Описание
Security update for wget
This update for wget fixes the following issues:
Security issue fixed:
- CVE-2017-6508: (url_parse): Reject control characters in host part of URL (bsc#1028301).
Список пакетов
SUSE Linux Enterprise Server 11 SP4
wget-1.11.4-1.40.1
SUSE Linux Enterprise Server 11-SECURITY
wget-openssl1-1.11.4-1.40.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
wget-1.11.4-1.40.1
Ссылки
- Link for SUSE-SU-2017:0799-1
- E-Mail link for SUSE-SU-2017:0799-1
- SUSE Security Ratings
- SUSE Bug 1028301
- SUSE CVE CVE-2017-6508 page
Описание
CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:wget-1.11.4-1.40.1
SUSE Linux Enterprise Server 11-SECURITY:wget-openssl1-1.11.4-1.40.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:wget-1.11.4-1.40.1
Ссылки
- CVE-2017-6508
- SUSE Bug 1028301
- SUSE Bug 1159418