Sun Feb 10 19:49:58 2019 UTC ()
updating wget to 1.20.1, which fixes CVE-2018-20483

Upstream changelog:
   * Changes in Wget 1.20.1

   ** --xattr is no longer default since it introduces privacy issues.

   ** --xattr saves the Referer as scheme/host/port, user/pw/path/query/fragment
      are no longer saved to prevent privacy issues.

   ** --xattr saves the Original URL without user/password to prevent
      privacy issues.

   * Changes in Wget 1.20

   ** Add new option `--retry-on-host-error` to treat local errors as
      transient and hence Wget will retry to download the file after
      a brief waiting period.

   ** Fixed multiple potential resource leaks as found by static analysis

   ** Wget will now not create an empty wget-log file when running with
      -q and -b switches together

   ** When compiled using the GnuTLS >= 3.6.3, Wget now has support for TLSv1.3

   ** Now there is support for using libpcre2 for regex pattern matching

   ** When downloading over FTP recursively, one can now use the
      --{accept,reject}-regex switches to fine-tune the downloaded files

   ** Building Wget from the git sources now requires autoconf 2.63 or above.
      Building from the Tarballs works as it used to.


(spz)
diff -r1.143 -r1.144 pkgsrc/net/wget/Makefile
diff -r1.57 -r1.58 pkgsrc/net/wget/distinfo

cvs diff -r1.143 -r1.144 pkgsrc/net/wget/Makefile (expand / switch to unified diff)

--- pkgsrc/net/wget/Makefile 2018/12/09 18:52:43 1.143
+++ pkgsrc/net/wget/Makefile 2019/02/10 19:49:58 1.144
@@ -1,17 +1,16 @@ @@ -1,17 +1,16 @@
1# $NetBSD: Makefile,v 1.143 2018/12/09 18:52:43 adam Exp $ 1# $NetBSD: Makefile,v 1.144 2019/02/10 19:49:58 spz Exp $
2 2
3DISTNAME= wget-1.19.5 3DISTNAME= wget-1.20.1
4PKGREVISION= 3 
5CATEGORIES= net 4CATEGORIES= net
6MASTER_SITES= ${MASTER_SITE_GNU:=wget/} 5MASTER_SITES= ${MASTER_SITE_GNU:=wget/}
7EXTRACT_SUFX= .tar.lz 6EXTRACT_SUFX= .tar.lz
8 7
9MAINTAINER= pkgsrc-users@NetBSD.org 8MAINTAINER= pkgsrc-users@NetBSD.org
10HOMEPAGE= http://www.gnu.org/software/wget/wget.html 9HOMEPAGE= http://www.gnu.org/software/wget/wget.html
11COMMENT= Retrieve files from the 'net via HTTP and FTP 10COMMENT= Retrieve files from the 'net via HTTP and FTP
12LICENSE= gnu-gpl-v3 11LICENSE= gnu-gpl-v3
13 12
14USE_TOOLS+= perl pod2man pkg-config 13USE_TOOLS+= perl pod2man pkg-config
15 14
16GNU_CONFIGURE= YES 15GNU_CONFIGURE= YES
17USE_OLD_DES_API= YES 16USE_OLD_DES_API= YES

cvs diff -r1.57 -r1.58 pkgsrc/net/wget/distinfo (expand / switch to unified diff)

--- pkgsrc/net/wget/distinfo 2018/05/07 06:48:39 1.57
+++ pkgsrc/net/wget/distinfo 2019/02/10 19:49:58 1.58
@@ -1,7 +1,7 @@ @@ -1,7 +1,7 @@
1$NetBSD: distinfo,v 1.57 2018/05/07 06:48:39 wiz Exp $ 1$NetBSD: distinfo,v 1.58 2019/02/10 19:49:58 spz Exp $
2 2
3SHA1 (wget-1.19.5.tar.lz) = a28bbdfdee0d68271165b7e965fa5b9742ab65e8 3SHA1 (wget-1.20.1.tar.lz) = 6c46afab96031eba0429ceba7e1d6f8206b9a036
4RMD160 (wget-1.19.5.tar.lz) = 8da0bc988f14e340d00c02b589b86f454cb8cb04 4RMD160 (wget-1.20.1.tar.lz) = 82f71ce2a47a052ed7fb7b0d18f0a62e62142b75
5SHA512 (wget-1.19.5.tar.lz) = 4cab6aa9ea7153230ed763f20d220c1184b6ac305a0eb74352f5e8aab2964ea57e5f4ea925b4b9d9a1acccc17d5747a0a2c01633765fe618828c0cddc3f16bb2 5SHA512 (wget-1.20.1.tar.lz) = d35cdb390c1a28efb756b86c6cdb5c19d40809883266b7a98c7916cda515e34600951f2ad3d148864b3ace2451f8db726c2b7025cc2dd2d692aafc59dae200f8
6Size (wget-1.19.5.tar.lz) = 2204066 bytes 6Size (wget-1.20.1.tar.lz) = 2120611 bytes
7SHA1 (patch-doc_wget.texi) = 6db25b3500ff4617b5ade34d9013b1f9876104f8 7SHA1 (patch-doc_wget.texi) = 6db25b3500ff4617b5ade34d9013b1f9876104f8