Sat May 19 08:57:22 2018 UTC ()
Pullup ticket #5756 - requested by bsiegert
www/w3m: security update

Revisions pulled up:
- www/w3m/Makefile.common                                       1.66
- www/w3m/distinfo                                              1.31

-------------------------------------------------------------------
   Module Name:    pkgsrc
   Committed By:   leot
   Date:           Mon May 14 14:40:17 UTC 2018

   Modified Files:
            pkgsrc/www/w3m: Makefile.common distinfo

   Log Message:
   w3m{,-img}: Update www/w3m{,-img} to 0.5.3.20180125

   Changes:
   Debian's w3m 0.5.3+git20180125
   * bug fixes
     - fix stack overflow with malformed text [CVE-2018-6196]
     - fix null deref with malformed text [CVE-2018-6197]
     - fix /tmp file races only when ~/.w3m is unwritable [CVE-2018-6198]
     - do not remove w3mdict.cgi when "make distclean"
     - do not turn a form's GET into POST
     - correct <base ...> parsing
     - accept TERM�term
   * new feature
     - extend ssl_forbid_method to disable TLSv1.1

   To generate a diff of this commit:
   cvs rdiff -u -r1.65 -r1.66 pkgsrc/www/w3m/Makefile.common
   cvs rdiff -u -r1.30 -r1.31 pkgsrc/www/w3m/distinfo


(spz)
diff -r1.65 -r1.65.8.1 pkgsrc/www/w3m/Makefile.common
diff -r1.30 -r1.30.12.1 pkgsrc/www/w3m/distinfo
cvs diff -r1.65 -r1.65.8.1 pkgsrc/www/w3m/Makefile.common (expand / switch to unified diff)

--- pkgsrc/www/w3m/Makefile.common 2017/07/10 12:26:53 1.65
+++ pkgsrc/www/w3m/Makefile.common 2018/05/19 08:57:22 1.65.8.1
@@ -1,37 +1,37 @@ @@ -1,37 +1,37 @@
1# $NetBSD: Makefile.common,v 1.65 2017/07/10 12:26:53 joerg Exp $ 1# $NetBSD: Makefile.common,v 1.65.8.1 2018/05/19 08:57:22 spz Exp $
2# 2#
3# used by www/w3m/Makefile 3# used by www/w3m/Makefile
4# used by www/w3m-img/Makefile 4# used by www/w3m-img/Makefile
5 5
6DISTNAME= w3m-${W3M_VERS} 6DISTNAME= w3m-${W3M_VERS}
7CATEGORIES= www 7CATEGORIES= www
8MASTER_SITES= ${MASTER_SITE_GITHUB:=tats/} 8MASTER_SITES= ${MASTER_SITE_GITHUB:=tats/}
9GITHUB_TAG= v${W3M_VERS} 9GITHUB_TAG= v${W3M_VERS}
10 10
11MAINTAINER= uebayasi@NetBSD.org 11MAINTAINER= uebayasi@NetBSD.org
12HOMEPAGE= http://w3m.sourceforge.net/ 12HOMEPAGE= http://w3m.sourceforge.net/
13# or https://github.com/tats/w3m 13# or https://github.com/tats/w3m
14# or https://packages.qa.debian.org/w/w3m.html 14# or https://packages.qa.debian.org/w/w3m.html
15 15
16WRKSRC= ${WRKDIR}/w3m-${W3M_VERS:S/+/-/} 16WRKSRC= ${WRKDIR}/w3m-${W3M_VERS:S/+/-/}
17 17
18GNU_CONFIGURE= yes 18GNU_CONFIGURE= yes
19USE_LANGUAGES= c c++ 19USE_LANGUAGES= c c++
20USE_TOOLS+= gmake # Needed for some combinations of options... 20USE_TOOLS+= gmake # Needed for some combinations of options...
21USE_TOOLS+= msgfmt 21USE_TOOLS+= msgfmt
22USE_PKGLOCALEDIR= yes 22USE_PKGLOCALEDIR= yes
23 23
24W3M_VERS= 0.5.3+git20170102 24W3M_VERS= 0.5.3+git20180125
25W3M_PKGVERS= ${W3M_VERS:S/+git/.0./} 25W3M_PKGVERS= ${W3M_VERS:S/+git/.0./}
26 26
27# For w3mman, xface2xpm, cgi scripts. 27# For w3mman, xface2xpm, cgi scripts.
28USE_TOOLS+= perl:run pax 28USE_TOOLS+= perl:run pax
29 29
30DOCDIR= share/doc/w3m 30DOCDIR= share/doc/w3m
31 31
32_W3M_USE_IMAGE?= NO 32_W3M_USE_IMAGE?= NO
33 33
34.include "options.mk" 34.include "options.mk"
35 35
36.include "../../mk/bsd.prefs.mk" 36.include "../../mk/bsd.prefs.mk"
37 37
cvs diff -r1.30 -r1.30.12.1 pkgsrc/www/w3m/distinfo (expand / switch to unified diff)

--- pkgsrc/www/w3m/distinfo 2017/02/19 18:35:13 1.30
+++ pkgsrc/www/w3m/distinfo 2018/05/19 08:57:22 1.30.12.1
@@ -1,6 +1,6 @@ @@ -1,6 +1,6 @@
1$NetBSD: distinfo,v 1.30 2017/02/19 18:35:13 snj Exp $ 1$NetBSD: distinfo,v 1.30.12.1 2018/05/19 08:57:22 spz Exp $
2 2
3SHA1 (w3m-0.5.3+git20170102.tar.gz) = 5279c2cb577635e709fb5979acadd6b4371e5b99 3SHA1 (w3m-0.5.3+git20180125.tar.gz) = 49df4a9c35f94c211ba2d904f7c72b8aa82e269d
4RMD160 (w3m-0.5.3+git20170102.tar.gz) = 1301f33b16f4532220b69faed7cd182074fa901f 4RMD160 (w3m-0.5.3+git20180125.tar.gz) = d899c863062f09d49aeea2ec1533c772729c50bc
5SHA512 (w3m-0.5.3+git20170102.tar.gz) = c077a003512a53856d2353d97ac2cbfdaebdeff8c914102475b6bbf095f218652235cc1098ce7173c9095216520d9e233e7dd23ea551ccf7263929e219ac04e5 5SHA512 (w3m-0.5.3+git20180125.tar.gz) = 61b8498b927569937c509460e291eeba6eb302d34ccd6e1bf4d1eb07ac73a3ac5a477161727d310324625be04b907f8c3e970382d08c9fa0846b371699f04e14
6Size (w3m-0.5.3+git20170102.tar.gz) = 2180292 bytes 6Size (w3m-0.5.3+git20180125.tar.gz) = 2181743 bytes