mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-17 14:33:00 +02:00
c5845b096d
Excerpts from changelog (Details => http://git.savannah.gnu.org/cgit/wget.git): "Switch off compression by default Gzip compression has a number of bugs which need to be ironed out before we can support it by default. Some of these stem from a misunderstanding of the HTTP spec, but a lot of them are also due to many web servers not being compliant with RFC 7231. With this commit, I am marking GZip compression support as experimental in GNU Wget pending further investigation and the addition of tests. * src/http.c (gethttp): Fix bug that prevented all files from being decompressed * src/host.c (sufmatch): Fix to domain matching Replace HTTP urls with HTTPS where valid Avoid redirecting output to file when tcgetpgrp fails * src/log.c (check_redirect_output): tcgetpgrp can return -1 (ENOTTY), be sure to check whether a valid controlling terminal exists before redirecting. (Fixes: #51181) Fix heap overflow in HTTP protocol handling (CVE-2017-13090) Fix stack overflow in HTTP protocol handling (CVE-2017-13089)" Best, Matthias Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org> Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>