Changelog for wget-debugsource-1.11.4-1.2.i586.rpm :
Tue Aug 11 14:00:00 2009 maxAATTsuse.de
- Fix vulnerability against SSL certificates with a zero byte in
the common name field (wget-nullcerts.patch, bnc#528298).

Mon Sep 1 14:00:00 2008 maxAATTsuse.de
- New version 1.11.4:

* Fixed a problem in authenticating over HTTPS through a proxy.
(Regression in 1.11 over 1.10.2.)

* The combination of -r or -p with -O, which was disallowed in 1.11,
has been downgraded to a warning in 1.11.2.

* Further improvements to progress bar displays in non-English
locales (too many spaces could be inserted, causing the display to
scroll).

* Successive invocations of Wget on FTP URLS, with
- -no-remove-listing and --continue, was causing Wget to append,
rather than replace, information in the .listing file, and thereby
download the same files multiple times. Fixed in 1.11.2.

* Wget 1.11 no longer allowed \"..\" to persist at the beginning of
URLs, for improved conformance with RFC 3986. However, this
behavior presents problems for some FTP setups, and so they are now
preserved again, for FTP URLs only.

* Downgraded -N with -O to a warning, rather than an error.

* Fixed a crash on some systems, due to Wget casting a
pointer-to-long to a pointer-to-time_t.

* Fixed an issue (apparently a regression) where -O would refuse to
download when -nc was given, even though the file didn\'t exist.

* Fixed a situation where Wget could abort with --continue if the
remote server gives a content-length of zero when the file exists
locally with content.

Wed Apr 30 14:00:00 2008 maxAATTsuse.de
- Let the resolver (/etc/gai.conf) decide whether to prefer IPv4
or IPv6 if a host has addresses of both kinds (bnc#310224).
- Passive FTP is the default now, so we don\'t need to set it
explicitly anymore.

Wed Apr 23 14:00:00 2008 maxAATTsuse.de
- New version 1.11.1:

* Migration to the GPLv3+ license.

* Improvements to the HTTP password authentication code, bringing
it a little closer to RFC compliance (more is needed).

* Basic support for respecting filenames specified via
`Content-Disposition\' headers (turned on with --content-disposition,
but please read the documentation).

* An --ignore-case option to make wildcard- and suffix-matching
case-sensitive.

* Progress bar now displays correctly in non-English locales (and a
related assertion failure was fixed).

* Added option --auth-no-challenge, to support broken pre-1.11
authentication-before-server-challenge, which turns out to still
be useful for some limited cases.

* Documentation of accept/reject lists in the manual\'s \"Types of
Files\" section now explains various aspects of their behavior that
may be surprising, and notes that they may change in the future.

* Documentation of --no-parents now explains how a trailing slash,
or lack thereof, in the specified URL, will affect behavior.
- Purged lots of obsolete patches and cleaned up the spec file.

Sun Feb 24 13:00:00 2008 crrodriguezAATTsuse.de
- make use of find_lang macro

Wed Mar 28 14:00:00 2007 maxAATTsuse.de
- Fixes a null pointer dereference (#231063, CVE-2006-6719)

Thu Jun 22 14:00:00 2006 maxAATTsuse.de
- Removed the unneeded fix for CAN-2004-1487
(bugs #179369 and #185214).
- Filter escape responses from the HTTP server (CAN-2004-1488,
bug #185265).

Wed Feb 1 13:00:00 2006 maxAATTsuse.de
- Fixed (hacked) restart of interrupted FTP transactions (#144410).

Wed Jan 25 13:00:00 2006 mlsAATTsuse.de
- converted neededforbuild to BuildRequires

Mon Jan 16 13:00:00 2006 mmjAATTsuse.de
- Compile with -fstack-protector