wget (1.21.4-1ubuntu4.5) noble-security; urgency=medium

  * SECURITY REGRESSION: Incomplete fix for CVE-2026-58472 (LP: #2163754)
    - debian/patches/CVE-2026-58472-post1.patch: Fix buffer overflow in
      src/convert.c

 -- Kyle Kernick <kyle.kernick@canonical.com>  Wed, 19 Aug 2026 18:00:36 -0600

wget (1.21.4-1ubuntu4.4) noble-security; urgency=medium

  * SECURITY UPDATE: SSRF forgery in FTP.
    - debian/patches/CVE-2026-15146.patch: Validate PASV/LPSV response address
      against control connection peer in src/ftp-basic.c
    - CVE-2026-15146

 -- Kyle Kernick <kyle.kernick@canonical.com>  Thu, 16 Jul 2026 10:38:12 -0600

wget (1.21.4-1ubuntu4.3) noble-security; urgency=medium

  * SECURITY UPDATE: Buffer overflow in metalink.
    - debian/patches/CVE-2026-58469.patch: Fix buffer overflow in
      src/metalink.c
    - CVE-2026-58469
  * SECURITY UPDATE: Integer overflow in http
    - debian/patches/CVE-2026-58470.patch: Fix integer overflow in src/http.c
    - CVE-2026-58470
  * SECURITY UPDATE: Buffer overflow in convert_fname.
    - debian/patches/CVE-2026-58471.patch: Fix buffer overflow in src/url.c
    - CVE-2026-58471
  * SECURITY UPDATE: Integer and buffer overflow in html_quote_string.
    - debian/patches/CVE-2026-58472.patch: Fix integer+buffer overflow in
      src/convert.c
    - CVE-2026-58472

 -- Kyle Kernick <kyle.kernick@canonical.com>  Fri, 10 Jul 2026 16:04:19 -0600

wget (1.21.4-1ubuntu4.1) noble-security; urgency=medium

  * SECURITY UPDATE: mishandling of semicolons in userinfo
    - debian/patches/CVE-2024-38428.patch: properly re-implement userinfo
      parsing in src/url.c.
    - CVE-2024-38428

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 19 Jun 2024 08:14:03 -0400

wget (1.21.4-1ubuntu4) noble; urgency=high

  * No change rebuild against libssl3t64.

 -- Julian Andres Klode <juliank@ubuntu.com>  Mon, 08 Apr 2024 16:52:02 +0200

wget (1.21.4-1ubuntu3) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 17:25:35 +0000

wget (1.21.4-1ubuntu2) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Tue, 05 Mar 2024 02:16:23 +0000

wget (1.21.4-1ubuntu1) noble; urgency=low

  * Merge from Debian unstable. Remaining changes: (LP: #2039429)
    - d/control: Don't Build-Depend on libgnutls28-dev, only on libssl-dev.
    - d/rules: Pass --with-ssl=openssl

 -- Nathan Pratta Teodosio <nathan.teodosio@canonical.com>  Mon, 16 Oct 2023 11:47:48 +0200

wget (1.21.4-1) unstable; urgency=medium

  * new upstream from 2023-05-10
  * debian/control: added missing Rules-Requires-Root

 -- Noël Köthe <noel@debian.org>  Sat, 09 Sep 2023 12:05:49 +0200

wget (1.21.3-1ubuntu1) kinetic; urgency=low

  * Merge from Debian unstable. Remaining changes: (LP: #1974046)
    - d/control: Don't Build-Depend on libgnutls28-dev, only on libssl-dev.
    - d/rules: Pass --with-ssl=openssl

 -- Nathan Pratta Teodosio <nathan.teodosio@canonical.com>  Wed, 18 May 2022 14:23:07 -0300

wget (1.21.3-1) unstable; urgency=medium

  * new upstream from 2022-02-26
    * remove now included patch from 1.21.2-2
      ssl_Removesupriousprintstatements_wget61125.patch

 -- Noël Köthe <noel@debian.org>  Tue, 29 Mar 2022 19:40:59 +0200

wget (1.21.2-2ubuntu1) jammy; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Don't Build-Depend on libgnutls28-dev, only on libssl-dev.
    - Pass --with-ssl=openssl

 -- Lukas Märdian <slyon@ubuntu.com>  Mon, 24 Jan 2022 12:59:00 +0100

wget (1.21.2-2) unstable; urgency=medium

  * cherry pick to fix SSL_INIT output wget#61125 closes: Bug#996174

 -- Noël Köthe <noel@debian.org>  Wed, 13 Oct 2021 16:35:25 +0200

wget (1.21.2-1) unstable; urgency=medium

  * new upstream release from 2021-09-07

 -- Noël Köthe <noel@debian.org>  Sun, 10 Oct 2021 16:31:17 +0200

wget (1.21-1ubuntu5) jammy; urgency=medium

  * No-change rebuild against openssl3

 -- Simon Chopin <simon.chopin@canonical.com>  Wed, 24 Nov 2021 13:58:06 +0000

wget (1.21-1ubuntu4) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <doko@ubuntu.com>  Thu, 07 Oct 2021 12:26:23 +0200

wget (1.21-1ubuntu3) hirsute; urgency=medium

  * Rebuild again so s390x picks up the right debhelper

 -- Sebastien Bacher <seb128@ubuntu.com>  Wed, 24 Feb 2021 16:32:45 +0100

wget (1.21-1ubuntu2) hirsute; urgency=medium

  * No-change rebuild to drop the udeb package.

 -- Matthias Klose <doko@ubuntu.com>  Mon, 22 Feb 2021 10:36:36 +0100

wget (1.21-1ubuntu1) hirsute; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Don't Build-Depend on libgnutls28-dev, only on libssl-dev.
    - Pass --with-ssl=openssl
  * Dropped changes, included in Debian:
    - Enable parallel builds.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Wed, 06 Jan 2021 18:19:35 -0800

wget (1.21-1) unstable; urgency=medium

  * new upstream release from 2020-12-31
  * raised Standard-Version, no changes needed
  * raised debhelper-compat to 13 and removed debian/compat
  * updated dependency to libidn2-dev closes: Bug#974997
  * added parallel build patch. Thanks Steve! closes: Bug#928456

 -- Noël Köthe <noel@debian.org>  Sat, 02 Jan 2021 11:58:25 +0100

wget (1.20.3-1ubuntu1) eoan; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - Don't Build-Depend on libgnutls28-dev, only on libssl-dev.
    - Pass --with-ssl=openssl
    - Enable parallel builds.
  * Dropped changes, no longer needed:
    - debian/patches/disable-SSLv3.patch: with openssl 1.1.1 both defines
      exist so there is no need for a delta.
  * Dropped changes, included upstream:
    - debian/control: add pkg-config to Build-Depends.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Wed, 24 Jul 2019 12:40:25 -0700

wget (1.20.3-1) unstable; urgency=medium

  * new upstream release from 2019-04-05
    removed cherry picked Fix-a-buffer-overflow-vulnerability.patch

 -- Noël Köthe <noel@debian.org>  Sat, 20 Jul 2019 18:10:06 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog wget`.
