Retrieve files from the Net via HTTP(S) and FTP
gnu:wget from the portGNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of t…
GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parse_content_range() function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigger undefined behavior and download desynchronization in th…
GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-supplied filename requiring character set conversion. When the output buffer is too small during iconv E2BIG reallocation, the reallocation…
GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed int…
pkg audit reports nothing for this version.ftp/wget: adopt port2a6802f2ef
*/*: Return to pool I'll be away from keyboard soon and am not sure if I will return. So return all ports that I currently maintain to pool hoping new volunteers take care of them.f12c037f5a
ftp/wget: Update to 1.25.0 ChangeLog: https://git.savannah.gnu.org/cgit/wget.git/tree/NEWS?h=v1.25.0 MFH: 2024Q4 Security: CVE-2024-10524590e2aa40f
ftp/wget: Pass --disable-pcre option to configure script It prevents PCRE1 from being autodetected. While here, * Pet portclippy. * Tidy up Makefile with portfmt. Reported by: Scott Allendorf (via private mail)8bedfcd999
ftp/wget: Upgrade from 1.21.4 t 1.24.5 Hand over maintainership to yasu who has been submitting updates to ftp/wget faster than me for a long time. ChangeLog: https://git.savannah.gnu.org/cgit/wget.git/tree/NEWS?h=v1.24.5 PR: 277668 Reported by: yasu47c4612b1f
ftp/wget: Moved man to share/man Approved by: portmgr (blanket)0747efa6e6
ftp/wget: Update to 1.21.4 * Remove PCRE1 option as it has already reached its EoL. ChangeLog: https://git.savannah.gnu.org/cgit/wget.git/tree/NEWS?h=v1.21.4 PR: 271873 Approved by: maintainer25b8ae39d7
*/*: Bump PORTREVISION for consumers of libunistring Reported by: jbeichdf6c65a026
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
ftp: remove 'Created by' lines A big Thank You to the original contributors of these ports: * Aaron Dalton <aaron@FreeBSD.org> * Alexander Kriventsov * Anders Nordby <anders@fix.no> * Andreas Fehlner <fehlner@gmx.de> * Andrew Pantyukhin <infofarmer@FreeBSD.org> * Andrey Zakhvatov * Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>) * Chris Piazza <cpiazza@FreeBSD.org> * Damjan Marion <dmarion@open.hr> * Emanuel Haupt <ehaupt@critical.ch> * Eric Freeman <freebsdports@chillibear.com> * Frank DENIS * Frank Laszlo <laszlof@vonostingroup.com> * Gea-Suan Lin (gslin@ccca.nctu.edu.tw) * Gea-Suan Lin <gslin@ccca.nctu.edu.tw> * George V. Neville-Neil <gnn@FreeBSD.org> * Hye-Shik Chang * Jordan Hubbard <jkh@FreeBSD.org> * Jose Alonso Cardenas Marquez <acardenas@bsd.org.pe> * Joseph Benden <joe@thrallingpenguin.com> * Ju Pengfei <jupengfei@gmail.com> * Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw> * Mark Johnston <markj@FreeBSD.org> * Martin Matuska (mm@FreeBSD.org) * Marwan BURELLE <marwan.burelle@lri.fr> * Maxim Ignatenko * Maxim Sobolev <sobomax@FreeBSD.org> * Neil Blakey-Milner * Neil Blakey-Milner <nbm@rucus.ru.ac.za> * Nick Leuta * Nosov Artem <chip-set@mail.ru> * Petr Holub <hopet@ics.muni.cz> * Philippe Le Berre <philippe@le-berre.com> * Piotr Kubaj <pkubaj@anongoth.pl> * Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Roman Bogorodskiy * Sergey Matveychuk <sem@FreeBSD.org> * Sergey Skvortsov <skv@FreeBSD.org> * Stephane Legrand * Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org> * TAKATSU Tomonari <tota@FreeBSD.org> * Thomas Gellekum <tg@FreeBSD.org> * Tom McLaughlin <tmclaugh@sdf.lonestar.org> * Tomokazu ISHII <t-ishii@tryplanet.com> * Ulrich Spoerlein <uspoerlein@gmail.com> * Wen Heping <wen@FreeBSD.org> * Xavier Beaudouin <kiwi@oav.net> * Yasuhiro Fukuma <yasuf@big.or.jp> * Ying-Chieh Liao <ijliao@FreeBSD.org> * ache * cy@FreeBSD.org * ijliao * ports * torstenb * will With hat: portmgr30cd242001
ftp/wget: Update to 1.21.3 ChangeLog: https://git.savannah.gnu.org/cgit/wget.git/tree/NEWS?h=v1.21.3 PR: 262346 Approved by: maintainer timeoutdace17b933
