![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / www / w3m-img
Request diff between arbitrary revisions
Keyword substitution: kv
Default branch: MAIN
w3m*: fix CVEs 2023-38252 and 38253 using upstream patch Bump PKGREVISION.
*: bump for openssl 3
w3m*: update to 0.5.3git20230121 2023-01-21 Tatsuya Kinoshita <tats@debian.org> * NEWS: Update NEWS to 0.5.3+git20230121. 2023-01-15 Tatsuya Kinoshita <tats@debian.org> * scripts/w3mman/w3mman2html.cgi.in: Add GROFF_NO_SGR=1 to w3mman2html.cgi for non-Debian groff. Bug-Debian: https://github.com/tats/w3m/pull/238 Bug-Debian: https://github.com/tats/w3m/issues/201 * scripts/w3mman/w3mman2html.cgi.in: Revert "Turn ansi escape sequences into html tags". This reverts commit 44af9271e0e984544762e2212549f134c86b4418. cf. https://github.com/tats/w3m/pull/238 2023-01-12 Tatsuya Kinoshita <tats@debian.org> * fm.h, rc.c: Do not expand config value of tmp_dir. * config.h.dist, config.h.in, configure, configure.ac, rc.c: Use faccessat for rc_dir and tmp_dir. * local.c: Allow writeLocalCookie even when no_rc_dir. * main.c, rc.c: Call wtf_init in sync_with_option. * rc.c: Avoid modifying read-only rc_dir. * fm.h, main.c, proto.h, rc.c: Make tmp_dir if not found. 2023-01-09 Tatsuya Kinoshita <tats@debian.org> * NEWS: Prepare NEWS for w3m 0.5.3+git202301XX. * doc-de/FAQ.html, doc-jp/FAQ.html, doc/FAQ.html: Remove obsolete documents. * doc-de/FAQ.html, doc-de/MANUAL.html: Wrap long lines to avoid Lintian warnings. 2023-01-07 Tatsuya Kinoshita <tats@debian.org> * file.c: Only read a first title. * file.c, fm.h: Revert "Only read title when in head". This reverts commit 0189e8aa5c4c4919a9bbc4dcbe0e521aada51e3c. Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1020215 2023-01-06 Tatsuya Kinoshita <tats@debian.org> * file.c: Indentation fix for HTMLtagproc1. 2023-01-06 Robert Alm Nilsson <robert@robalni.org> * file.c, fm.h: Only read title when in head. Origin: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1020215 2023-01-06 Tatsuya Kinoshita <tats@debian.org> * libwc/charset.c: Avoid locale sensitive tolower in wc_charset_to_ces. 2023-01-06 Sertaç Ö. Yıldız <sertacyildiz@gmail.com> * libwc/charset.c: Fix charset declaration parser fails with turkish locale. Origin: https://bugzilla-attachments.redhat.com/attachment.cgi?id=160014 Bug-Fedora: https://bugzilla.redhat.com/show_bug.cgi?id=249675 * history.c: Use st_mtime instead of st_mtim.tv_sec to compile on macos. cf. https://github.com/tats/w3m/pull/247 2023-01-06 Rene Kita <mail@rkta.de> * html.c, html.h, tagtable.tab: Recognize link targets in dfn elements. Refactor html.c. Align in html.c. Origin: https://github.com/tats/w3m/pull/259 Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1018696 * Makefile.in, form.c, main.c, util.c, util.h: Handle failed system calls. * display.c, display.h, file.c, form.c, main.c, proto.h, terms.h: Move declarations to appropiate header files. Origin: https://github.com/tats/w3m/pull/257 Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=398989 * entity.js, etc.c, table.c, tests/allentity.expected: * tests/allentity.html: Skip soft hyphen when reading token. Fix generated HTML for entity test. Origin: https://github.com/tats/w3m/pull/256 Bug-Debian: https://github.com/tats/w3m/issues/224 Bug-Debian: https://github.com/tats/w3m/issues/258 Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=830173 * file.c: Check LESSOPEN to avoid undefined behaviour. Refactor lessopen_stream. Origin: https://github.com/tats/w3m/pull/254 Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991608 2023-01-05 Markus Hiereth <translation@hiereth.de> * po/de.po: Update German message catalogue. Origin: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1011945#10 2023-01-05 Rene Kita <mail@rkta.de> * buffer.c: Exit with error if a new buffer can't be allocated. Origin: https://git.sr.ht/~rkta/w3m/commit/1f88544c1a009ed2088ff20973bcfffe6cbcb5de Bug-Debian: https://github.com/tats/w3m/pull/232 Bug-Debian: https://github.com/tats/w3m/pull/233 * history.c, history.h: Merge history file if it was modified after start. * history.h, proto.h: Move declarations to the appropriate header file. * history.c: Add comment to explain placement of the ifdef. * history.c, proto.h: Let loadHistory return an error code. * history.c: Use 'goto fail' to remove code duplication. Origin: https://github.com/tats/w3m/pull/247 Bug-Debian: https://github.com/tats/w3m/issues/176 2023-01-05 Alberto Fanjul <albertofanjul@gmail.com> * scripts/w3mman/w3mman2html.cgi.in: Turn ansi escape sequences into html tags. Origin: https://github.com/tats/w3m/pull/238 Bug-Debian: https://github.com/tats/w3m/issues/201 2023-01-04 Tatsuya Kinoshita <tats@debian.org> * po/de.po, po/it.po, po/ja.po, po/sv_SE.po, po/w3m.pot, po/zh_CN.po: * po/zh_TW.po: Update PO strings. * doc/MANUAL.html, doc/README.img, libwc/wc_types.h, main.c, rc.c: English fixes. cf. https://github.com/tats/w3m/pull/241 2023-01-04 Rene Kita <mail@rkta.de> * rc.c: Remove unused variable. * table.c: Remove a warning for bzero with GCC 12. * file.c: Fix potential null pointer dereference. * .github/workflows/build.yml: Don't error out on deprecated declaration warnings. Origin: https://github.com/tats/w3m/pull/255 cf. https://github.com/tats/w3m/issues/252 2023-01-04 nico <smnicolas@gmail.com> * doc/MANUAL.html, doc/w3m.1, fm.h, main.c, rc.c, terms.c: Add high-intensity colors option and cli flag. Origin: https://github.com/tats/w3m/pull/251 cf. https://github.com/tats/w3m/issues/250 Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=626291 2023-01-04 Trafficone <trafficone@gmail.com> * doc/README.SSL, doc/README.keymap, doc/README.menu: Translate from doc-jp. * doc/README.cookie, doc/README.func, doc/README.img, doc/README.m17n: * doc/README.passwd: Clarified wording. Minor grammar changes. Origin: https://github.com/tats/w3m/pull/241 2022-12-25 Tatsuya Kinoshita <tats@debian.org> * configure: Update configure with acinclude.m4. 2022-12-25 Sam James <sam@gentoo.org> * acinclude.m4: Fix configure tests broken with Clang 16. Origin: https://github.com/tats/w3m/pull/248 2022-12-25 Rin Okuyama <rokuyama.rk@gmail.com> * image.c, terms.c: For sixel, no need to round image size to multiple of character size. Origin: https://github.com/tats/w3m/pull/246 * image.c: Display resized image for OSC 5379 (mlterm). Origin: https://github.com/tats/w3m/pull/245 2022-12-25 Rene Kita <mail@rkta.de> * doc/README.siteconf: Say what the comment character is. Use the comment character in Examples. Origin: https://github.com/tats/w3m/pull/237 * main.c: Retry if loading of a file fails when argv_is_url. Origin: https://github.com/tats/w3m/pull/235 Bug-Debian: https://github.com/tats/w3m/issues/210 Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=537761 Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=946440 2022-12-25 NRK <nrk@disroot.org> * image.c: remove duplicate declaration. * cookie.c, entity.c, file.c, frame.c, func.c, image.c, linein.c: * mailcap.c, main.c, rc.c, rc.h, table.c, terms.c, terms.h: * w3mbookmark.c, w3mhelperpanel.c: fix all -Wmissing-prototypes warnings. * file.c, history.c, history.h, indep.c, indep.h, mailcap.c, proto.h: * rc.c, terms.c, url.c: fix some -Wstrict-prototypes warnings. Origin: https://github.com/tats/w3m/pull/234 2022-12-25 Rene Kita <mail@rkta.de> * .github/workflows/build.yml: Add GitHub Action to build source when pushing. Origin: https://github.com/tats/w3m/pull/228 2022-12-21 Tatsuya Kinoshita <tats@debian.org> * po/de.po, po/it.po, po/ja.po, po/sv_SE.po, po/w3m.pot, po/zh_CN.po: * po/zh_TW.po: Update PO strings. 