<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="5">
<package pkgid="2c3b4231f2820063860f28d82eab915b415797403966841f3c2e036d6202b1f6f6c4bda92cd700725b5ed7144f1717556fc79401b52be8ca3cc7126891990059" name="wget" arch="src">
  <version epoch="0" ver="1.25.0" rel="176.4"/>
  <changelog author="seanlew@opensuse.org" date="1554292800">- GNU wget 1.20.2:
  * NTLM authentication will retry under certain cases
  * Fixed a buffer overflow vulnerability</changelog>
  <changelog author="josef.moellers@suse.com" date="1554465600">- Upgrade to GNU wget 1.20.3:
  * Finally fixed the buffer overflow vulnerability
  * obsoletes patch wget-buffer-overflow-CVE-2019-5953.patch
  [bsc#1131493, CVE-2019-5953]</changelog>
  <changelog author="Paolo Stivanin &lt;info@paolostivanin.com&gt;" date="1584014400">- split lang files into separate lang package
- add remove-env-from-shebang.patch</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1609588800">- GNU wget 1.21:
  * Improve the number of translated strings
  * Remove all uses of alloca
  * Fix buffer overflows in progress bar code in some locales
  * Fix two null pointer accesses
  * Amend cookie file header to be recognized by the 'file' command
  * Post Handshake Authentication for OpenSSL
- drop obsolete texinfo packaging macros</changelog>
  <changelog author="Dirk M&#xFC;ller &lt;dmueller@suse.com&gt;" date="1611489600">- update to 1.21.1:
  * Fix compilation on MacOS and Solaris 9
  * Resove bashism from configure.ac
  * Fix a compilation warning on 32-bit systems
- remove-env-from-shebang.patch: refresh</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1620648000">- If wget for an http URL is redirected to a different site (hostname
  parts of URLs differ), then any "Authenticate" and "Cookie" header
  entries are discarded.
  [bsc#1175551, wget-do-not-propagate-credentials.patch]</changelog>
  <changelog author="Josef M&#xF6;llers &lt;josef.moellers@suse.com&gt;" date="1620648001">- When running recursively, wget will verify the length of the whole
  URL when saving the files. This will make it overwrite files with
  truncated names, throwing the "The name is too long, ... trying to
  shorten" messages. The patch moves the length check code to a
  separate function and call it from the append_dir_structure() for each
  path element.
  [ bsc#1181173, 0001-src-main.c-Introduce-truncate_filename-option.patch]</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1631966400">- GNU wget 1.21.2:
  * Support for autoconf 2.71
  * Fix a double free in FTP when using an absolute path
  * --page-requisites will now also download links marked as
  "alternate stylesheet" or "icon"
- drop 0001-src-main.c-Introduce-truncate_filename-option.patch
  superseded by upstream changes</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1645876800">- GNU wget 1.21.3:
  * Fix computation of total bytes downloaded during FTP transfers
  * Add option to select TLS 1.3 on the command line
  * Fix HSTS build issues on some 64-bit big-endian systems
  * Hide password during status report in --no-verbose
  * Remove a sprurious print statement that showed up even during
  - -quiet</changelog>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1684238400">- GNU wget 1.21.4:
  * Document --retry-on-host-error in help text
  * Increase read buffer size to 64k.
    This should speed up downloads on gigabit and faster connections
  * Update deprecated option '--html-extension' to
    '--adjust-extension' in documentation</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1686571200">- Update wget-libproxy.patch: ensure to properly use libproxy
  cflags from pkg-config. Fixes build against libproxy 0.5.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710072000">- GNU wget 1.24.5:
  * Fix how subdomain matches are checked for HSTS.
  * Wget will now also parse the srcset attribute in &lt;source&gt; HTML
    tags
  * Support reading fetchmail style "user" and "passwd" fields from
    netrc
  * In some cases, prevent the confusing "Cannot write to...
    (success)" error messages
  * Support extremely fast download speeds (TB/s)
  * Ensure that CSS URLs are corectly quoted
  * libproxy support is now upstream- drop wget-libproxy.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1718712000">- Fix mishandled semicolons in the userinfo subcomponent could lead to an
  insecure behavior in which data that was supposed to be in the userinfo
  subcomponent is misinterpreted to be part of the host subcomponent.
