wget (1.25.0-3ubuntu1) stonking; urgency=medium

  * Merge with Debian unstable (LP: #2163536). Remaining changes:
    - d/rules: pass --with-ssl=openssl
    - d/p/wget-maybe-prepend-scheme-only-in-verbose-mode: Print message only in
      verbose mode (LP #2122484).
    - SECURITY UPDATE: Buffer overflow in metalink.
      + debian/patches/CVE-2026-58469.patch: Fix buffer overflow in
        src/metalink.c
      + CVE-2026-58469
    - SECURITY UPDATE: Integer overflow in http
      + debian/patches/CVE-2026-58470.patch: Fix integer overflow in src/http.c
      + CVE-2026-58470
    - SECURITY UPDATE: Buffer overflow in convert_fname.
      + debian/patches/CVE-2026-58471.patch: Fix buffer overflow in src/url.c
      + CVE-2026-58471
    - SECURITY UPDATE: Integer and buffer overflow in html_quote_string.
      + debian/patches/CVE-2026-58472.patch: Fix integer+buffer overflow in
        src/convert.c
      + CVE-2026-58472
    - SECURITY REGRESSION: Incomplete fix for CVE-2026-58472 (LP #2163754)
      + debian/patches/CVE-2026-58472-post1.patch: Fix buffer overflow in
        src/convert.c

 -- Ural Tunaboyu <ural@ubuntu.com>  Tue, 25 Aug 2026 17:45:24 -0700

wget (1.25.0-3) unstable; urgency=medium

  * patch from upstream git to fix CVE-2026-15146 a problem with IP validation in FTP PASV. closes: Bug#1142284

 -- Noël Köthe <noel@debian.org>  Fri, 24 Jul 2026 15:53:14 +0200

wget (1.25.0-2ubuntu7) stonking; urgency=medium

  * SECURITY REGRESSION: Incomplete fix for CVE-2026-58472 (LP: #2163754)
    - debian/patches/CVE-2026-58472-post1.patch: Fix buffer overflow in
      src/convert.c

 -- Kyle Kernick <kyle.kernick@canonical.com>  Wed, 19 Aug 2026 17:56:06 -0600

wget (1.25.0-2ubuntu6) stonking; urgency=medium

  * SECURITY UPDATE: Buffer overflow in metalink.
    - debian/patches/CVE-2026-58469.patch: Fix buffer overflow in
      src/metalink.c
    - CVE-2026-58469
  * SECURITY UPDATE: Integer overflow in http
    - debian/patches/CVE-2026-58470.patch: Fix integer overflow in src/http.c
    - CVE-2026-58470
  * SECURITY UPDATE: Buffer overflow in convert_fname.
    - debian/patches/CVE-2026-58471.patch: Fix buffer overflow in src/url.c
    - CVE-2026-58471
  * SECURITY UPDATE: Integer and buffer overflow in html_quote_string.
    - debian/patches/CVE-2026-58472.patch: Fix integer+buffer overflow in
      src/convert.c
    - CVE-2026-58472

 -- Kyle Kernick <kyle.kernick@canonical.com>  Fri, 10 Jul 2026 17:22:16 -0600

wget (1.25.0-2ubuntu4) resolute; urgency=medium

  * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)

 -- Sebastien Bacher <seb128@debian.org>  Mon, 02 Feb 2026 21:52:17 +0100

wget (1.25.0-2ubuntu3) questing; urgency=medium

  * d/p/wget-maybe-prepend-scheme-only-in-verbose-mode: Print message only in
    verbose mode (LP:# 2122484).

 -- Frode Nordahl <fnordahl@ubuntu.com>  Thu, 02 Oct 2025 15:30:42 +0000

wget (1.25.0-2ubuntu2) questing; urgency=medium

  * Rebuild to include updated RISC-V base ISA RVA23

 -- Heinrich Schuchardt <heinrich.schuchardt@canonical.com>  Sat, 06 Sep 2025 15:39:36 +0000

wget (1.25.0-2ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2111101). Remaining changes:
    - d/rules: pass --with-ssl=openssl
  * Dropped changes, as libgnutls28-dev is now required:
    - d/control: don't Build-Depend on libgnutls28-dev, only on libssl-dev

 -- Ural Tunaboyu <ural.tunaboyu@canonical.com>  Sun, 18 May 2025 14:46:05 -0700

wget (1.25.0-2) unstable; urgency=medium

  * Team upload (salas debian group).

