wget-1.21 released [stable]

[Darshit Shah]

We are pleased to announce the release of GNU Wget 1.21.

GNU Wget is a free utility for non-interactive download of files from
the  Web. It supports HTTP(S), and FTP(S) protocols, as well as
retrieval through HTTP proxies.

This is a small release with some bug fixes and a few quality of life
improvements.

On behalf of everyone contributing to GNU Wget, I wish everyone a happy
new year. May it be better than 2020!

Many thanks to everyone who contributed to this release:

Ander Juaristi
Artem Egorenkov
AviSoomirtee
Bruno Haible
Darshit Shah
Eneas U de Queiroz
Frans de Boer
Gisle Vanem
Jens Schleusener
Jim Cathey
JunDong Xie
Lauri Nurmi
Leif Ryge
raminfp
Steven M. Schweda
sulfastor
Swapnil More
Tim Rühsen
Tomas Hozza
Vyacheslav
Вячеслав Петрищев

=======================================================================

Here are the compressed sources:
  https://ftp.gnu.org/gnu/wget/wget-1.21.tar.gz   (4.7MB)
  https://ftp.gnu.org/gnu/wget/wget-1.21.tar.lz   (2.3MB)

Here are the GPG detached signatures[*]:
  https://ftp.gnu.org/gnu/wget/wget-1.21.tar.gz.sig
  https://ftp.gnu.org/gnu/wget/wget-1.21.tar.lz.sig

Use a mirror for higher download bandwidth:
  https://www.gnu.org/order/ftp.html

Here are the MD5 and SHA1 checksums:

3852118b7a771a7c9c0388883c8f5dbf  wget-1.21.tar.gz
c10e69697250635fa2275ed0ab4e9439  wget-1.21.tar.lz
267451bb8de36cc7ac9c7c0403b2dce8854c1d97  wget-1.21.tar.gz
07fc9a34a76c91d377a2594dbb61ba83cebab9ad  wget-1.21.tar.lz

[*] Use a .sig file to verify that the corresponding file (without the
.sig suffix) is intact.  First, be sure to download both the .sig file
and the corresponding tarball.  Then, run a command like this:

  gpg --verify wget-1.21.tar.gz.sig

If that command fails because you don't have the required public key,
then run this command to import it:

  gpg --keyserver keys.gnupg.net --recv-keys darnir@gnu.org

and rerun the 'gpg --verify' command.

This release was bootstrapped with the following tools:
  Autoconf 2.70
  Automake 1.16.2
  Gnulib v0.1-4251-g43ee1a6bf


NEWS

* Changes in Wget 1.21

** Improve the number of translated strings

** Remove all uses of alloca
   In some places the length of untrusted strings has been used, e.g.
   strings from the command line or from remote.

** Fix buffer overflows in progress bar code in some locales

** Fix two null pointer accesses

** Amend cookie file header to be recognized by the 'file' command

** Post Handshake Authentication for OpenSSL

** Require gettext version 0.19.3+

** Add configure flags --enable-fsanitize-ubsan, --enable-fsanitize-asan
   and --enable-fsanitize-msan for gcc and clang

** Make several smaller fixes, enhance fuzzing, enhance building

On Behalf of the Maintainers,
Darshit Shah