w3m (0.5.1-5.1ubuntu1.1) hardy-security; urgency=low * SECURITY UPDATE: perform certificate host validation - debian/patches/60-w3m-0.5.2-CVE-2010-2074-nulcn.diff: handle a '\0' character in a domain name in the CN and SAN; applied inline - 70-w3m-0.5.2-disable_sslv2.diff: disable SSLv2 by default, applied inline - CVE-2010-2074 - References: http://www.openwall.com/lists/oss-security/2010/06/14/4 -- Steve Beattie Mon, 02 Aug 2010 11:40:12 -0700 w3m (0.5.1-5.1ubuntu1) feisty; urgency=low * Merge from debian unstable, remaining changes: - Change libgdk-pixbuf build dependency to libimlib2-dev to keep Gnome 1 stuff out of main. -- Kees Cook Mon, 22 Jan 2007 11:10:16 -0800 w3m (0.5.1-5.1) unstable; urgency=high * NMU by the Security Team: * Fix format string vulnerability in display of SSL certificates. (No CVE ID yet) (Closes: #404564) -- Moritz Muehlenhoff Tue, 26 Dec 2006 18:49:26 +0100 w3m (0.5.1-5ubuntu2) feisty; urgency=low * SECURITY UPDATE: arbitrary code execution via prompt format string. * Add 'debian/patches/90_format_string_fix.patch' from upstream CVS, applied inline. * References http://sourceforge.net/tracker/index.php?func=detail&aid=1612792&group_id=39518&atid=425439 -- Kees Cook Tue, 2 Jan 2007 15:01:15 -0800 w3m (0.5.1-5ubuntu1) feisty; urgency=low * Synchronize with Debian unstable. * Remaining Ubuntu change: Change libgdk-pixbuf build dependency to libimlib2-dev to keep Gnome 1 stuff out of main. -- Martin Pitt Mon, 30 Oct 2006 10:36:18 +0100 w3m (0.5.1-5) unstable; urgency=low * fix FTBFS on GNU/kFreeBSD (due to unsatisfied Build-Depends on libgpmg1-dev) closes: Bug#377793 * debian/rules: DEB_BUILD_GNU_SYSTEM should be linux-gnu, instead of linux so that w3m-img works on fbdev closes: Bug#376240 * change default accept: line closes: Bug#374296 -- Fumitoshi UKAI Mon, 7 Aug 2006 11:37:48 +0900 w3m (0.5.1-4ubuntu2) dapper; urgency=low * Add libimlib2-dev build dependency to repair w3m-img image support. Closes: LP#32996 -- Martin Pitt Wed, 5 Apr 2006 09:58:24 +0200 w3m (0.5.1-4ubuntu1) dapper; urgency=low * Drop libgdk-pixbuf build dependency to get rid of Gnome 1 in main. (Don't worry, w3m-image can still display images :) ). -- Martin Pitt Fri, 3 Feb 2006 11:20:18 +0000 w3m (0.5.1-4build1) dapper; urgency=low * Rebuild against openssl 0.9.8. -- Martin Pitt Mon, 30 Jan 2006 10:39:56 +0000 w3m (0.5.1-4) unstable; urgency=low * GCC 4.0 C++ ABI change. rebuild with libgc-dev 1:6.5-1 for libgc1c2 closes: Bug#318160 -- Fumitoshi UKAI Thu, 14 Jul 2005 15:10:30 +0000 w3m (0.5.1-3) unstable; urgency=low * fix upgrading /etc/w3m/w3mconfig to /etc/w3m/config closes: Bug#242577 -- Fumitoshi UKAI Fri, 3 Sep 2004 02:27:43 +0900 w3m (0.5.1-2) unstable; urgency=medium * rebuilt with new version of libgdk-pixbuf-dev to build againt with libtiff4 -- Fumitoshi UKAI Fri, 6 Aug 2004 01:23:48 +0900 w3m (0.5.1-1) unstable; urgency=low * new upstream version -- Fumitoshi UKAI Thu, 29 Apr 2004 03:28:41 +0900 w3m (0.5-7) unstable; urgency=low * fix authentication mechanisms closes: Bug#:244029: w3m: HTTP basic authentication annoyance -- Fumitoshi UKAI Sun, 18 Apr 2004 00:08:29 +0900 w3m (0.5-6) unstable; urgency=low * fix IPv6 resolution failure. closes: Bug#241192 * debian/w3mconfig: update dont provide document_charset, which will not be overrided by locale. -- Fumitoshi UKAI Fri, 2 Apr 2004 04:24:27 +0900 w3m (0.5-5) unstable; urgency=low * debian/control: add replaces: w3mmee, because old w3mmee provides w3m.mo that conflicts with