libwww 5.4.2 release

This a security release for libwww to take into account security advisories CVE-2016-9063 and CVE-2017-9233.

In order to take into account current and future expat security advisories, the expat source code was removed from the libwww tree. The makefiles were modified so that libwww dynamically links against the system's expat library.

libwww 5.4.1 release

This was the last release of libwww, but it never get packaged. I updated the autoconf tools and expat to do so. The code is the same as it was at the time of the last development for 5.4.1.

You can also find the packaged tar and zip files for this release as well as older ones at https://www.w3.org/Library/Distribution/ . Installation, bootstraping, changelogs, and additional information is available from https://www.w3.org/Library/

This version compiles and runs well under Debian jessie. It wasn't tested under Windows or other flavors of linux.

Note that there is a potential security issue with the cache and its use of libc's "tempnam" function. This is a known issue of libc and requires changes in libwww's code to use mkstemp or a similar function instead.

libwww is not maintained anymore by W3C. It was donated to the community around 2004.

Enjoy.