From 9c6b8d1c3a956f23de6309cd68bc97739a750f5080f87031ee1608f464252801 Mon Sep 17 00:00:00 2001
From: Jan Engelhardt <jengelh@inai.de>
Date: Tue, 30 Dec 2025 11:01:46 +0100
Subject: [PATCH 1/2] wget2 2.2.0

---
 wget2-2.1.0.tar.gz     |   3 ---
 wget2-2.1.0.tar.gz.sig | Bin 566 -> 0 bytes
 wget2-2.2.0.tar.gz     |   3 +++
 wget2-2.2.0.tar.gz.sig | Bin 0 -> 566 bytes
 wget2.changes          |  13 +++++++++++++
 wget2.spec             |  10 +++++-----
 6 files changed, 21 insertions(+), 8 deletions(-)
 delete mode 100644 wget2-2.1.0.tar.gz
 delete mode 100644 wget2-2.1.0.tar.gz.sig
 create mode 100644 wget2-2.2.0.tar.gz
 create mode 100644 wget2-2.2.0.tar.gz.sig

diff --git a/wget2-2.1.0.tar.gz b/wget2-2.1.0.tar.gz
deleted file mode 100644
index 8bcb3a7..0000000
--- a/wget2-2.1.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a05dc5191c6bad9313fd6db2777a78f5527ba4774f665d5d69f5a7461b49e2e7
-size 3867884
diff --git a/wget2-2.1.0.tar.gz.sig b/wget2-2.1.0.tar.gz.sig
deleted file mode 100644
index 8e7d8e556a69d92410cf264fc9b78852e203edc1076f7f9f62b57204c534f93b..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 566
zcmV-60?GY}0y6{v0SW*e79j*2vVFXmVM{GoL1b+RFfF#CX9Oq(0%Y)we*g*z5C||W
zwxVYQD7iln0G$GUh>?|-S*Uz#mA)N38Mqi=%UrT^8-Gbk%cG95#taSYtn)e7@JoC1
zDiS#1Jh&iVXyv|Qi$8cYtg!)3Hch{7HAX-g8d7LOdu(~A&pDe$Sd)EjgBz$=_R4xs
zfM7g^a<e7T`@3X;xd7odNFn1hv3R+enLbr;RoD=Dp3*R55$ckdgFPMX<LeH}Sz(fJ
z`*eGJuO!)4z6|4uW7qtgxoXQiBtAgI{u@@Bti~R^rAm{b?;s+wK?lozyu2?q$+!KQ
z_7jE{)xoa`^41UVFi-YctOf$j``1(=TTL^Dh7Kfo@lRv*ZN?df!NocccQ^y^5D}ZP
z%mJtmSd(O>F@)MMLa&!8VV>2>i!firvcb-0R^R27Zp$jJ|KoY!FN}9kd7->uL?V-c
z{LN?uus`;*(SfWgA#vHr@D))b(nFhFEPgR5k_^dsrEM-|GnFXWXd_=^Du1odC>;DJ
znHAzTK(R3j{<qydPIVlhM&g@)Vf0oM{Y#fKupDHc4VcJOd3(a(dhN_&G$mKF9J+Zp
z6vz?W+8;+9lXD>Zh;e>vf@`ckh`NB?m4vbpHufSK^oDwFd4{d)JE@2aQ>^6SMvdz)
z&zxA2q?nb?-%LUxEj_j$VQi!CrKeR5r?H>M?L_DOtt{@#tbGR`yUA_8j_W1$V7!OX
Erl^z)bpQYW

