[Date Prev][Date Next][Thread Prev][][Date Index][Thread Index]

Debian w3m 0.5.3-18 released



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi,

Forwarding from:
    https://sourceforge.net/p/w3m/patches/71/ (awaiting moderation)

Debian package w3m, a WWW browsable pager, version 0.5.3-18
has been released:

  * http://packages.debian.org/source/unstable/w3m

Differences between 0.5.3-18 and 0.5.3-17 in debian/patches:

  * New patch 340_ssl-init.patch to disable SSLv3 by default [CVE-2014-3566]
    This patch also disable SSLv2 and force ssl_verify_server on.
    cf. https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/

    Note that you should also care about ssl_ca_* configuration to
    verify certificates.  The following configuration is set by
    default in Debian's /etc/w3m/config.

        ssl_ca_path /etc/ssl/certs
        ssl_verify_server 1
        ssl_forbid_method 2, 3

  * New patch 350_ambwidth.patch to correct ucs_ambwidth_map
    cf. http://peace.2ch.net/test/read.cgi/unix/1185784998/509

  * Update 050_autotools-config.patch with autotools-dev 20140911.1
    (Note: Debian package uses dh addon instead of this patch)

  * Update 015_debian-version.patch to 0.5.3+debian-18

  * Update 900_ChangeLog.patch

The patched snapshot can be downloaded from the master branch
of the development repository:

  * http://anonscm.debian.org/gitweb/?p=collab-maint/w3m.git

The patch files are managed in the debian branch.  For more
information, see the Debian Package Tracking System web page:

  * http://packages.qa.debian.org/w3m

Thanks,
- -- 
Tatsuya Kinoshita
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=z7Dt
-----END PGP SIGNATURE-----