Changelog for wget-1.14-4.1.x86_64.rpm :

* Sun Aug 15 2010 dimstarAATTopensuse.org- Update to version 1.12: + SECURITY FIX: It had been possible to trick Wget into accepting SSL certificates that don\'t match the host name, through the trick of embedding NUL characters into the certs\' common name + Added support for CSS. This includes: - Parsing links from CSS files, and from CSS content found in HTML style tags and attributes. - Supporting conversion of links found within CSS content, when - -convert-links is specified. - Ensuring that CSS files end in the \".css\" filename extension, when --convert-links is specified. + Added support for Internationalized Resource Identifiers + Wget now provides more sensible exit status codes when downloads don\'t proceed as expected + --default-page option (and associated wgetrc command) added to support alternative default names for index.html. + --ask-password option (and associated wgetrc command) added to support password prompts at the console. + The --input-file option now also handles retrieving links from an external file. + The output generated by the --version option now includes information on how it was built, and the set of configure-time options that were selected. + --html-extension has been renamed to --adjust-extension, to reflect the fact that it now also applies to CSS content + An \"ascii\" specifier is now accepted by --restrict-file-names, which forces the percent-encoding of all non-ASCII bytes + Several previously existing, but undocumented .wgetrc options are now documented.- Drop upstream fixed wget-nullcerts.patch.- Minor spec-cleanups using spec-cleaner- Use smp_mflags- Add libproxy-devel BuildRequires and enable libproxy support using wget-libproxy.patch.- Add pkg-config BuildRequire to succeed with the bootstrap on openSUSE < 11.3.
* Wed Dec 16 2009 jengelhAATTmedozas.de- Enable parallel building
* Tue Aug 11 2009 maxAATTsuse.de- Fix vulnerability against SSL certificates with a zero byte in the common name field (wget-nullcerts.patch, bnc#528298).
* Mon Sep 01 2008 maxAATTsuse.de- New version 1.11.4:
* Fixed a problem in authenticating over HTTPS through a proxy. (Regression in 1.11 over 1.10.2.)
* The combination of -r or -p with -O, which was disallowed in 1.11, has been downgraded to a warning in 1.11.2.
* Further improvements to progress bar displays in non-English locales (too many spaces could be inserted, causing the display to scroll).
* Successive invocations of Wget on FTP URLS, with - -no-remove-listing and --continue, was causing Wget to append, rather than replace, information in the .listing file, and thereby download the same files multiple times. Fixed in 1.11.2.
* Wget 1.11 no longer allowed \"..\" to persist at the beginning of URLs, for improved conformance with RFC 3986. However, this behavior presents problems for some FTP setups, and so they are now preserved again, for FTP URLs only.
* Downgraded -N with -O to a warning, rather than an error.
* Fixed a crash on some systems, due to Wget casting a pointer-to-long to a pointer-to-time_t.
* Fixed an issue (apparently a regression) where -O would refuse to download when -nc was given, even though the file didn\'t exist.
* Fixed a situation where Wget could abort with --continue if the remote server gives a content-length of zero when the file exists locally with content.
* Wed Apr 30 2008 maxAATTsuse.de- Let the resolver (/etc/gai.conf) decide whether to prefer IPv4 or IPv6 if a host has addresses of both kinds (bnc#310224).- Passive FTP is the default now, so we don\'t need to set it explicitly anymore.
* Wed Apr 23 2008 maxAATTsuse.de- New version 1.11.1:
* Migration to the GPLv3+ license.
* Improvements to the HTTP password authentication code, bringing it a little closer to RFC compliance (more is needed).
* Basic support for respecting filenames specified via `Content-Disposition\' headers (turned on with --content-disposition, but please read the documentation).
* An --ignore-case option to make wildcard- and suffix-matching case-sensitive.
* Progress bar now displays correctly in non-English locales (and a related assertion failure was fixed).
* Added option --auth-no-challenge, to support broken pre-1.11 authentication-before-server-challenge, which turns out to still be useful for some limited cases.
* Documentation of accept/reject lists in the manual\'s \"Types of Files\" section now explains various aspects of their behavior that may be surprising, and notes that they may change in the future.
* Documentation of --no-parents now explains how a trailing slash, or lack thereof, in the specified URL, will affect behavior.- Purged lots of obsolete patches and cleaned up the spec file.
* Sun Feb 24 2008 crrodriguezAATTsuse.de- make use of find_lang macro
* Wed Mar 28 2007 maxAATTsuse.de- Fixes a null pointer dereference (#231063, CVE-2006-6719)
* Thu Jun 22 2006 maxAATTsuse.de- Removed the unneeded fix for CAN-2004-1487 (bugs #179369 and #185214).- Filter escape responses from the HTTP server (CAN-2004-1488, bug #185265).
* Wed Feb 01 2006 maxAATTsuse.de- Fixed (hacked) restart of interrupted FTP transactions (#144410).