  [ Shengqi Chen ]
  * d/rules:
    + rewrite with dh sequencer (thanks @shankerwangmiao for providing help).
    + add more comments.
    + remove unnecessary clean rules.
  * Support <noudeb> build profile.
  * d/watch: scan only wget 1.x releases (closes: #1011450)

  [ Andreas Tille ]
  * Remove trailing whitespace in debian/copyright (routine-update)
  * No tab in license text (routine-update)
  * Drop automake from Build-Depends
  * Add missing ${misc:Depends} to Depends for wget-udeb.
  * Re-export upstream signing key without extra signatures.
  * Fix day-of-week for changelog entries 1.13-1, 1.9.1-11.1, 1.9.1-1, 1.9-1,
    1.8.2-2, 1.8.2-1.

 -- Shengqi Chen <harry@debian.org>  Sat, 08 Mar 2025 14:23:26 +0800

wget (1.25.0-1) unstable; urgency=medium

  * Team upload (salsa debian group).
  * New upstream version 1.25.0.
    (closes: #1088023, CVE-2024-10524, #1095109)
  * d/patches: remove applied and refresh the rest.
  * d/control:
    + bump std-ver to 4.7.2 (no changes required)
    + update Vcs fields due to being moved to debian namespace

 -- Shengqi Chen <harry@debian.org>  Sat, 01 Mar 2025 11:15:29 +0800

wget (1.24.5-2ubuntu1) plucky; urgency=medium

  * Merge from Debian Unstable. Remaining changes:
    - debian/control: Don't Build-Depend on libgnutls28-dev, only on libssl-dev.
    - debian/rules: Pass --with-ssl=openssl

 -- Simon Quigley <tsimonq2@ubuntu.com>  Thu, 21 Nov 2024 15:35:40 -0600

wget (1.24.5-2) unstable; urgency=medium

  * patch from git to fix CVE-2024-38428 URL parser issue with semicolons
    closes: Bug#1073523
  * debian/rules replace cp by dh_update_autotools_config
  * debian/control raised Standards-Version to 4.7.0, no changes needed
  * debian/control add Vcs-Browser

 -- Noël Köthe <noel@debian.org>  Sun, 28 Jul 2024 06:49:33 +0200

wget (1.24.5-1ubuntu2) oracular; urgency=medium

  * SECURITY UPDATE: mishandling of semicolons in userinfo
    - debian/patches/CVE-2024-38428.patch: properly re-implement userinfo
      parsing in src/url.c.
    - CVE-2024-38428

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Wed, 19 Jun 2024 08:12:14 -0400

wget (1.24.5-1ubuntu1) oracular; urgency=medium

  * Merge with Debian unstable. Remaining changes (LP: #2065883):
    - d/control: Don't Build-Depend on libgnutls28-dev, only on libssl-dev.
    - d/rules: Pass --with-ssl=openssl

 -- Hector Cao <hector.cao@canonical.com>  Thu, 16 May 2024 14:11:11 +0200

wget (1.24.5-1) unstable; urgency=medium

  * new upstream release from 2024-03-10
    - version jump by accident by upstream ;)
  * debian/control corrected superseded pkg-config -> pkgconf build-dep

 -- Noël Köthe <noel@debian.org>  Sun, 17 Mar 2024 11:31:58 +0100

wget (1.21.4-1ubuntu4) noble; urgency=high

  * No change rebuild against libssl3t64.

 -- Julian Andres Klode <juliank@ubuntu.com>  Mon, 08 Apr 2024 16:52:02 +0200

wget (1.21.4-1ubuntu3) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 17:25:35 +0000

wget (1.21.4-1ubuntu2) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Tue, 05 Mar 2024 02:16:23 +0000

wget (1.21.4-1ubuntu1) noble; urgency=low

  * Merge from Debian unstable. Remaining changes: (LP: #2039429)
    - d/control: Don't Build-Depend on libgnutls28-dev, only on libssl-dev.
    - d/rules: Pass --with-ssl=openssl

 -- Nathan Pratta Teodosio <nathan.teodosio@canonical.com>  Mon, 16 Oct 2023 11:47:48 +0200

wget (1.21.4-1) unstable; urgency=medium

  * new upstream from 2023-05-10
  * debian/control: added missing Rules-Requires-Root

 -- Noël Köthe <noel@debian.org>  Sat, 09 Sep 2023 12:05:49 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog wget`.