ftp/wget: Update to 1.21.2 ReleaseNotes: https://lists.gnu.org/archive/html/bug-wget/2021-01/msg00030.html (1.21.1) ReleaseNotes: https://lists.gnu.org/archive/html/bug-wget/2021-09/msg00005.html (1.22.2) PR: 259165 Approved by: maintainer timeout (> 2 weeks)07c7d87c41
Remove # $FreeBSD$ from Makefiles.305f148f48
ftp/wget: fix build on GCC architectures tempname.c: In function 'try_tempname_len': tempname.c:288: error: 'for' loop initial declaration used outside C99 mode8fcfa0ea77
ftp/wget: Upgrade from 1.20.3 to 1.21 Changelog: http://git.savannah.gnu.org/cgit/wget.git/plain/NEWS PR: ports/252369 Reported by: Yasuhiro Kimura <yasu@utahime.org>d7f36d087c
- Handle two missing dependencies, pcre2 and nettle - Improve PCRE handling in options, add NTLM option - Use pkg-config unconditionally, it's used for detecting all depends and is required for proper pcre2 detection - Use USES=localbase instead of duplicate CPPFLAGS/LDFLAGS for most options PR: 251189 Approved by: vd (maintainer)05ac365a0a
Drop the ipv6 virtual category for f* category as it is not relevant anymore06c273daa8
Convert to USES+=tar:lz (available since r504008).40a9bdf3ac
ftp/wget: Upgrade from 1.20 to 1.20.3 Changelog: http://git.savannah.gnu.org/cgit/wget.git/plain/NEWS MFH: 2019Q2 Security: CVE-2018-204838486009f8b
Update dns/libidn2 to 2.1.1 - Bump PORTREVISION of dependent ports for shlib change Changes: https://gitlab.com/libidn/libidn2/blob/master/NEWSdc7a01a3c8
Update dns/libidn2 to 2.1.0 - Bump PORTREVISION of dependent ports for shlib change Changes: https://gitlab.com/libidn/libidn2/blob/master/NEWS06e735460e
ftp/wget: Upgrade from 1.19.5 to 1.20 Changelog: http://git.savannah.gnu.org/cgit/wget.git/plain/NEWS PR: ports/233738 Reported by: takefu@airport.fm8ecbfc736d
Bump ports that should have been bumped along with r484628 Reported by: kibe9de24bb79
Remove redundant DOCS, NLS, EXAMPLES, and IPV6 from OPTIONS_DEFAULT as they are put there by the framework (see line 200 of Mk/bsd.options.mk), except for `finance/quantlib' which makes very unorthodoxal usage of port options.53792bf1df
ftp/wget: Upgrade from 1.19.4 to 1.19.5 Changelog: http://git.savannah.gnu.org/cgit/wget.git/plain/NEWS PR: ports/228071 Reported by: Yasuhiro KIMURA <yasu@utahime.org> MFH: 2018Q2 Security: CVE-2018-04944f10815944
Update dns/libpsl to 0.20.1 - Bump PORTREVISION of dependent ports for shlib change Changes: https://github.com/rockdaboot/libpsl/blob/master/NEWS https://github.com/rockdaboot/libpsl/blob/libpsl-0.20.1/NEWS3b63c52143
Update dns/libpsl to 0.20.0 - Bump PORTREVISION of dependent ports for shlib change Changes: https://github.com/rockdaboot/libpsl/blob/master/NEWS5a86ebc1e7
security/openssl-devel: Remove BROKEN from some ports
* databases/freetds: Fixed 2017-02-14
* databases/postgresql10-server: Fixed 2016-09-15 [1]
* ftp/lftp: Fixed in 4.8.0
* ftp/proftpd: Fixed in 1.3.5c
* ftp/wget: Fixed in 1.19.3 [2]
* lang/erlang-runtime20: Fixed in 20.0
* net/socat: Fixed in 1.7.3.2
* security/libssh2: Fixed in 1.8.0 [3]
* security/p5-Crypt-OpenSSL-X509: Fixed in 1.8.8
* sysutils/bacula9-server: Fixed in 9.0.6
* www/nginx: Fixed in 1.9.14
* Bulk build OK 10.3/11.1 both i386 and amd64:
- multimedia/librtmp
- net/libvncserver
- www/lynx
PR: 225875 [1], 225872 [2], 225873 [3]3b1875b273ftp/wget: Upgrade from 1.19.2 to 1.19.4 Changelog: http://git.savannah.gnu.org/cgit/wget.git/plain/NEWS03ea8b1a65
ftp/wget: Upgrade from 1.19.1 to 1.19.2 Changelog: http://git.savannah.gnu.org/cgit/wget.git/plain/NEWS Reported by: Andrew Perry <pez_098@yahoo.com> Security: CVE-2017-13089 Security: CVE-2017-13090a0bcc9af35
Set MAKEINFO to the full path of makeinfo when USES=makeinfo is set. PR: 221027 Reviewed by: mat Approved by: portmgr (antoine)f872930d0e
ftp/wget: Enforce rebuilding of the info page MAKEINFO must be defined in the configure environment in order for the info page to be rebuilt. Submitted by: jkim37406903f0
ftp/wget: Fix makeinfo path
On FreeBSD 10.x makeinfo is located in /usr/bin/makeinfo, whereas on 11.x
it is located in /usr/local/bin/makeinfo. Don't specify its full path
location like DOCS_CONFIGURE_ENV= MAKEINFO="${LOCALBASE}/bin/makeinfo"
since having it in PATH (either in /usr/bin or /usr/local/bin) suffices.