  [bsc#1226419, CVE-2024-38428, properly-re-implement-userinfo-parsing.patch]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1726056000">- Update wget.keyring: use release-team keyring
- Don't reference source URL when the linked sources change over time</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1731412800">- GNU wget 1.25.0:
  * New testcase for pathconf truncation
  * Fix libproxy build with --disable-debug
  * [BREAKING CHANGE] Support continious reading from stdin pipes
  * Properly re-implement userinfo parsing (rfc2396)
  * init: fix -Warray-bounds in setval_internal_tilde
  * Fix build error on MingW with `G_GETFL` and `F_SETFL` flags
  * Fix returning uninitialized variable
  * Fix a static analysis false positive
  * [BREAKING CHANGE] Fix CVE-2024-10524 (drop support for shorthand URLs)
    (bsc#1233256)
- Remove committed patches
  * properly-re-implement-userinfo-parsing.patch
- Renumber patches</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753444800">- adjust gpgme (and other) build dependencies for future-proofing
- drop unused build dependency</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1783598400">- Fix buffer underflow in clean_metalink_link
  [bsc#1271033, CVE-2026-58469]
  * CVE-2026-58469.patch
- Fix integer overflow in parse_content_range
  [bsc#1271034, CVE-2026-58470]
  * CVE-2026-58470.patch
- Fix buffer size handling in filename conversion
  [bsc#1271035, CVE-2026-58471]
  * CVE-2026-58471.patch
- Fix integer+buffer overflow in html_quote_string
  [bsc#1271036, CVE-2026-58472]
  * CVE-2026-58472.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">- ftp validate PASV/LPSV response address against control connection peer
  [bsc#1271320, CVE-2026-15146]
  * CVE-2026-15146.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784721600">- Fix metalink regression from CVE-2026-58469 fix
  See: commit 7b1cdecc49bc77bde220fc575c8a00386c3f3bcf from
  https://gitlab.com/gnuwget/wget
  [bsc#1272219, CVE-2026-58469]
  * CVE-2026-58469.patch</changelog>
</package>
<package pkgid="5c3ad2c1b6739ff067163d1f470ffe0ed78eb4eff3a695757c45aae0d8d1c2b1077ca2cbae49ac6e352bcbd7fbd1c3c07dd0de36732e5cc9162a971d156a41de" name="wget" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="176.4"/>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1684238400">- GNU wget 1.21.4:
  * Document --retry-on-host-error in help text
  * Increase read buffer size to 64k.
    This should speed up downloads on gigabit and faster connections
  * Update deprecated option '--html-extension' to
    '--adjust-extension' in documentation</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1686571200">- Update wget-libproxy.patch: ensure to properly use libproxy
  cflags from pkg-config. Fixes build against libproxy 0.5.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710072000">- GNU wget 1.24.5:
  * Fix how subdomain matches are checked for HSTS.
  * Wget will now also parse the srcset attribute in &lt;source&gt; HTML
    tags
  * Support reading fetchmail style "user" and "passwd" fields from
    netrc
  * In some cases, prevent the confusing "Cannot write to...
    (success)" error messages
  * Support extremely fast download speeds (TB/s)
  * Ensure that CSS URLs are corectly quoted
  * libproxy support is now upstream- drop wget-libproxy.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1718712000">- Fix mishandled semicolons in the userinfo subcomponent could lead to an
  insecure behavior in which data that was supposed to be in the userinfo
  subcomponent is misinterpreted to be part of the host subcomponent.
