Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0380-1

Опубликовано: 06 фев. 2025
Источник: suse-cvrf

Описание

Security update for wget

This update for wget fixes the following issues:

  • CVE-2021-31879: Authorization header disclosed upon redirects to different origins. (bsc#1185551)

Список пакетов

Image SLES12-SP5-EC2-BYOS
wget-1.14-21.22.1
Image SLES12-SP5-EC2-On-Demand
wget-1.14-21.22.1
Image SLES12-SP5-EC2-SAP-BYOS
wget-1.14-21.22.1
Image SLES12-SP5-EC2-SAP-On-Demand
wget-1.14-21.22.1
Image SLES12-SP5-SAP-Azure-LI-BYOS-Production
wget-1.14-21.22.1
Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production
wget-1.14-21.22.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
wget-1.14-21.22.1

Ссылки

Описание

GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.

Затронутые продукты
Image SLES12-SP5-EC2-BYOS:wget-1.14-21.22.1
Image SLES12-SP5-EC2-On-Demand:wget-1.14-21.22.1
Image SLES12-SP5-EC2-SAP-BYOS:wget-1.14-21.22.1
Image SLES12-SP5-EC2-SAP-On-Demand:wget-1.14-21.22.1
Ссылки