Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:1367-1

Опубликовано: 22 мая 2018
Источник: suse-cvrf

Описание

Security update for wget

This update for wget fixes the following issues:

  • CVE-2018-0494: Fixed Cookie injection vulnerability by checking for and joining continuation lines. (bsc#1092061)

Список пакетов

SUSE Linux Enterprise Server 11 SP4
wget-1.11.4-1.41.3.1
SUSE Linux Enterprise Server 11-SECURITY
wget-openssl1-1.11.4-1.41.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4
wget-1.11.4-1.41.3.1

Ссылки

Описание

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

Затронутые продукты
SUSE Linux Enterprise Server 11 SP4:wget-1.11.4-1.41.3.1
SUSE Linux Enterprise Server 11-SECURITY:wget-openssl1-1.11.4-1.41.3.1
SUSE Linux Enterprise Server for SAP Applications 11 SP4:wget-1.11.4-1.41.3.1
Ссылки