1Debian's w3m 0.5.3+git20210102
2
3* new features
4  - support links containing divs for HTML5
5  - rudimentary support for HTML5 tags: figure, figcaption, and section
6  - enhance the behaviour of the q tag when m17n and Unicode are configured
7  - support for file://hostname/... URLs
8  - new commands CURSOR_TOP, CURSOR_MIDDLE, and CURSOR_BOTTOM
9  - new option space_autocomplete, disabled by default
10* bug fixes
11  - fix and improve broken Gopher support, enabled by default
12  - change the encoding of the Japanese document files to UTF-8
13  - use the default ciphers without SSL_CTX_set_cipher_list for OpenSSL 1.1
14  - fix compilation errors due to sys_errlist and longjmp
15  - define X_DISPLAY_MISSING when configure --without-x for Imlib2
16  - avoid the -l option of the man command for w3mman
17  - fix some source formatting in the manual
18  - show keyboard shortcuts in a consistent order in help
19  - fix traditional Chinese translation
20  - drop obsolete w3m-doc
21
22Debian's w3m 0.5.3+git20200502
23
24* bug fixes
25  - support ' entity
26  - prevent multiple User-Agent with -header
27  - fix -Wchar-subscripts
28* new features
29  - support setting user_agent in siteconf
30  - new command GOTO_HOME
31  - extend ssl_forbid_method for TLSv1.2 and TLSv1.3
32
33Debian's w3m 0.5.3+git20190105
34
35* bug fixes
36  - do not use deprecated features with OpenSSL 1.1
37  - fix dependency for Imlib2
38  - fix that the mark_all_pages option works
39  - respect the simple_preserve_space option for table cells
40  - fix error handling for ~/.w3m/request.log and localcgi_post()
41* new feature
42  - w3mman supports specifying a section number during a keyword search
43
44Debian's w3m 0.5.3+git20180125
45
46* bug fixes
47  - fix stack overflow with malformed text [CVE-2018-6196]
48  - fix null deref with malformed text [CVE-2018-6197]
49  - fix /tmp file races only when ~/.w3m is unwritable [CVE-2018-6198]
50  - do not remove w3mdict.cgi when "make distclean"
51  - do not turn a form's GET into POST
52  - correct <base ...> parsing
53  - accept TERM=fbterm
54* new feature
55  - extend ssl_forbid_method to disable TLSv1.1
56
57Debian's w3m 0.5.3+git20170102
58
59* bug fixes
60  - fix multiple flaws with malformed text
61    (buffer overflow, use after free, infinite loop)
62  - fix uninitialized variable when not USE_IMAGE
63
64Debian's w3m 0.5.3+git20161120
65
66* bug fixes
67  - fix multiple flaws with malformed text
68    (stack overflow, buffer overflow, null deref, out of memory)
69    [CVE-2016-9622], [CVE-2016-9623], [CVE-2016-9624], [CVE-2016-9625],
70    [CVE-2016-9626], [CVE-2016-9627], [CVE-2016-9628], [CVE-2016-9629],
71    [CVE-2016-9630], [CVE-2016-9631], [CVE-2016-9632], [CVE-2016-9633]
72  - fix stack overflow with nested table and textarea [CVE-2016-9439]
73  - fix suspend (^Z) behavior
74
75Debian's w3m 0.5.3+git20161031
76
77* new features
78  - support OSC 5379 remote imaging and sixel graphics
79  - support SGR style mouse handler
80  - support 32-bit color images
81  - support FreeBSD framebuffer
82  - support button element
83  - support meta charset
84  - include w3mdict.cgi to use a dictd dictionary query
85  - add extbrowser4..9
86  - add display_borders to display 0 pixel table borders
87  - add siteconf feature
88  - add German translation for options setting panel
89  - add translations for de, zh_CN and zh_TW
90* bug fixes
91  - fix multiple flaws with malformed text
92    [CVE-2016-9422], [CVE-2016-9423], [CVE-2016-9424], [CVE-2016-9425],
93    [CVE-2016-9426], [CVE-2016-9428], [CVE-2016-9429], [CVE-2016-9430],
94    [CVE-2016-9431], [CVE-2016-9432], [CVE-2016-9433], [CVE-2016-9434],
95    [CVE-2016-9435], [CVE-2016-9436], [CVE-2016-9437], [CVE-2016-9438],
96    [CVE-2016-9440], [CVE-2016-9441], [CVE-2016-9443], [CVE-2016-9621]
