Changelog for wget-1.12-1.3.x86_64.rpm :
Sun Aug 15 14:00:00 2010 dimstarAATTopensuse.org
- Update to version 1.12:
+ SECURITY FIX: It had been possible to trick Wget into accepting
SSL certificates that don\'t match the host name, through the
trick of embedding NUL characters into the certs\' common name
+ Added support for CSS. This includes:
- Parsing links from CSS files, and from CSS content found in
HTML style tags and attributes.
- Supporting conversion of links found within CSS content, when
- -convert-links is specified.
- Ensuring that CSS files end in the \".css\" filename extension,
when --convert-links is specified.
+ Added support for Internationalized Resource Identifiers
+ Wget now provides more sensible exit status codes when
downloads don\'t proceed as expected
+ --default-page option (and associated wgetrc command) added to
support alternative default names for index.html.
+ --ask-password option (and associated wgetrc command) added to
support password prompts at the console.
+ The --input-file option now also handles retrieving links from
an external file.
+ The output generated by the --version option now includes
information on how it was built, and the set of configure-time
options that were selected.
+ --html-extension has been renamed to --adjust-extension, to
reflect the fact that it now also applies to CSS content
+ An \"ascii\" specifier is now accepted by --restrict-file-names,
which forces the percent-encoding of all non-ASCII bytes
+ Several previously existing, but undocumented .wgetrc options
are now documented.
- Drop upstream fixed wget-nullcerts.patch.
- Minor spec-cleanups using spec-cleaner
- Use smp_mflags
- Add libproxy-devel BuildRequires and enable libproxy support
using wget-libproxy.patch.
- Add pkg-config BuildRequire to succeed with the bootstrap on
openSUSE < 11.3.

Wed Dec 16 13:00:00 2009 jengelhAATTmedozas.de
- Enable parallel building

Tue Aug 11 14:00:00 2009 maxAATTsuse.de
- Fix vulnerability against SSL certificates with a zero byte in
the common name field (wget-nullcerts.patch, bnc#528298).

Mon Sep 1 14:00:00 2008 maxAATTsuse.de
- New version 1.11.4:

* Fixed a problem in authenticating over HTTPS through a proxy.
(Regression in 1.11 over 1.10.2.)

* The combination of -r or -p with -O, which was disallowed in 1.11,
has been downgraded to a warning in 1.11.2.

* Further improvements to progress bar displays in non-English
locales (too many spaces could be inserted, causing the display to
scroll).

* Successive invocations of Wget on FTP URLS, with
- -no-remove-listing and --continue, was causing Wget to append,
rather than replace, information in the .listing file, and thereby
download the same files multiple times. Fixed in 1.11.2.

* Wget 1.11 no longer allowed \"..\" to persist at the beginning of
URLs, for improved conformance with RFC 3986. However, this
behavior presents problems for some FTP setups, and so they are now
preserved again, for FTP URLs only.

* Downgraded -N with -O to a warning, rather than an error.

* Fixed a crash on some systems, due to Wget casting a
pointer-to-long to a pointer-to-time_t.

* Fixed an issue (apparently a regression) where -O would refuse to
download when -nc was given, even though the file didn\'t exist.

* Fixed a situation where Wget could abort with --continue if the
remote server gives a content-length of zero when the file exists
locally with content.

Wed Apr 30 14:00:00 2008 maxAATTsuse.de
- Let the resolver (/etc/gai.conf) decide whether to prefer IPv4
or IPv6 if a host has addresses of both kinds (bnc#310224).
- Passive FTP is the default now, so we don\'t need to set it
explicitly anymore.

Wed Apr 23 14:00:00 2008 maxAATTsuse.de
- New version 1.11.1:

* Migration to the GPLv3+ license.

* Improvements to the HTTP password authentication code, bringing
it a little closer to RFC compliance (more is needed).

* Basic support for respecting filenames specified via
`Content-Disposition\' headers (turned on with --content-disposition,
but please read the documentation).

* An --ignore-case option to make wildcard- and suffix-matching
case-sensitive.

* Progress bar now displays correctly in non-English locales (and a
related assertion failure was fixed).

* Added option --auth-no-challenge, to support broken pre-1.11
authentication-before-server-challenge, which turns out to still
be useful for some limited cases.

* Documentation of accept/reject lists in the manual\'s \"Types of
Files\" section now explains various aspects of their behavior that
may be surprising, and notes that they may change in the future.

* Documentation of --no-parents now explains how a trailing slash,
or lack thereof, in the specified URL, will affect behavior.
- Purged lots of obsolete patches and cleaned up the spec file.

Sun Feb 24 13:00:00 2008 crrodriguezAATTsuse.de
- make use of find_lang macro

Wed Mar 28 14:00:00 2007 maxAATTsuse.de
- Fixes a null pointer dereference (#231063, CVE-2006-6719)

Thu Jun 22 14:00:00 2006 maxAATTsuse.de
- Removed the unneeded fix for CAN-2004-1487
(bugs #179369 and #185214).
- Filter escape responses from the HTTP server (CAN-2004-1488,
bug #185265).

Wed Feb 1 13:00:00 2006 maxAATTsuse.de
- Fixed (hacked) restart of interrupted FTP transactions (#144410).