We are pleased to announce the release of GNU Wget 1.21. GNU Wget is a free utility for non-interactive download of files from the Web. It supports HTTP(S), and FTP(S) protocols, as well as retrieval through HTTP proxies.
This is a small release with some bug fixes and a few quality of life improvements. On behalf of everyone contributing to GNU Wget, I wish everyone a happy new year. May it be better than 2020! Many thanks to everyone who contributed to this release: Ander Juaristi Artem Egorenkov AviSoomirtee Bruno Haible Darshit Shah Eneas U de Queiroz Frans de Boer Gisle Vanem Jens Schleusener Jim Cathey JunDong Xie Lauri Nurmi Leif Ryge raminfp Steven M. Schweda sulfastor Swapnil More Tim Rühsen Tomas Hozza Vyacheslav Вячеслав Петрищев ======================================================================= Here are the compressed sources: https://ftp.gnu.org/gnu/wget/wget-1.21.tar.gz (4.7MB) https://ftp.gnu.org/gnu/wget/wget-1.21.tar.lz (2.3MB) Here are the GPG detached signatures[*]: https://ftp.gnu.org/gnu/wget/wget-1.21.tar.gz.sig https://ftp.gnu.org/gnu/wget/wget-1.21.tar.lz.sig Use a mirror for higher download bandwidth: https://www.gnu.org/order/ftp.html Here are the MD5 and SHA1 checksums: 3852118b7a771a7c9c0388883c8f5dbf wget-1.21.tar.gz c10e69697250635fa2275ed0ab4e9439 wget-1.21.tar.lz 267451bb8de36cc7ac9c7c0403b2dce8854c1d97 wget-1.21.tar.gz 07fc9a34a76c91d377a2594dbb61ba83cebab9ad wget-1.21.tar.lz [*] Use a .sig file to verify that the corresponding file (without the .sig suffix) is intact. First, be sure to download both the .sig file and the corresponding tarball. Then, run a command like this: gpg --verify wget-1.21.tar.gz.sig If that command fails because you don't have the required public key, then run this command to import it: gpg --keyserver keys.gnupg.net --recv-keys dar...@gnu.org and rerun the 'gpg --verify' command. This release was bootstrapped with the following tools: Autoconf 2.70 Automake 1.16.2 Gnulib v0.1-4251-g43ee1a6bf NEWS * Changes in Wget 1.21 ** Improve the number of translated strings ** Remove all uses of alloca In some places the length of untrusted strings has been used, e.g. strings from the command line or from remote. ** Fix buffer overflows in progress bar code in some locales ** Fix two null pointer accesses ** Amend cookie file header to be recognized by the 'file' command ** Post Handshake Authentication for OpenSSL ** Require gettext version 0.19.3+ ** Add configure flags --enable-fsanitize-ubsan, --enable-fsanitize-asan and --enable-fsanitize-msan for gcc and clang ** Make several smaller fixes, enhance fuzzing, enhance building On Behalf of the Maintainers, Darshit Shah