97  - fix potential heap buffer corruption due to Strgrow [CVE-2016-9442]
98  - disable SSLv2 and SSLv3 by default [CVE-2014-3566]
99  - set ssl_verify_server to 1 by default
100  - disable RC4, export ciphers, and keys < 128 bits
101  - use SSL_OP_NO_COMPRESSION due to "CRIME attack" [CVE-2012-4929]
102  - use SSL_MODE_RELEASE_BUFFERS
103  - disable USE_EGD for LibreSSL
104  - appease gcc -Werror=format-security
105  - option -s is now "squeeze multiple blank lines" to work as pager, and
106    -j and -e are obsolete, so use -O{s|j|e} to specify display charset
107  - accept single quoted meta refresh URL
108  - assume "text" if a form input type is unknown
109  - accept cookies by default
110  - set use_dictcommand to 1 by default
111  - set default_url to 1 by default
112  - set argv_is_url to 1 by default
113  - set alt_entity to 0 by default
114  - fix build problems with Boehm GC 7.2, imlib2 1.4.6 and glibc 2.14
115  - fix parallel make failure
116  - fix incorrect ucs_ambwidth_map
117  - and many fixes
118
119w3m 0.5.3 - 2011-01-15
120
121* security fix
122 - fix vulnerabilities indicated by bugs.debian.org.
123 - suppress sending Referer, if https:// -> http://
124* new features
125 - adapt w3mimg to native windows on MS Windows.
126 - support xterm-incompatible terminals without gpm.
127 - add "xhtml" to default guess.
128 - introduce option pseudo_inlines.
129 - add option to avoid "wrong number of dots" error in cookies.
130* other bug fixes
131 - fix "important" bugs from bugs.debian.org
132 - preserve spaces in multibyte context.
133 - fix proxy authentication.
134
135w3m 0.5.2 - 2007-05-31
136
137* security fix
138 - fix format string vulnerability.
139* new features
140 - support gtk2 with w3m-img.
141 - new option for LiveHTTPHeaders-like logs.
142 - new option to fontify <del>, <s>, <ins>, and so on.
143* other bug fixes
144 - avoid errors in "configure" and "make".
145 - '\n' handling in attributes' values of HTML tags.
146
147w3m 0.5.1 - 2004-04-29
148
149* fix minor bugs
150 - build problem on some platform/some configuration
151 - authentication bug
152 - ipv6 FQDN resolv
153 - SSL verify
154 - search problem on different charset page/display
155 - cleanup LANG==JA
156 - DisplayCharset default
157 - w3mhelp.cgi charset
158
159w3m 0.5	- 2004-03-22
160
161* gettextize
162* m17n patch merged
163
164w3m 0.4.2 - 2003-09-23
165
166* options: -4, -6
167* configuration file in $(sysconfdir)/$(package)/
168* func: NEXT_VISITED, PREV_VISITED
169* autoconfiscate (partially)
170* rc: use_history
171
172w3m 0.4.1 - 2003-03-07
173
174* fix bugs
175  - completion segfault in lineinput
176  - incremental search
177  - URL pattern fix
178  - UFhalfclose bug
179  - allow pipe in shell command
180  - enhance ftp directory support
181  - linenumber in edit
182  - fix Bug#181897
183  - W3M_TTY problem fixed
184
185w3m 0.4 - 2003-02-24
186
187* rc: decode_url
188* func: RESHAPE
189* rc: fold_line
190* local cookie: passed via file named $LOCAL_COOKIE or posted not in url query
191* func: SEARCH can take arg
192* URL data: support
193* URL news:, nntp: newsgroup support
194* rc: nntpserver, nntpmode, max_news
195* rc: graphic_char
196* rc: use_proxy
197* rc: preserve_timestamp
198* func: REDO, UNDO
199* func: LIST, LIST_MENU, MOVE_LIST_MENU
200* func: ACCESSKEY, LINK_MENU
201* rc: display_ins_del
202* 2 stroke keybinding
203* func: MULTIMAP
204* func: CLOSE_TAB_MOUSE, MENU_MOUSE, MOVE_MOUSE, TAB_MOUSE
205* options: -N
206* func: NEXT, PREV
207* rc: image_map_list
208* rc: open_tab_dl_list
209* func: DOWNLOAD_LIST
210* env: https_proxy
211* rc: https_proxy
212* options: -show-option
213* rc: relative_wheel_scroll
214* rc: relative_wheel_scroll_ratio
215* rc: fixed_wheel_scroll_count
216* separate auxbindir and libdir (local-CGI, file:///$LIB/)
217* configure: -auxbindir
218* rc: disable_secret_security_check (for windows?)