  [bsc#1226419, CVE-2024-38428, properly-re-implement-userinfo-parsing.patch]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1726056000">- Update wget.keyring: use release-team keyring
- Don't reference source URL when the linked sources change over time</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1731412800">- GNU wget 1.25.0:
  * New testcase for pathconf truncation
  * Fix libproxy build with --disable-debug
  * [BREAKING CHANGE] Support continious reading from stdin pipes
  * Properly re-implement userinfo parsing (rfc2396)
  * init: fix -Warray-bounds in setval_internal_tilde
  * Fix build error on MingW with `G_GETFL` and `F_SETFL` flags
  * Fix returning uninitialized variable
  * Fix a static analysis false positive
  * [BREAKING CHANGE] Fix CVE-2024-10524 (drop support for shorthand URLs)
    (bsc#1233256)
- Remove committed patches
  * properly-re-implement-userinfo-parsing.patch
- Renumber patches</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753444800">- adjust gpgme (and other) build dependencies for future-proofing
- drop unused build dependency</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1783598400">- Fix buffer underflow in clean_metalink_link
  [bsc#1271033, CVE-2026-58469]
  * CVE-2026-58469.patch
- Fix integer overflow in parse_content_range
  [bsc#1271034, CVE-2026-58470]
  * CVE-2026-58470.patch
- Fix buffer size handling in filename conversion
  [bsc#1271035, CVE-2026-58471]
  * CVE-2026-58471.patch
- Fix integer+buffer overflow in html_quote_string
  [bsc#1271036, CVE-2026-58472]
  * CVE-2026-58472.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">- ftp validate PASV/LPSV response address against control connection peer
  [bsc#1271320, CVE-2026-15146]
  * CVE-2026-15146.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784721600">- Fix metalink regression from CVE-2026-58469 fix
  See: commit 7b1cdecc49bc77bde220fc575c8a00386c3f3bcf from
  https://gitlab.com/gnuwget/wget
  [bsc#1272219, CVE-2026-58469]
  * CVE-2026-58469.patch</changelog>
</package>
<package pkgid="b3d459c1c21706642336cca66081957206956bf7f20f542391f914cca375691165c41e8ebc2b45a42b4cc74c35b613a28ca602750b79ff7150788cff6f4c9a57" name="wget-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="176.4"/>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1684238400">- GNU wget 1.21.4:
  * Document --retry-on-host-error in help text
  * Increase read buffer size to 64k.
    This should speed up downloads on gigabit and faster connections
  * Update deprecated option '--html-extension' to
    '--adjust-extension' in documentation</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1686571200">- Update wget-libproxy.patch: ensure to properly use libproxy
  cflags from pkg-config. Fixes build against libproxy 0.5.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710072000">- GNU wget 1.24.5:
  * Fix how subdomain matches are checked for HSTS.
  * Wget will now also parse the srcset attribute in &lt;source&gt; HTML
    tags
  * Support reading fetchmail style "user" and "passwd" fields from
    netrc
  * In some cases, prevent the confusing "Cannot write to...
    (success)" error messages
  * Support extremely fast download speeds (TB/s)
  * Ensure that CSS URLs are corectly quoted
  * libproxy support is now upstream- drop wget-libproxy.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1718712000">- Fix mishandled semicolons in the userinfo subcomponent could lead to an
  insecure behavior in which data that was supposed to be in the userinfo
  subcomponent is misinterpreted to be part of the host subcomponent.
  [bsc#1226419, CVE-2024-38428, properly-re-implement-userinfo-parsing.patch]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1726056000">- Update wget.keyring: use release-team keyring
- Don't reference source URL when the linked sources change over time</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1731412800">- GNU wget 1.25.0:
  * New testcase for pathconf truncation
  * Fix libproxy build with --disable-debug
  * [BREAKING CHANGE] Support continious reading from stdin pipes
  * Properly re-implement userinfo parsing (rfc2396)
  * init: fix -Warray-bounds in setval_internal_tilde
  * Fix build error on MingW with `G_GETFL` and `F_SETFL` flags
  * Fix returning uninitialized variable
  * Fix a static analysis false positive
  * [BREAKING CHANGE] Fix CVE-2024-10524 (drop support for shorthand URLs)
    (bsc#1233256)
- Remove committed patches
  * properly-re-implement-userinfo-parsing.patch
- Renumber patches</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753444800">- adjust gpgme (and other) build dependencies for future-proofing
- drop unused build dependency</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1783598400">- Fix buffer underflow in clean_metalink_link
  [bsc#1271033, CVE-2026-58469]
  * CVE-2026-58469.patch
- Fix integer overflow in parse_content_range
  [bsc#1271034, CVE-2026-58470]
  * CVE-2026-58470.patch
- Fix buffer size handling in filename conversion
  [bsc#1271035, CVE-2026-58471]
  * CVE-2026-58471.patch
- Fix integer+buffer overflow in html_quote_string
  [bsc#1271036, CVE-2026-58472]
  * CVE-2026-58472.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">- ftp validate PASV/LPSV response address against control connection peer
  [bsc#1271320, CVE-2026-15146]
  * CVE-2026-15146.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784721600">- Fix metalink regression from CVE-2026-58469 fix
  See: commit 7b1cdecc49bc77bde220fc575c8a00386c3f3bcf from
  https://gitlab.com/gnuwget/wget
  [bsc#1272219, CVE-2026-58469]
  * CVE-2026-58469.patch</changelog>
</package>
<package pkgid="47ed8c6e889c71b0061d04575b118f1024a788e3c08714b2a72d05e9fcacfc8bd50b6fdefe3aa32b82b2bd51f2b60deaf4d25fc63e9629ce4313635c22016438" name="wget-debugsource" arch="x86_64">
  <version epoch="0" ver="1.25.0" rel="176.4"/>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1684238400">- GNU wget 1.21.4:
  * Document --retry-on-host-error in help text
  * Increase read buffer size to 64k.