diff --git a/wget2-2.2.0.tar.gz b/wget2-2.2.0.tar.gz
new file mode 100644
index 0000000..d7a6860
--- /dev/null
+++ b/wget2-2.2.0.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:2b3b9c85b7fb26d33ca5f41f1f8daca71838d869a19b406063aa5c655294d357
+size 4094789
diff --git a/wget2-2.2.0.tar.gz.sig b/wget2-2.2.0.tar.gz.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..b826ea0abfd4d1f72d94f6885cc9cb867beda3a95505467b3672b4e9cf6023ea
GIT binary patch
literal 566
zcmV-60?GY}0y6{v0SW*e79j*2vVFXmVM{GoL1b+RFfF#CX9Oq(0%t>UApi;q5C||W
zwxVYQC<e+8{vk_DdjgT&?c({L{;h|quM@~84fP^Ts6~|$_oO=$$mb?JL7)z*A4ADw
zvHc(^;c-T&BaR|p33ViYushA@toLvv!&=w(P08DVnf={wb=;qKo2csvtsGN*zdAxb
zsANWr1b~M;AwHM_MAkV#6phPr=?mOc2K<knIIpjgn`)@3*H2cBFE@F#8+N70s^d!t
zoC|;)mh4L=Sl1fRs>^@;w$JN(d80KLSph+z*}$gwbD_$$+vagG&?b)7H)bQW0MvT~
zol9~kpvmz*_rC9pWdgN5Ca{Q#hPb1-fW9S!PyN7sOhXdKZo*L*V4Xkg4k`Kux;uDc
z-jkzY7@eDnG)!qPO@doy-;?hOk;Y|Q5vLTBpE37LH0WhRL@<zdk<=O7p)Y@_Sx?b~
zM55_OFeKx&(A4<VjSYj2&Gdr0F>tUd+Q#tSLq&Kb^ylFqm(7XB!>W+4o?XYKxC~;=
zC|fhll6CUyM{GPHHXdi-S~34<;Ua8BcU}yjlcO`hzOy0+9sC`rRs;bIqlA-59BYyx
zW7^T*b(|-tV@sn%Cda)CVW`yvG?(H}^e$IWr<vtZ%zBypxEu@IjI{PLB5<NGPBGj`
z$|VW45k%er`YSrr<9CB+$Cr1U$;WzJt=i4?`Z)TU%5em5_Dnps!VEOkwiP~Uq~L#2
E^{<%@V*mgE

literal 0
HcmV?d00001

diff --git a/wget2.changes b/wget2.changes
index 9cd11d7..5561c37 100644
--- a/wget2.changes
+++ b/wget2.changes
@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Tue Dec 30 09:53:21 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 2.2.0
+  * Don't truncate file when -c and -O are combined
+  * Don't log URI userinfo to logs
+  * Fix downloading multiple files via HTTP/2
+  * Support connecting with HTTP/1.0 proxies
+  * Ignore 1xx HTTP responses for HTTP/1.1
+  * Disable TCP Fast Open by default
+  * Fix segfault when OCSP response is missing
+  * Add libproxy support
+
 -------------------------------------------------------------------
 Fri Sep  1 11:56:36 UTC 2023 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/wget2.spec b/wget2.spec
index 0562f64..9943e89 100644
--- a/wget2.spec
+++ b/wget2.spec
@@ -1,7 +1,7 @@
 #
 # spec file for package wget2
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,8 +17,8 @@
 
 
 Name:           wget2
-%define lname libwget2
-Version:        2.1.0
+%define lname libwget3
+Version:        2.2.0
 Release:        0
 Summary:        A Tool for Mirroring FTP and HTTP Servers
 License:        GPL-3.0-or-later AND LGPL-3.0-or-later
@@ -31,6 +31,7 @@ BuildRequires:  doxygen
 BuildRequires:  flex
 BuildRequires:  gettext-devel >= 0.18.1
 BuildRequires:  libidn2-devel >= 0.14
+BuildRequires:  libproxy-devel
 BuildRequires:  libtool >= 2.2
 BuildRequires:  libunistring-devel
 BuildRequires:  pkg-config
@@ -96,8 +97,7 @@ to build against libwget.
 rm -f "%buildroot/%_bindir"/*_noinstall "%buildroot/%_libdir"/*.la
 %find_lang %name
 
-%post   -n %lname -p /sbin/ldconfig
-%postun -n %lname -p /sbin/ldconfig
+%ldconfig_scriptlets -n %lname
 