current w3m. w3mmee (>= 0.3.p24.19-1) uses w3mmee.mo instead of w3m.mo, so no need conflits. * debian/w3mconfig: update follow_locale 1 *_charset US-ASCII closes: Bug#240702 -- Fumitoshi UKAI Wed, 31 Mar 2004 01:38:37 +0900 w3m (0.5-4) unstable; urgency=low * fix search problem on different charset page than display charset with migemo -- Fumitoshi UKAI Wed, 24 Mar 2004 03:20:04 +0900 w3m (0.5-3) unstable; urgency=low * display_charset uses follow_locale * use charset in w3mhelp.cgi -- Fumitoshi UKAI Tue, 23 Mar 2004 02:45:01 +0900 w3m (0.5-2) unstable; urgency=low * w3m-img priority back to optional * need update-po -- Fumitoshi UKAI Mon, 22 Mar 2004 03:40:31 +0900 w3m (0.5-1) unstable; urgency=low * set priority to standard * New upstream release merge m17n patch. closes: Bug#106840: ITP: w3m-m17n -- multilingualization of w3m closes: Bug#96340 - no w3m-en/w3m-ja any more closes: Bug#217509 - segfault if TERM is not set * w3m-img no longer setuid. setgid to video. closes: Bug#200028, Bug#181631 * fix FTBFS on GNU/Hurd closes: Bug#221890 * update config.{guess,sub} using autotools-dev closes: Bug#216785 -- Fumitoshi UKAI Mon, 22 Mar 2004 00:53:03 +0900 w3m (0.4.2-2) unstable; urgency=medium * install conffiles as /etc/w3m/config. closes: Bug#214325, Bug#215537, Bug#215537 -- Fumitoshi UKAI Tue, 14 Oct 2003 00:40:51 +0900 w3m (0.4.2-1.1) unstable; urgency=medium * [debian/rules, debian/preinst, debian/postinst] Older versions of this package had their conffile in the wrong location. Fixed that, and introduced a way to preserve modifications made there. (Closes: #214325) -- J.H.M. Dassen (Ray) Sun, 12 Oct 2003 19:40:58 +0200 w3m (0.4.2-1) unstable; urgency=low * New upstream release -- Fumitoshi UKAI Tue, 23 Sep 2003 03:15:22 +0900 w3m (0.4.1-6) unstable; urgency=low * rebuild with libgc-dev * build-depends: libgc6-dev => libgc-dev -- Fumitoshi UKAI Wed, 20 Aug 2003 19:15:40 +0900 w3m (0.4.1-5) unstable; urgency=low * no need to build-depends: imlib-dev. closes: Bug#199583 -- Fumitoshi UKAI Wed, 2 Jul 2003 23:35:37 +0900 w3m (0.4.1-4) unstable; urgency=low * backport i-search fix -- Fumitoshi UKAI Tue, 15 Apr 2003 01:24:21 +0900 w3m (0.4.1-3) unstable; urgency=low * backport SSL & compressed fix again fix initialization of URLFile check t_buf to avoid segfault when "w3m -B" -- Fumitoshi UKAI Mon, 14 Apr 2003 11:45:31 +0900 w3m (0.4.1-2) unstable; urgency=low * backport SSL & compressed fix for https://alioth.debian.org/ -- Fumitoshi UKAI Mon, 14 Apr 2003 03:31:32 +0900 w3m (0.4.1-1) unstable; urgency=low * new upstream release: w3m 0.4.1 * remove tailing '?' from form action URL, closes: Bug#181897 -- Fumitoshi UKAI Fri, 7 Mar 2003 02:45:17 +0900 w3m (0.4-2) unstable; urgency=low * apply W3M_TTY fix for w3m-img on framebuffer -- Fumitoshi UKAI Tue, 25 Feb 2003 01:31:03 +0900 w3m (0.4-1) unstable; urgency=low * New upstream release: w3m 0.4 -- Fumitoshi UKAI Mon, 24 Feb 2003 02:00:13 +0900 w3m (0.3.2.2+0.4rc3-1) unstable; urgency=low * w3m 0.4 release candidate 3 * use sigaction * fix multipart.cgi -- Fumitoshi UKAI Thu, 20 Feb 2003 00:04:12 +0900 w3m (0.3.2.2+0.4rc2-1) unstable; urgency=low * w3m 0.4 release candidate 2 * don't print missing w3mimgdisplay message at startup, closes: Bug#180814 -- Fumitoshi UKAI Mon, 17 Feb 2003 00:50:06 +0900 w3m (0.3.2.2+0.4rc1-1) unstable; urgency=low * w3m 0.4 release candidate 1 * fix relative URI, closes: Bug#172851 * don't say Unknown URI for unresolved URI, closes: Bug#169962 * fix tag parsing in