---
- branch: MAIN
  date: Mon May 14 14:40:17 UTC 2018
  files:
  - new: '1.66'
    old: '1.65'
    path: pkgsrc/www/w3m/Makefile.common
    pathrev: pkgsrc/www/w3m/Makefile.common@1.66
    type: modified
  - new: '1.31'
    old: '1.30'
    path: pkgsrc/www/w3m/distinfo
    pathrev: pkgsrc/www/w3m/distinfo@1.31
    type: modified
  id: 20180514T144017Z.e0b1ce8e804afaaddd0df779b8672c28216254a4
  log: |
    w3m{,-img}: Update www/w3m{,-img} to 0.5.3.20180125

    Changes:
    Debian's w3m 0.5.3+git20180125
    * bug fixes
     - fix stack overflow with malformed text [CVE-2018-6196]
     - fix null deref with malformed text [CVE-2018-6197]
     - fix /tmp file races only when ~/.w3m is unwritable [CVE-2018-6198]
     - do not remove w3mdict.cgi when "make distclean"
     - do not turn a form's GET into POST
     - correct <base ...> parsing
     - accept TERM=fbterm
    * new feature
     - extend ssl_forbid_method to disable TLSv1.1
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/www/w3m'
  unixtime: '1526308817'
  user: leot