 %files -f %name.lang
 %_bindir/wget*
-- 
2.51.1


From a444330efc9a196972e669af33803fb70dc13a402451c48e560fa2c55d8dd06d Mon Sep 17 00:00:00 2001
From: Jan Engelhardt <jengelh@inai.de>
Date: Wed, 7 Jan 2026 09:23:25 +0100
Subject: [PATCH 2/2] wget2 2.2.1

---
 wget2-2.2.0.tar.gz     |   3 ---
 wget2-2.2.0.tar.gz.sig | Bin 566 -> 0 bytes
 wget2-2.2.1.tar.gz     |   3 +++
 wget2-2.2.1.tar.gz.sig | Bin 0 -> 566 bytes
 wget2.changes          |  23 +++++++++++++++++++++++
 wget2.spec             |   4 ++--
 6 files changed, 28 insertions(+), 5 deletions(-)
 delete mode 100644 wget2-2.2.0.tar.gz
 delete mode 100644 wget2-2.2.0.tar.gz.sig
 create mode 100644 wget2-2.2.1.tar.gz
 create mode 100644 wget2-2.2.1.tar.gz.sig

diff --git a/wget2-2.2.0.tar.gz b/wget2-2.2.0.tar.gz
deleted file mode 100644
index d7a6860..0000000
--- a/wget2-2.2.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:2b3b9c85b7fb26d33ca5f41f1f8daca71838d869a19b406063aa5c655294d357
-size 4094789
diff --git a/wget2-2.2.0.tar.gz.sig b/wget2-2.2.0.tar.gz.sig
deleted file mode 100644
index b826ea0abfd4d1f72d94f6885cc9cb867beda3a95505467b3672b4e9cf6023ea..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 566
zcmV-60?GY}0y6{v0SW*e79j*2vVFXmVM{GoL1b+RFfF#CX9Oq(0%t>UApi;q5C||W
zwxVYQC<e+8{vk_DdjgT&?c({L{;h|quM@~84fP^Ts6~|$_oO=$$mb?JL7)z*A4ADw
zvHc(^;c-T&BaR|p33ViYushA@toLvv!&=w(P08DVnf={wb=;qKo2csvtsGN*zdAxb
zsANWr1b~M;AwHM_MAkV#6phPr=?mOc2K<knIIpjgn`)@3*H2cBFE@F#8+N70s^d!t
zoC|;)mh4L=Sl1fRs>^@;w$JN(d80KLSph+z*}$gwbD_$$+vagG&?b)7H)bQW0MvT~
zol9~kpvmz*_rC9pWdgN5Ca{Q#hPb1-fW9S!PyN7sOhXdKZo*L*V4Xkg4k`Kux;uDc
z-jkzY7@eDnG)!qPO@doy-;?hOk;Y|Q5vLTBpE37LH0WhRL@<zdk<=O7p)Y@_Sx?b~
zM55_OFeKx&(A4<VjSYj2&Gdr0F>tUd+Q#tSLq&Kb^ylFqm(7XB!>W+4o?XYKxC~;=
zC|fhll6CUyM{GPHHXdi-S~34<;Ua8BcU}yjlcO`hzOy0+9sC`rRs;bIqlA-59BYyx
zW7^T*b(|-tV@sn%Cda)CVW`yvG?(H}^e$IWr<vtZ%zBypxEu@IjI{PLB5<NGPBGj`
z$|VW45k%er`YSrr<9CB+$Cr1U$;WzJt=i4?`Z)TU%5em5_Dnps!VEOkwiP~Uq~L#2
E^{<%@V*mgE