2022-12-21 Rene Kita <mail@rkta.de> * etc.c, fm.h, history.c, rc.c: Add option to set directory for temporary files. Origin: https://github.com/tats/w3m/pull/219 cf. https://github.com/tats/w3m/issues/130 2022-12-21 Yash Lala <yashlala@gmail.com> * rc.c: Use `Strnew_charp()` to create `char *` instead of `strdup()`. * rc.c: refactor: Substitute some clunky code with a `strdup()`. * doc/FAQ.html, doc/MANUAL.html, doc/w3m.1, rc.c: Set `rc_dir` based on `W3M_DIR` environment variable. Origin: https://github.com/tats/w3m/pull/207 cf. https://github.com/tats/w3m/issues/130 2022-12-20 Tatsuya Kinoshita <tats@debian.org> * etc.c: Fix potential overflow in checkType. * etc.c: Fix m17n backspace handling causes out-of-bounds write in checkType. [CVE-2022-38223] Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1019599 Bug-Debian: https://github.com/tats/w3m/issues/242
w3m: update to 0.5.3.20190105 Debian's w3m 0.5.3+git20190105 * bug fixes - do not use deprecated features with OpenSSL 1.1 - fix dependency for Imlib2 - fix that the mark_all_pages option works - respect the simple_preserve_space option for table cells - fix error handling for ~/.w3m/request.log and localcgi_post() * new feature - w3mman supports specifying a section number during a keyword search
*: Recursive revision bump for openssl 1.1.1.
Pullup ticket #5162 - requested by wiz
www/w3m: security fix
www/w3m-img: security fix
Revisions pulled up:
- www/w3m-img/Makefile 1.29
- www/w3m-img/PLIST 1.1
- www/w3m/Makefile 1.78
- www/w3m/Makefile.common 1.62-1.63
- www/w3m/PLIST 1.17
- www/w3m/distinfo 1.27-1.29
- www/w3m/options.mk 1.15
- www/w3m/patches/patch-aa deleted
- www/w3m/patches/patch-ab deleted
- www/w3m/patches/patch-ac deleted
- www/w3m/patches/patch-ak deleted
- www/w3m/patches/patch-al deleted
- www/w3m/patches/patch-scripts_w3mman_w3mman2html.cgi.in deleted
---
Module Name: pkgsrc
Committed By: wiz
Date: Sun Nov 6 19:26:35 UTC 2016
Modified Files:
pkgsrc/www/w3m: Makefile Makefile.common PLIST distinfo options.mk
pkgsrc/www/w3m/patches: patch-ab
Log Message:
Updated w3m to 0.5.3.0.20161031.
Switch from dead sourceforge original to debian-maintained github version.
* new features
- support OSC 5379 remote imaging and sixel graphics
- support SGR style mouse handler
- support 32-bit color images
- support FreeBSD framebuffer
- support button element
- support meta charset
- add extbrowser4..9
- add display_borders to display 0 pixel table borders
- add siteconf feature
- add German translation for options setting panel
- add translations for de, zh_CN and zh_TW
* bug fixes
- fix segfaults with malformed text
- disable SSLv2 and SSLv3 by default [CVE-2014-3566]
- set ssl_verify_server to 1 by default
- disable RC4, export ciphers, and keys < 128 bits
- use SSL_OP_NO_COMPRESSION due to "CRIME attack" [CVE-2012-4929]
- use SSL_MODE_RELEASE_BUFFERS
- disable USE_EGD for LibreSSL
- appease gcc -Werror=format-security
- option -s is now "squeeze multiple blank lines" to work as pager, and
-j and -e are obsolete, so use -O{s|j|e} to specify display charset
- accept single quoted meta refresh URL
- assume "text" if a form input type is unknown
- accept cookies by default
- set use_dictcommand to 1 by default
- set default_url to 1 by default
- set argv_is_url to 1 by default
- set alt_entity to 0 by default
- fix build problems with Boehm GC 7.2, imlib2 1.4.6 and glibc 2.14
- fix parallel make failure
- fix incorrect ucs_ambwidth_map
- and many fixes
---
Module Name: pkgsrc
Committed By: wiz
Date: Sun Nov 6 19:27:16 UTC 2016
Modified Files:
pkgsrc/www/w3m-img: Makefile
Added Files:
pkgsrc/www/w3m-img: PLIST
Log Message:
Updated w3m-img to 0.5.3.0.20161031.