    This should speed up downloads on gigabit and faster connections
  * Update deprecated option '--html-extension' to
    '--adjust-extension' in documentation</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1686571200">- Update wget-libproxy.patch: ensure to properly use libproxy
  cflags from pkg-config. Fixes build against libproxy 0.5.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710072000">- GNU wget 1.24.5:
  * Fix how subdomain matches are checked for HSTS.
  * Wget will now also parse the srcset attribute in &lt;source&gt; HTML
    tags
  * Support reading fetchmail style "user" and "passwd" fields from
    netrc
  * In some cases, prevent the confusing "Cannot write to...
    (success)" error messages
  * Support extremely fast download speeds (TB/s)
  * Ensure that CSS URLs are corectly quoted
  * libproxy support is now upstream- drop wget-libproxy.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1718712000">- Fix mishandled semicolons in the userinfo subcomponent could lead to an
  insecure behavior in which data that was supposed to be in the userinfo
  subcomponent is misinterpreted to be part of the host subcomponent.
  [bsc#1226419, CVE-2024-38428, properly-re-implement-userinfo-parsing.patch]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1726056000">- Update wget.keyring: use release-team keyring
- Don't reference source URL when the linked sources change over time</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1731412800">- GNU wget 1.25.0:
  * New testcase for pathconf truncation
  * Fix libproxy build with --disable-debug
  * [BREAKING CHANGE] Support continious reading from stdin pipes
  * Properly re-implement userinfo parsing (rfc2396)
  * init: fix -Warray-bounds in setval_internal_tilde
  * Fix build error on MingW with `G_GETFL` and `F_SETFL` flags
  * Fix returning uninitialized variable
  * Fix a static analysis false positive
  * [BREAKING CHANGE] Fix CVE-2024-10524 (drop support for shorthand URLs)
    (bsc#1233256)
- Remove committed patches
  * properly-re-implement-userinfo-parsing.patch
- Renumber patches</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753444800">- adjust gpgme (and other) build dependencies for future-proofing
- drop unused build dependency</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1783598400">- Fix buffer underflow in clean_metalink_link
  [bsc#1271033, CVE-2026-58469]
  * CVE-2026-58469.patch
- Fix integer overflow in parse_content_range
  [bsc#1271034, CVE-2026-58470]
  * CVE-2026-58470.patch
- Fix buffer size handling in filename conversion
  [bsc#1271035, CVE-2026-58471]
  * CVE-2026-58471.patch
- Fix integer+buffer overflow in html_quote_string
  [bsc#1271036, CVE-2026-58472]
  * CVE-2026-58472.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">- ftp validate PASV/LPSV response address against control connection peer
  [bsc#1271320, CVE-2026-15146]
  * CVE-2026-15146.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784721600">- Fix metalink regression from CVE-2026-58469 fix
  See: commit 7b1cdecc49bc77bde220fc575c8a00386c3f3bcf from
  https://gitlab.com/gnuwget/wget
  [bsc#1272219, CVE-2026-58469]
  * CVE-2026-58469.patch</changelog>
</package>
<package pkgid="889c1541f8cd35ffd757df3cb9c2e80a7d018b00391e7a96717b111544145b61c1c6bb51bd4c59e5486559d5a1d322bd21612883aa18bdbfb960f05c87fcfead" name="wget-lang" arch="noarch">
  <version epoch="0" ver="1.25.0" rel="176.4"/>
  <changelog author="Andreas Stieger &lt;Andreas.Stieger@gmx.de&gt;" date="1684238400">- GNU wget 1.21.4:
  * Document --retry-on-host-error in help text
  * Increase read buffer size to 64k.
