- up to 1.19.2; fixes CVE-2017-13089, CVE-2017-13090

diff --git a/wget-wgetrc_path.patch b/wget-wgetrc_path.patch
index d4a36997b572deb87c2895105f5c4c1c4b6644ab..3c27f4a1d5e3895f45addc4631802e6d65237a31 100644 (file)
--- a/wget-wgetrc_path.patch
+++ b/wget-wgetrc_path.patch
@@ -46,15 +46,16 @@ diff -Nur wget-1.10/doc.orig/sample.wgetrc wget-1.10/doc/sample.wgetrc
 diff -Nur wget-1.10/doc.orig/wget.texi wget-1.10/doc/wget.texi
 --- wget-1.10/doc.orig/wget.texi       2005-06-22 09:42:36.000000000 +0200
 +++ wget-1.10/doc/wget.texi    2005-06-22 09:44:02.000000000 +0200
-@@ -190,14 +190,14 @@
+@@ -191,7 +191,7 @@ gauge can be customized to your preferen
  Most of the features are fully configurable, either through command line
  options, or via the initialization file @file{.wgetrc} (@pxref{Startup
  File}).  Wget allows you to define @dfn{global} startup files
 -(@file{/usr/local/etc/wgetrc} by default) for site settings. You can also
 +(@file{/etc/wgetrc} by default) for site settings. You can also
  specify the location of a startup file with the --config option.
-  
- 
+ To disable the reading of config files, use --no-config.
+ If both --config and --no-config are given, --no-config is ignored.
+@@ -200,7 +200,7 @@ If both --config and --no-config are giv
  @ignore
  @c man begin FILES
  @table @samp

diff --git a/wget.spec b/wget.spec
index 042405d13b9db81fe59949bfb1c89bc66a269315..87feca17a26f9fa82c997657875436e1325a4a50 100644 (file)
--- a/wget.spec
+++ b/wget.spec
@@ -17,12 +17,12 @@ Summary(ru.UTF-8):  Утилита для получения файлов по п
 Summary(uk.UTF-8):     Утиліта для отримання файлів по протоколам HTTP та FTP
 Summary(zh_CN.UTF-8):  [通讯]功能强大的下载程序,支持断点续传
 Name:          wget
-Version:       1.19.1
-Release:       2
+Version:       1.19.2
+Release:       1
 License:       GPL v3+ with OpenSSL exception
 Group:         Networking/Utilities
-Source0:       http://ftp.gnu.org/gnu/wget/%{name}-%{version}.tar.xz
-# Source0-md5: d30d82186b93fcabb4116ff513bfa9bd
+Source0:       http://ftp.gnu.org/gnu/wget/%{name}-%{version}.tar.lz
+# Source0-md5: 11663ce60f71c72773c30ae08a279011
 Source1:       http://www.mif.pg.gda.pl/homepages/ankry/man-PLD/%{name}-non-english-man-pages.tar.bz2
 # Source1-md5: d8b2b56ec7461606c22edbafaf8a418f
 Patch0:                %{name}-info.patch