Reported by: Walter Schwarzenfeld <w.schwarzenfeld@utanet.at>881b1b8b2fftp/wget: Tweak docs options * Add a separate option to control whether man page is to be installed * Handle wgetrc.sample with @sample, according to https://www.freebsd.org/doc/en/books/porters-handbook/plist-config.html and https://www.freebsd.org/doc/en/books/porters-handbook/plist-keywords.html#plist-keywords-sample * Now the DOCS option only controls whether an info page is installed or not Submitted by: jkimf577936c07
ftp/wget: Make installing docs optional Submitted by: jkim8a11b286e1
Upgrade ftp/wget from 1.19 to 1.19.1 Changelog: http://git.savannah.gnu.org/cgit/wget.git/plain/NEWS - add test target and TEST_DEPENDS - remove gmake from USES: current version of wget can be build without gmake - unbreak IDN option: since 1.19 wget uses libidn2 instead of libidn - libidn2 uses libunistring from ports, so when the IDN option is enabled use libunistring from the ports instead of the bundled one - disabling pcre support using ./configure --disable-pcre currently works, use it - remove Makefile and configure patches which are no longer needed - patch /usr/local to $PREFIX in wget.info too - delete files/patch-src__main.c - this bug has been fixed on Mar 2, 2015 [1] [1] http://git.savannah.gnu.org/cgit/wget.git/commit/?id=9dde436dd689bd51eef71d64152dde9c8c0b5f65 PR: 218408 Submitted by: Anton Yuzhaninov <citrin+pr@citrin.ru>a3434e2968
Remove all USE_OPENSSL occurrences. Sponsored by: Absolighta28f0f7f7f
ftp/wget: fix compilation error due to -R being passed to clang gcc accepts -R, but clang needs -Wl,-R and since we are changing this, use the proper -Wl,-rpath. Reported by: Walter Schwarzenfeld, Barbara Guida, Jimmy Olgeni, Ken J.78441dcfd5
ftp/wget: Upgrade from 1.18_2 to 1.19db1916cb2b
- Update to 0.16.1 - Bump PORTREVISION for dependent ports Changes: https://github.com/rockdaboot/libpsl/blob/master/NEWS619c99ffbb
- Update to 0.16.0 - Bump PORTREVISION for dependent ports Changes: https://github.com/rockdaboot/libpsl/blob/master/NEWS7951f57490
Mark some ports as not openssl-devel ready. Sponsored by: Absolight703ff6d361
- Add METALINK and PSL options ====> Running Q/A tests (stage-qa) Error: /usr/local/bin/wget is linked to /usr/local/lib/libmetalink.so.3 from misc/libmetalink but it is not declared as a dependency Warning: you need LIB_DEPENDS+=libmetalink.so:misc/libmetalink Error: /usr/local/bin/wget is linked to /usr/local/lib/libpsl.so.5 from dns/libpsl but it is not declared as a dependency Warning: you need LIB_DEPENDS+=libpsl.so:dns/libpsl PR: 214269 Differential Revision: https://reviews.freebsd.org/D8456 Submitted by: sunpoet (myself) Approved by: maintainer (timeout, 15 days)463f3f9915
ftp/wget: fix compilation when IDN and NLS are disabled PR: 210441 Submitted by: Helge Oldach <freebsd@oldach.net>80d3d8a396
ftp/wget: Upgrade from 1.16.3_1 to 1.18 PR: 210421 Submitted by: Vladimir Krstulja <vlad-fbsd@acheronmedia.com> Security: CVE-2016-4971e3f979f6fd
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.
With hat: portmgr
Sponsored by: Absolight4e1b79a0a6Fixup some whitespace at the beginning of lines problems. With hat: portmgr Sponsored by: Absolight999161a9ed
- Update security/gnutls to 3.4.10. - Rename the LIBDANE option DANE because that's the name of the protocol supported by libgnutls-dane and gnutls-cli. Also clarify the option description. - Add an IDN option. - libgnutls-openssl has been removed in 3.4. Some ports used this library in their LIB_DEPENDS but no port actually required it. - Some old API functions have been removed. Ports t net-im/jabber: This port used the old API to give users fine grained control over which crypto algorithms were used via a configuration file. It's not immediately obvious how to port this to the new API so the port always uses the defaults now. www/hydra: Mark BROKEN. This uses more removed calls than the other ports, is said to be alpha quality and not fully functional and has been abandoned 10 years ago. PR: 207768 Exp-run by: antoine Approved by: portmgr (antoine)6bc6f3a9e0
Convert LICENSE= "GPLxx # or later" to "GPLxx+" Approved by: portmgr blanketb9398223bd