    This should speed up downloads on gigabit and faster connections
  * Update deprecated option '--html-extension' to
    '--adjust-extension' in documentation</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1686571200">- Update wget-libproxy.patch: ensure to properly use libproxy
  cflags from pkg-config. Fixes build against libproxy 0.5.</changelog>
  <changelog author="Dominique Leuenberger &lt;dimstar@opensuse.org&gt;" date="1708430400">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1710072000">- GNU wget 1.24.5:
  * Fix how subdomain matches are checked for HSTS.
  * Wget will now also parse the srcset attribute in &lt;source&gt; HTML
    tags
  * Support reading fetchmail style "user" and "passwd" fields from
    netrc
  * In some cases, prevent the confusing "Cannot write to...
    (success)" error messages
  * Support extremely fast download speeds (TB/s)
  * Ensure that CSS URLs are corectly quoted
  * libproxy support is now upstream- drop wget-libproxy.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1718712000">- Fix mishandled semicolons in the userinfo subcomponent could lead to an
  insecure behavior in which data that was supposed to be in the userinfo
  subcomponent is misinterpreted to be part of the host subcomponent.
  [bsc#1226419, CVE-2024-38428, properly-re-implement-userinfo-parsing.patch]</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1726056000">- Update wget.keyring: use release-team keyring
- Don't reference source URL when the linked sources change over time</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1731412800">- GNU wget 1.25.0:
  * New testcase for pathconf truncation
  * Fix libproxy build with --disable-debug
  * [BREAKING CHANGE] Support continious reading from stdin pipes
  * Properly re-implement userinfo parsing (rfc2396)
  * init: fix -Warray-bounds in setval_internal_tilde
  * Fix build error on MingW with `G_GETFL` and `F_SETFL` flags
  * Fix returning uninitialized variable
  * Fix a static analysis false positive
  * [BREAKING CHANGE] Fix CVE-2024-10524 (drop support for shorthand URLs)
    (bsc#1233256)
- Remove committed patches
  * properly-re-implement-userinfo-parsing.patch
- Renumber patches</changelog>
  <changelog author="Andreas Stieger &lt;andreas.stieger@gmx.de&gt;" date="1753444800">- adjust gpgme (and other) build dependencies for future-proofing
- drop unused build dependency</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1783598400">- Fix buffer underflow in clean_metalink_link
  [bsc#1271033, CVE-2026-58469]
  * CVE-2026-58469.patch
- Fix integer overflow in parse_content_range
  [bsc#1271034, CVE-2026-58470]
  * CVE-2026-58470.patch
- Fix buffer size handling in filename conversion
  [bsc#1271035, CVE-2026-58471]
  * CVE-2026-58471.patch
- Fix integer+buffer overflow in html_quote_string
  [bsc#1271036, CVE-2026-58472]
  * CVE-2026-58472.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784116800">- ftp validate PASV/LPSV response address against control connection peer
  [bsc#1271320, CVE-2026-15146]
  * CVE-2026-15146.patch</changelog>
  <changelog author="Valentin Lefebvre &lt;valentin.lefebvre@suse.com&gt;" date="1784721600">- Fix metalink regression from CVE-2026-58469 fix
  See: commit 7b1cdecc49bc77bde220fc575c8a00386c3f3bcf from
  https://gitlab.com/gnuwget/wget
  [bsc#1272219, CVE-2026-58469]
  * CVE-2026-58469.patch</changelog>
</package>
</otherdata>