From 8cdc73058832d28ae1c3d0cd331f5b4cac08509d14ac1503f28b6edeb4c56b3f Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Josef=20M=C3=B6llers?= Date: Fri, 5 Apr 2019 16:53:24 +0000 Subject: [PATCH] Accepting request 691866 from home:jmoellers:branches:network:utilities OBS-URL: https://build.opensuse.org/request/show/691866 OBS-URL: https://build.opensuse.org/package/show/network:utilities/wget?expand=0&rev=99 --- wget-1.20.2.tar.gz | 3 --- wget-1.20.2.tar.gz.sig | 17 ----------------- wget-1.20.3.tar.gz | 3 +++ wget-1.20.3.tar.gz.sig | 16 ++++++++++++++++ wget.changes | 8 ++++++++ wget.spec | 6 +++--- 6 files changed, 30 insertions(+), 23 deletions(-) delete mode 100644 wget-1.20.2.tar.gz delete mode 100644 wget-1.20.2.tar.gz.sig create mode 100644 wget-1.20.3.tar.gz create mode 100644 wget-1.20.3.tar.gz.sig diff --git a/wget-1.20.2.tar.gz b/wget-1.20.2.tar.gz deleted file mode 100644 index 7ab566e..0000000 --- a/wget-1.20.2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:7e43b98cb5e10234836ebef6faf24c4d96c0ae7a480e49ff658117cc4793d166 -size 4486237 diff --git a/wget-1.20.2.tar.gz.sig b/wget-1.20.2.tar.gz.sig deleted file mode 100644 index 448e0ef..0000000 --- a/wget-1.20.2.tar.gz.sig +++ /dev/null @@ -1,17 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQJDBAABCgAtFiEEa5j2N9h5xSNuJ3xcZP+QqujHCvkFAlyiWRYPHGRhcm5pckBn -bnUub3JnAAoJEGT/kKroxwr5KQ4P/jcsrKQwB0i7sWWNMzuUcdyVAZBxVOjrG1DQ -7JPmGtqc4YxV+Ggz1yKHCtrkI0RmPgXGrZ/JhAGbC+u4PgNSr3AAuBbej4Xb9FHB -rWBvEP8vXeJ3ZMuP0QmaeJMzSVKUALoB6gtDKMSt6BoFC7VSq37wqRrx3Y18kFHW -0U16kph0mBPi4/tJ99Mnu5u3wxYSSNz6TdVGM1ygVVy7SnZwax759u1XJTmvC4+8 -l1fafuFX31KXUNF2z/5qzTfkVhYKTDOEuBwNmfVdmP9o1k4ebd0zrKg6CS/FOQpn -KWcnWSBmEq29mYUWqXUgsQf/5siG3kUgXg4BF9m4lUMKS6/zcsHVzoLEnbk4wDFc -Kfph7djRgRn9cwN7V0ZRtrh0uHa/IHQ2cAsFlWJMski9TxMsJhdM9Ogq5cQRZz4T -Sibz+S3u530WShq9N+btg4V6yUksb07I8yJtBQrbAwoBjx6z99njolLq6GTO5H52 -ZF1bJ3szVfODC1+x4dOlfROGaULPHaYAWG/sSes6Zj2WuGVWG2FLgnG59P1ud1bn -iRBbiKp8uA166N9yDiBbLZzW84mFl9miSC4NjGBdIy9PLupRHy2VVi3nsJbhMrmU -KK2In/IEug7MvNrxJ6euECajZMNNDLDRX5YD3uyzGrbqBXgM0MtdSyrHAhnlFLdl -GFai1gWc -=/QpO ------END PGP SIGNATURE----- diff --git a/wget-1.20.3.tar.gz b/wget-1.20.3.tar.gz new file mode 100644 index 0000000..b63aa01 --- /dev/null +++ b/wget-1.20.3.