219* tab browsing
220* rc: open_tab_blank, close_tab_back
221* func: CLOSE_TAB, NEW_TAB, NEXT_TAB, PREV_TAB,
222* func:	TAB_GOTO, TAB_GOTO_RELATIVE
223* func: TAB_LEFT, TAB_LINK, TAB_MENU, TAB_RIGHT
224* pre_form: ~/.w3m/pre_form
225* rc: pre_form_file: pre_form configuration file
226
227----------------------------------------------------------------
228
229w3m 0.3.2.2 - 2002-12-06
230
231* security fix: html_quote for img alt attributes
232
233----------------------------------------------------------------
234
235w3m 0.3.2.1 - 2002-11-27
236
237* security fix: html_quote for frame contents
238* backport from w3m 0.3.2+cvs
239 - fix segmentation fault by large complex table.
240	[w3m-dev 03371][w3m-dev 03438]
241
242----------------------------------------------------------------
243w3m 0.3.2 - 2002-11-05
244
245* ~/.netrc: password for ftp
246* rc: display_lineinfo: display current line number
247* rc: passwd_file: passwd file for HTTP auth
248* func: MARK_WORD
249* rc: imgsize: obsoleted
250* w3m-img for framebuffer merged
251
252----------------------------------------------------------------
253w3m 0.3.1 - 2002-07-16
254
255* func: REINIT
256	INIT_MAILCAP deleted, use REINIT MAILCAP instead
257* func: DEFINE_KEY
258* rc: keymap_file
259* rc: use_dictcommand, dictcommand
260* rc: mark_all_pages
261* configure: -mandir
262* func: COMMAND
263* -title option: set buffer name to terminal title
264* X-Face support: USE_XFACE, require uncompface
265
266----------------------------------------------------------------
267w3m 0.3 - 2002-03-06
268
269* rc: mailer
270	if mailer is set, it will be used for simple mailto: URLs
271	otherwise, w3mmail.cgi will be used (when USE_W3MMAILER defined)
272* rc: max_load_image
273* rc: display_image, auto_image, image_scale, imgdisplay, imgsize
274* func: DISPLAY_IMAGE, STOP_IMAGE
275* w3m-img merged: w3m now can display images! see doc/README.img
276
277----------------------------------------------------------------
278w3m 0.2.5.1 - 2002-02-05
279
280* backport from w3m/0.2.5+cvs-1.299
281 - fix inputAnswer() and no "ssl_forbid_method" [w3m-dev 02985]
282 - fix SunOS 4.1.4 build problem [w3m-dev 02972]
283 - fix problem with Netscape-Enterprise WWW-authenticate [w3m-dev 02968]
284
285----------------------------------------------------------------
286w3m 0.2.5 - 2002-01-31
287
288* RFC2617: HTTP Digest authentication
289* rc: default_url=0(empty) 1(current URL) 2(link URL)
290* GOTO_RELATIVE (M-u)
291* highlight for incremental search
292* support migemo (romaji search)
293* use w3mmail.cgi for mailto: URL
294* support external URI loader
295* support -dump_extra ftp://
296* new regex implementation
297
298----------------------------------------------------------------
299w3m 0.2.4 - 2002-01-07
300
301* RFC2818 server identity check
302* incremental search (C-s, C-r)
303
304----------------------------------------------------------------
305w3m 0.2.3.2 - 2001-12-22
306
307* fix security hole in w3m/scripts
308
309----------------------------------------------------------------
310w3m 0.2.3.1 - 2001-12-20
311
312* sync with cvs repository
313* fix bug in configure
314
315----------------------------------------------------------------
316w3m 0.2.3 - 2001-12-20
317
318* command line option: -help, -version
319* new libgc included
320* new runtime option use_mark, nextpage_topline, label_topline, vi_prec_num
321   emacs_like_lineedit, ftppass_hostnamegen
322* RFC2732 support (IPv6)
323* new w3mhelp system
324* several configure changes
325* code cleanups, now gcc -Wall -Werror safe
326
327----------------------------------------------------------------
328w3m 0.2.2 - 2001-11-15
329
330* sync with w3m 0.2.1-inu-1.5
331* w3m maintained in sourceforge.net/projects/w3m
332
333