Changes same as for www/w3m.
---
Module Name: pkgsrc
Committed By: wiz
Date: Sun Nov 6 19:27:25 UTC 2016
Removed Files:
pkgsrc/www/w3m/patches: patch-aa patch-ac patch-ak patch-al
patch-scripts_w3mman_w3mman2html.cgi.in
Log Message:
Remove obsolete patches.
---
Module Name: pkgsrc
Committed By: wiz
Date: Sun Nov 6 19:30:42 UTC 2016
Modified Files:
pkgsrc/www/w3m: distinfo
pkgsrc/www/w3m/patches: patch-ab
Log Message:
Add upstream bug report URL.
---
Module Name: pkgsrc
Committed By: wiz
Date: Tue Nov 22 14:36:38 UTC 2016
Modified Files:
pkgsrc/www/w3m: Makefile.common distinfo
Log Message:
Updated w3m to 0.5.3.0.20161120.
Debian's w3m 0.5.3+git20161120
* bug fixes
- fix multiple flaws with malformed text
(stack overflow, buffer overflow, null deref, out of memory)
- fix stack overflow with nested table and textarea [CVE-2016-9439]
- fix suspend (^Z) behavior
---
Module Name: pkgsrc
Committed By: wiz
Date: Tue Nov 22 15:24:43 UTC 2016
Removed Files:
pkgsrc/www/w3m/patches: patch-ab
Log Message:
Remove integrated patch.
Updated w3m-img to 0.5.3.0.20161031. Changes same as for www/w3m.
Bump PKGREVISION for security/openssl ABI bump.
Bump PKGREVISION for boehm-gc default-on threads, just to be on the safe side.
recursive bump for boehm-gc API bump
Recursive PKGREVISION bump for OpenSSL API version bump.
Fixes: COMMENT should not be longer than 70 characters. COMMENT should not begin with 'A'. COMMENT should not begin with 'An'. COMMENT should not begin with 'a'. COMMENT should not end with a period. COMMENT should start with a capital letter. pkglint warnings. Some files also got minor formatting, spelling, and style corrections.
recursive bump from gettext-lib shlib bump.
Support single quote meta refresh. Bump revision. pkg/42400 by Ryo ONODERA, thanks.
Update w3m and w3m-img to 0.5.3. Some pkglint cleanup and DESCR rewording while here. XXX: I don't see what w3m-img does differently? Changes: w3m 0.5.3 - 2011-01-15 * security fix - fix vulnerabilities indicated by bugs.debian.org. - suppress sending Referer, if https:// -> http:// * new features - adapt w3mimg to native windows on MS Windows. - support xterm-incompatible terminals without gpm. - add "xhtml" to default guess. - introduce option pseudo_inlines. - add option to avoid "wrong number of dots" error in cookies. * other bug fixes - fix "important" bugs from bugs.debian.org - preserve spaces in multibyte context. - fix proxy authentication.
Pullup previous changes on HEAD to pkgsrc-2010Q2 branch to fix branching error, and to sync with reality.
Pullup ticket 3153 - requested by tron
security patch
Revisions pulled up:
- pkgsrc/www/w3m/Makefile 1.58
- pkgsrc/www/w3m/distinfo 1.21
- pkgsrc/www/w3m-img/Makefile 1.20
Files added:
pkgsrc/www/w3m/patches/patch-ac
pkgsrc/www/w3m/patches/patch-ad
-------------------------------------------------------------------------
Module Name: pkgsrc
Committed By: tron
Date: Thu Jul 1 18:50:15 UTC 2010
Modified Files:
pkgsrc/www/w3m: Makefile distinfo
pkgsrc/www/w3m-img: Makefile
Added Files:
pkgsrc/www/w3m/patches: patch-ac patch-ad
Log Message:
Add patch by Ludwig Nussel to fix the certificate spoofing vulnerability
reported in CVE-2010-2074.
