From patchwork Mon May 7 09:02:03 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Matthias Fischer X-Patchwork-Id: 1756 Return-Path: Received: from mail01.ipfire.org (mail01.ipfire.org [IPv6:2001:470:7183:25::1]) by web02.i.ipfire.org (Postfix) with ESMTP id 7642B60726 for ; Mon, 7 May 2018 01:02:09 +0200 (CEST) Received: from mail01.i.ipfire.org (localhost [IPv6:::1]) by mail01.ipfire.org (Postfix) with ESMTP id 05DB810F5EAE; Mon, 7 May 2018 00:02:09 +0100 (BST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=201801; t=1525647729; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references:list-id: list-unsubscribe:list-subscribe:list-post; bh=gMtD8vuczRHN28NC3kLg0/y0jL6IGj+0wFLyQ0TVkwY=; b=of6KCltjDNvKqs0/scKx+QWAWzyBhZ13fyWjm2d5+BDTlb4sw6qKIZ3Xk6y+TANhmLPHsy 82npjlMIf2wHOpJUHVLTRkuDY2S2giEbnpTk5FGl1HSMm2mkAvVGF6uryRFBZyVU3xZRPi RjHKQqsMSkYM/jsjzs7NGUbFdWfUd8hrbcWIZy6DPPf62WRtm9QKFRS35o3Yu8veacatqD Hksn9qBcNP/oRnHSthiGMtO3RA295wPLah+aGDrJ8Yp9xekJHxZb+gCP+GKjn0e/8Kb0zl PSOfXJu8HB2NEblqSvfkX/73Q+gB8rUfFMrOsgTqDJck2ni29xAhtu8qWEheBg== Authentication-Results: mail01.i.ipfire.org; auth=pass smtp.auth=mfischer smtp.mailfrom=matthias.fischer@ipfire.org DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=201801; t=1525647727; h=from:from:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:content-type: content-transfer-encoding:in-reply-to:references; bh=gMtD8vuczRHN28NC3kLg0/y0jL6IGj+0wFLyQ0TVkwY=; b=CCM2VCLjjlmfh7By1oVJdzzZYL9ErERCPVEUjXfm+FBa7W1iiBTDpraJ6gsg30Ttc0viwQ Fg5P9QcuyrizcP2BbmWqJQlDg+1BrzN51O+DjQK49T+Gdj5D5QslDeo6ujN25pcvKOv8UD O4ACbDLrcLUlh/6V7H6IOMzEgf6fhNvvy4CE/OA4TLRLJeF8I4imFHS7syvCZWGObznWsa NgPpNT6X2THbu1zvnsme3FzdV6MRI6kkOEjAHlJT9mI+qaDP0g397/HpRP5Gw9JNEiT5MG uPxlNIgn/XrP2vpq/hxxnSq0Wo3OU9CY4w8eHa6PTAJKn0/d1QbFc8Xdjn8u0g== Received: from Devel.localdomain (p5B0A1994.dip0.t-ipconnect.de [91.10.25.148]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits)) (Client did not present a certificate) by mail01.ipfire.org (Postfix) with ESMTPSA id 1E7C110F5EA4 for ; Mon, 7 May 2018 00:02:07 +0100 (BST) From: Matthias Fischer To: development@lists.ipfire.org Subject: [PATCH] wget: Update to 1.19.5 Date: Mon, 7 May 2018 01:02:03 +0200 Message-Id: <20180506230203.17503-1-matthias.fischer@ipfire.org> X-Mailer: git-send-email 2.17.0 X-Spamd-Result: default: False [-2.10 / 11.00]; ASN(0.00)[asn:3320, ipnet:91.0.0.0/10, country:DE]; DKIM_SIGNED(0.00)[]; FROM_HAS_DN(0.00)[]; RCVD_TLS_ALL(0.00)[]; BAYES_HAM(-3.00)[100.00%]; ARC_NA(0.00)[]; FROM_EQ_ENVFROM(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MID_CONTAINS_FROM(1.00)[]; RCVD_COUNT_ZERO(0.00)[0]; RCPT_COUNT_ONE(0.00)[1]; MIME_GOOD(-0.10)[text/plain]; TO_DN_NONE(0.00)[] X-Spam-Status: No, score=-2.10 X-Rspamd-Server: mail01.i.ipfire.org X-BeenThere: development@lists.ipfire.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: IPFire development talk List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: development-bounces@lists.ipfire.org Sender: "Development" Hi, Excerpts from official announcement: "This version fixes CVE-2018-0494 (Cookie injection vulnerability) found by Harry Sintonen. This version fixes several issues, mostly found by OSS-Fuzz. It also introduces TLS1.3 with OpenSSL, a new option --ciphers and updates the CSS grammar to version 2.2. ... Noteworthy changes: * Fix cookie injection (CVE-2018-0494) * Enable TLS1.3 with recent OpenSSL environment * New option --ciphers to set GnuTLS / OpenSSL ciphers directly * Updated CSS grammar to CSS 2.2 * Fixed several memleaks found by OSS-Fuzz * Fixed several buffer overflows found by OSS-Fuzz * Fixed several integer overflows found by OSS-Fuzz * Several minor bug fixes" Best, Matthias Signed-off-by: Matthias Fischer --- lfs/wget | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/wget b/lfs/wget index 7a5cdbb11..39f59ba80 100644 --- a/lfs/wget +++ b/lfs/wget @@ -24,7 +24,7 @@ include Config -VER = 1.19.4 +VER = 1.19.5 THISAPP = wget-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = a2a2c1dc4ac5003fc25a8e60b4a9464e +$(DL_FILE)_MD5 = 2db6f03d655041f82eb64b8c8a1fa7da install : $(TARGET)