Описание
Security update for wget
This update for wget fixes the following issues:
- CVE-2024-10524: Dropped support for shorthand URLs that enabled SSRF attacks (bsc#1233773).
Список пакетов
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
wget-1.14-21.25.1
Ссылки
- Link for SUSE-SU-2025:01921-1
- E-Mail link for SUSE-SU-2025:01921-1
- SUSE Security Ratings
- SUSE Bug 1233773
- SUSE CVE CVE-2024-10524 page
Описание
Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host.
Затронутые продукты
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5:wget-1.14-21.25.1
Ссылки
- CVE-2024-10524
- SUSE Bug 1233256
- SUSE Bug 1233773