Sicherheit: Mehrere Probleme in httrack - Pro-Linux

Name        : httrack
Product     : Fedora 20
Version     : 3.48.13
Release     : 1.fc20
URL         : http://www.httrack.com
Summary     : Website copier and offline browser
Description :
HTTrack is a free and easy-to-use offline browser utility. It allows the user
to download a World Wide Web site from the Internet to a local directory,
building recursively all directories, getting HTML, images, and other files
from the server to your computer. HTTrack arranges the original site's
relative link-structure. HTTrack can also update an existing mirrored site,
and resume interrupted downloads. HTTrack is fully configurable, and has an
integrated help system.

-------------------------------------------------------------------------------
-
Update Information:

- Fixed: library development files

- Fixed: --advanced-maxlinks broken (Localhost)

- Fixed: -devel package should now be standalone

- Fixed: assertion failure at htscore.c:244 (len +
 liensbuf->string_buffer_size < liensbuf->string_buffer_capa)

- Fixed: injection-proof templates

- Fixed: htshash.c:330 assertion failure ("error invalidating hash
 entry") (Sergey)

- Fixed: Windows 2000 regression (fantozzi.usenet)

- Fixed: code cleanup (aliasing issues, const correctness, safe strings)

- New: handle --advanced-maxlinks=0 to disable maximum link limits

- New: updated ZIP routines (zlib 1.2.8)

- Fixed: broken 32-bit version

- Fixed: assertion "segOutputSize < segSize assertion fails at
 htscharset.c:993"

- Fixed: new zlib version fixing CVE-2004-0797 and CVE-2005-2096

- Fixed: more reliable crash reporting

- Fixed: fixed infamous "hashtable internal error: cuckoo/stash
 collision" errors

- Fixed: safety cleanup in many strings operations

- Fixed: buggy option pannels

- New: Enforce check against CVE-2014-0160

- New: improved hashtables to speedup large mirrors

- New: added unit tests

- New: Added %a option, allowing to define the "Accept:" header line.

- New: Added %X option, to define additional request header lines.

- New: Added option '-%t', preserving the original file type (which may
 produce non-browseable file locally)

- Fixed: remove scope id (% character) in dotted address resolution (especially
 for catchurl proxy)

- Fixed: build fixes, including for Android, non-SSL releases

- Fixed: buggy keep-alive handling, leading to waste connections

- Fixed: removed chroot and setuid features (this is definitely not our
 business)

- Fixed: removed MMS (Microsoft Media Server) ripping code (mmsrip) (dead
 protocol, unmaintained code, licensing issues)

- Fixed: type mishandling when processing a redirect (such as a .PDF
 redirecting to another .PDF, with a text/html type tagged in the redirect message)

- Fixed: infinite loop when attempting to download a file:/// directory on Unix
 (gp)<br/>

- Fixed: removed background DNS resolution, prone to bugs

- Fixed: do not choke on Windows 2000 because of missing SetDllDirectory()

- Fixed: %h custom build structure parameter not taken in account 
-------------------------------------------------------------------------------
-
ChangeLog:

* Fri Jun 13 2014 Christopher Meng <rpm@cicku.me> - 3.48.13-1
- Update to 3.48.13
* Sat Jun  7 2014 Fedora Release Engineering
 <rel-eng@lists.fedoraproject.org> - 3.48.9-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
* Fri May 23 2014 Christopher Meng <rpm@cicku.me> - 3.48.9-1
- Update to 3.48.9
* Wed Apr 16 2014 Christopher Meng <rpm@cicku.me> - 3.48.3-1
- Update to 3.48.3
-------------------------------------------------------------------------------
-

This update can be installed with the "yum" update program.  Use
su -c 'yum update httrack' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce