiled using the GnuTLS >= 3.6.3, Wget now has support for TLSv1.3

      ** Now there is support for using libpcre2 for regex pattern matching

      ** When downloading over FTP recursively, one can now use the
         --{accept,reject}-regex switches to fine-tune the downloaded files

      ** Building Wget from the git sources now requires autoconf 2.63 or above.
         Building from the Tarballs works as it used to.


To generate a diff of this commit:
cvs rdiff -u -r1.143 -r1.143.2.1 pkgsrc/net/wget/Makefile
cvs rdiff -u -r1.57 -r1.57.6.1 pkgsrc/net/wget/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/wget/Makefile
diff -u pkgsrc/net/wget/Makefile:1.143 pkgsrc/net/wget/Makefile:1.143.2.1
--- pkgsrc/net/wget/Makefile:1.143      Sun Dec  9 18:52:43 2018
+++ pkgsrc/net/wget/Makefile    Sat Feb 16 11:17:47 2019
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.143 2018/12/09 18:52:43 adam Exp $
+# $NetBSD: Makefile,v 1.143.2.1 2019/02/16 11:17:47 bsiegert Exp $
 
-DISTNAME=      wget-1.19.5
-PKGREVISION=   3
+DISTNAME=      wget-1.20.1
 CATEGORIES=    net
 MASTER_SITES=  ${MASTER_SITE_GNU:=wget/}
 EXTRACT_SUFX=  .tar.lz

Index: pkgsrc/net/wget/distinfo
diff -u pkgsrc/net/wget/distinfo:1.57 pkgsrc/net/wget/distinfo:1.57.6.1
--- pkgsrc/net/wget/distinfo:1.57       Mon May  7 06:48:39 2018
+++ pkgsrc/net/wget/distinfo    Sat Feb 16 11:17:47 2019
@@ -1,7 +1,7 @@
-$NetBSD: distinfo,v 1.57 2018/05/07 06:48:39 wiz Exp $
+$NetBSD: distinfo,v 1.57.6.1 2019/02/16 11:17:47 bsiegert Exp $
 
-SHA1 (wget-1.19.5.tar.lz) = a28bbdfdee0d68271165b7e965fa5b9742ab65e8
-RMD160 (wget-1.19.5.tar.lz) = 8da0bc988f14e340d00c02b589b86f454cb8cb04
-SHA512 (wget-1.19.5.tar.lz) = 4cab6aa9ea7153230ed763f20d220c1184b6ac305a0eb74352f5e8aab2964ea57e5f4ea925b4b9d9a1acccc17d5747a0a2c01633765fe618828c0cddc3f16bb2
-Size (wget-1.19.5.tar.lz) = 2204066 bytes
+SHA1 (wget-1.20.1.tar.lz) = 6c46afab96031eba0429ceba7e1d6f8206b9a036
+RMD160 (wget-1.20.1.tar.lz) = 82f71ce2a47a052ed7fb7b0d18f0a62e62142b75
+SHA512 (wget-1.20.1.tar.lz) = d35cdb390c1a28efb756b86c6cdb5c19d40809883266b7a98c7916cda515e34600951f2ad3d148864b3ace2451f8db726c2b7025cc2dd2d692aafc59dae200f8
+Size (wget-1.20.1.tar.lz) = 2120611 bytes
 SHA1 (patch-doc_wget.texi) = 6db25b3500ff4617b5ade34d9013b1f9876104f8