To generate a diff of this commit:
cvs rdiff -u -r1.57 -r1.58 pkgsrc/www/w3m/Makefile
cvs rdiff -u -r1.20 -r1.21 pkgsrc/www/w3m/distinfo
cvs rdiff -u -r1.19 -r1.20 pkgsrc/www/w3m-img/Makefile
cvs rdiff -u -r0 -r1.14 pkgsrc/www/w3m/patches/patch-ac
cvs rdiff -u -r0 -r1.8 pkgsrc/www/w3m/patches/patch-ad
Add patch by Ludwig Nussel to fix the certificate spoofing vulnerability reported in CVE-2010-2074.
More PKGREVISION bumps of jpeg dependencies. Identified by parsing the NetBSD-i386-5.0.1/2009Q3 pkg_summary files and Robert Elz.
Bump PKGREVISION of w3m-img because the default options of w3m has been changed.
Modular Xorg support should not in w3m-img/Makefile. It really depend on option of w3m.
+ Include termcap.buildlink3.mk instead of using ${OPSYS} to guess at
the right terminal library.
Bump the PKGREVISION of www/w3m and www/w3m-img to 2.
Per the process outlined in revbump(1), perform a recursive revbump on packages that are affected by the switch from the openssl 0.9.7 branch to the 0.9.8 branch. ok jlam@
Update w3m to 0.5.2. w3m 0.5.2 - 2007-05-31 * security fix - fix format string vulnerability. * new features - support gtk2 with w3m-img. - new option for LiveHTTPHeaders-like logs. - new option to fontify <del>, <s>, <ins>, and so on. * other bug fixes - avoid errors in "configure" and "make". - '\n' handling in attributes' values of HTML tags.
Modular Xorg support.
Needs msgfmt.
Recursive revision bump / recommended bump for gettext ABI change.
Add missing file to PLIST. Bump PKGREVISION.
fix/improvement from Jeremy C. Reed.
- honor PKG_SYSCONFDIR.
- --with-termlib=ncurses is needed under linux.
- specify ${MAIL_CMD}, not 'Mail' directly as mailer.
bump PKGREVISION.
Bump PKGREVISIONs due to libtiff update. Some BUILDLINK_RECOMMENDED bumps done also. (If I missed any, please let me know -- and let me know a good way to automate this.)
bump PKGREVISIONs for last boehm-gc update (BUILDLINKS_DEPENDS change)
Update W3m from 0.4.0 to 0.5. Now M17N patch is merged into the main development now. Pkgsrc changes: * Simplify options. * XXX "M17N without Unicode" is broken now. This should be fixed. Other changes in W3m: w3m 0.5 - 2004-03-22 * gettextize * m17n patch merged w3m 0.4.2 - 2003-09-23 * options: -4, -6 * configuration file in $(sysconfdir)/$(package)/ * func: NEXT_VISITED, PREV_VISITED * autoconfiscate (partially) * rc: use_history w3m 0.4.1 - 2003-03-07 * fix bugs - completion segfault in lineinput - incremental search - URL pattern fix - UFhalfclose bug - allow pipe in shell command - enhance ftp directory support - linenumber in edit - fix Bug#181897 - W3M_TTY problem fixed
PKGREVISION bump after openssl-security-fix-update to 0.9.6m. Buildlink files: RECOMMENDED version changed to current version.
COMMENT should start with a capital letter.
Dependency bumps, needed because of devel/pth's major bump, and related dependency bumps.
Remove bogus dependencies for w3m-img, and bump PKGREVISION. Noted by Takeshi Nakayama in PR 20734.
Merge from pkgsrc-current to buildlink2 branch.
file Makefile was added on branch buildlink2 on 2002-06-23 19:04:48 +0000
splitted w3m package into w3m and w3m-img, which disables/enables inline image support, respectively. inline image support requires glib, which is so large for such as light- weight text-based browser w3m especially on slower ports. it's based on the diffs supplied by uebayashi. This also addresses pkg/16495.
Initial revision