diff --git a/wget2-2.2.1.tar.gz b/wget2-2.2.1.tar.gz
new file mode 100644
index 0000000..5d31e67
--- /dev/null
+++ b/wget2-2.2.1.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:d7544b13e37f18e601244fce5f5f40688ac1d6ab9541e0fbb01a32ee1fb447b4
+size 4077812
diff --git a/wget2-2.2.1.tar.gz.sig b/wget2-2.2.1.tar.gz.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..4d3e0b7c320cdab544a66894269b834f5b425331f90469e25801359bc8a98512
GIT binary patch
literal 566
zcmV-60?GY}0y6{v0SW*e79j*2vVFXmVM{GoL1b+RFfF#CX9Oq(0%=qiSpW(N5C||W
zwxVYQD5xS2{SuhZCs(J#3?j8lgFw+YJpd8>bj02@p1O%oRkJ`<l|7d~*p>fQY=p#-
zi3IUy_tY9>BV+Z|*Nj#K24Ya(($li1KXD%pG*8MwN#-Q1=9*AkkJ)lJRxYj3K)!In
z1Ht-+C6T;O+n+Ic0|OOydafK58&x##L*@`7o~a+GFGoJ#CHu_39_Et45?tgq&bQ?A
zYHdvm2A0a-)C6?iIPTYCrr9t;GXU;BM??*+UXouaTQ~Su&k_n-2jnS2s>|Dkqb5Y2
z8DWT${=lr~;0jg8V31R}m8(i?8Kf-4L<6aO%D|Q}nfu+0qR6&kHv;)dULbFao^35S
zSgcBprkq<g9NWt*Ne#nkk*{zOk6}_JuZUAI^6~RG`KwbdJikYcIDF2+_ZYsv>i+rQ
zw*=V;{yLz4kbq3J4D~qYbdi_QrZ63EhT5-=luc(uP!gCa!tTQ|gXwA%ESSuY!t1Tv
ztLwYy{YLPn*AfIn)osM8g7G5lCY91ND?lU&^AYRn5cEcCSbIji8{%PW6(!*E)ibin
z!xiIHD0KTbFbx@9U)ezpJmW@oAoJ3<`|~y2FOLpMZ5=Io?ry0<$?5wQe5`6uGSWm9
zYE9`fexc@+r_R?nQ97;Kb2ds%yp^BI<Np>WgT`seEBroglmAcwQNN)-0n))y%&Who
Eatja)aR2}S

literal 0
HcmV?d00001

diff --git a/wget2.changes b/wget2.changes
index 5561c37..b9ec081 100644
--- a/wget2.changes
+++ b/wget2.changes
@@ -1,3 +1,26 @@
+-------------------------------------------------------------------
+Wed Jan  7 08:03:14 UTC 2026 - Jan Engelhardt <jengelh@inai.de>
+
+- Update to release 2.2.1
+  * Fix file overwrite issue with metalink [CVE-2025-69194]
+  * Fix remote buffer overflow in get_local_filename_real()
+    [CVE-2025-69195]
+  * Fix a redirect/mirror regression from 400713ca
+  * Use the local system timestamp when requested via
+    --no-use-server-timestamps
+  * Prevent file truncation with --no-clobber
+  * Improve messages about why URLs are not being followed
+  * Fix metalink with -O/--output-document
+  * Fix sorting of metalink mirrors by priority
+  * Add --show-progress to improve backwards compatibility to wget
+  * Fix buffer overflow in wget_iri_clone() after
+    wget_iri_set_scheme()
+  * Allow 'no_' prefix in config options
+  * Use libnghttp2 for HTTP/2 testing
+  * Set exit status to 8 on 403 response code
+  * Fix convert-links
+  * Fix --server-response for HTTP/1.1
+
 -------------------------------------------------------------------
 Tue Dec 30 09:53:21 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
 
diff --git a/wget2.spec b/wget2.spec
index 9943e89..729f7af 100644
--- a/wget2.spec
+++ b/wget2.spec
@@ -17,8 +17,8 @@
 
 
 Name:           wget2
-%define lname libwget3
-Version:        2.2.0
+%define lname libwget4
+Version:        2.2.1
 Release:        0
 Summary:        A Tool for Mirroring FTP and HTTP Servers
 License:        GPL-3.0-or-later AND LGPL-3.0-or-later
-- 
2.51.1