[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Debian w3m 0.5.3-18 released
- From: Tatsuya Kinoshita <tats@xxxxxxxxxxxxxx>
- Date: Thu, 16 Oct 2014 07:52:44 +0900 (JST)
- X-ml-name: emacs-w3m
- X-mail-count: 12381
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hi,
Forwarding from:
https://sourceforge.net/p/w3m/patches/71/ (awaiting moderation)
Debian package w3m, a WWW browsable pager, version 0.5.3-18
has been released:
* http://packages.debian.org/source/unstable/w3m
Differences between 0.5.3-18 and 0.5.3-17 in debian/patches:
* New patch 340_ssl-init.patch to disable SSLv3 by default [CVE-2014-3566]
This patch also disable SSLv2 and force ssl_verify_server on.
cf. https://blog.mozilla.org/security/2014/10/14/the-poodle-attack-and-the-end-of-ssl-3-0/
Note that you should also care about ssl_ca_* configuration to
verify certificates. The following configuration is set by
default in Debian's /etc/w3m/config.
ssl_ca_path /etc/ssl/certs
ssl_verify_server 1
ssl_forbid_method 2, 3
* New patch 350_ambwidth.patch to correct ucs_ambwidth_map
cf. http://peace.2ch.net/test/read.cgi/unix/1185784998/509
* Update 050_autotools-config.patch with autotools-dev 20140911.1
(Note: Debian package uses dh addon instead of this patch)
* Update 015_debian-version.patch to 0.5.3+debian-18
* Update 900_ChangeLog.patch
The patched snapshot can be downloaded from the master branch
of the development repository:
* http://anonscm.debian.org/gitweb/?p=collab-maint/w3m.git
The patch files are managed in the debian branch. For more
information, see the Debian Package Tracking System web page:
* http://packages.qa.debian.org/w3m
Thanks,
- --
Tatsuya Kinoshita
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQIcBAEBCAAGBQJUPvq7AAoJEOXvq5AIDqY8kNIP/AidvD3EzpFZCcaGzTnVrEa+
PK7TwCuEvsJmGoPrSXgcT/U3ZPLY1bnDnIhyMMbG5wdZTBHMd8jNxKi+qNjuRwjQ
xXgO1vnwVApxqpXvnBlw1EljYeEPL9PfN44mJzgJOyUTZxkaBhXyEqzKZ++q0kvP
W914J7rFbThP0ggdWx5y47yQnkVnZ3SIsD84cta/AzO5w8DZ+b3DPTm8asqaJWt5
YKuB0x0dI7iR1RaUYH7xlHQPzmAkiOM06RYUfomwSYc4MGKz4dSnvsukDjbDo3l5
Kw5V/w8iOHiXpE9f8ZnFS3Lo+XiTWvXegBPLIjYmYwoch4LwazN6ZyAI7EsipvKA
LUMQDTQKy8aQYkzXzdoSW907W0BJ+wUnnagNJ9FHHnHihPeU73ZNIcBuQVakuGOp
ttVWDzLX8kC3/YEvVEL9bbMOyGiCrk1a5O2Z7JvWGFlp7TIRTs8Nx/u7xbGOO25V
ZN1vB6S/1gEQ1pwxNj5Vd3ULGZqFIgv55aRXVzLRYPAQnK4KbzJp229ql2GWRQWG
1cNipxXvKH8TGZb5VM0tXyRTBfE2s+TZkWg2LQYFfxoJxqLTzzafJDM4gFOl+fcC
Yw4bLJ/iyQXUwyjDscFozak6aGa8boxbEejOybtgCUNtz931qLhPBYD5YOnMyBMN
9RWHD6OwzdUnoqRPC+nz
=z7Dt
-----END PGP SIGNATURE-----