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:31cccfc6630528db1c8e3a06f6decf2a370060b982841cfab2b8677400a5092e +size 4489249 diff --git a/wget-1.20.3.tar.gz.sig b/wget-1.20.3.tar.gz.sig new file mode 100644 index 0000000..37a90df --- /dev/null +++ b/wget-1.20.3.tar.gz.sig @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEa5j2N9h5xSNuJ3xcZP+QqujHCvkFAlynKhIACgkQZP+QqujH +Cvke/g/6Aj5sR9oVD5YxT5FZAaIvxOeTOd6ovWN9qDim/NOdRSzHh/TVydnD6aQ4 +7k5UcmArzxO1O0mwCQmogGbhsz3Svq+kfvSw5J6KsqAcz4/MlV39aFMaGVkufEEy +H8w4L59nWJdTZK3nK+zhVH30m9gyAc4e+Vh5YpJzPtznyDxQGKXGQIwUYukRq2nY +GNTJpyPqSrUVKSIjv6YyOPm/m9dSWUoakoel6O3M16AuTOluYl8c/1uEl6WctG65 +L605Nb+3mVqHYWBxTOYQrYu5QtqXsxDi91jiXQeZG9tWKtaZfv5NSsQTwEpNpzAB +1Wmp8P+X6M/e1XSllee+CVWyPcVQcvMxqkbdVAV3pkTrNVAT9qvlTIxOob/D68ks +Z6/PFOz4C0PXZS7Hov3/bNbHRHx+ZSrj/5aS5gdi+Xide8JQMnIeSHptyBE6AVcd +JblRRfDW5DDOxfuhetXuMaga9DS8uWeGlthBiD4D2E8uFqQrfUZA7HjUOaE2l72+ +1iBMRgdd7bZYtDWjrhoPDrowrCR1A/9GQ0AGSnvDqXpmANVyS2rPf0sGUfRntGha +s5SfCDcCQiGqoMy+y2/RlGC/l0KGYl1IC1wcp7NS9ctmHoDfbf58f66DdbLxZvg+ +SNpdvDyUfs8vYzXH4eT9DMIiTGBFiUXXdbZC3fx4fZOtZA5KP20= +=50bx +-----END PGP SIGNATURE----- diff --git a/wget.changes b/wget.changes index 23b906a..d7a7c96 100644 --- a/wget.changes +++ b/wget.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Fri Apr 5 14:57:54 UTC 2019 - josef.moellers@suse.com + +- Upgrade to GNU wget 1.20.3: + * Finally fixed the buffer overflow vulnerability + [CVE-2019-5953] + ------------------------------------------------------------------- Wed Apr 03 05:07:33 UTC 2019 - seanlew@opensuse.org @@ -24,6 +31,7 @@ Fri Dec 28 20:51:04 UTC 2018 - astieger@suse.com * all of the above fix CVE-2018-20483 (bsc#1120382) ------------------------------------------------------------------- +>>>>>>> ./wget.changes.r6adf29968e189e8b5ddd752a25a552d9 Fri Nov 30 14:02:43 UTC 2018 - josef.moellers@suse.com - Version update to 1.20: diff --git a/wget.spec b/wget.spec index b6e0879..4bfc633 100644 --- a/wget.spec +++ b/wget.spec @@ -12,18 +12,18 @@ # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. -# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# Please submit bugfixes or comments via http://bugs.opensuse.org/ # %bcond_with regression_tests Name: wget -Version: 1.20.2 +Version: 1.20.3 Release: 0 Summary: A Tool for Mirroring FTP and HTTP Servers License: GPL-3.0-or-later Group: Productivity/Networking/Web/Utilities -URL: https://www.gnu.org/software/wget/ +Url: https://www.gnu.org/software/wget/ Source: https://ftp.gnu.org/gnu/wget/%{name}-%{version}.tar.gz Source1: https://ftp.gnu.org/gnu/wget/%{name}-%{version}.tar.gz.sig Source2: https://savannah.gnu.org/project/memberlist-gpgkeys.php?group=wget&download=1#/wget.keyring