Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:0425-1

Опубликовано: 11 фев. 2025
Источник: suse-cvrf

Описание

Security update for wget

This update for wget fixes the following issues:

  • CVE-2021-31879: Authorization header disclosed upon redirects to different origins. (bsc#1185551)

Список пакетов

Container containers/pytorch:2-nvidia
wget-1.20.3-150600.19.12.1
Container containers/pytorch:2.5.0
wget-1.20.3-150600.19.12.1
Image SLES15-SP6
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-BYOS
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-BYOS-GCE
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-CHOST-BYOS
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-CHOST-BYOS-Azure
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-CHOST-BYOS-EC2
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-CHOST-BYOS-GCE
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-CHOST-BYOS-GDC
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-GCE
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-Hardened-BYOS
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-Hardened-BYOS-GCE
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-SAP-BYOS
wget-1.20.3-150600.19.12.1
Image SLES15-SP6-SAP-BYOS-GCE
wget-1.20.3-150600.19.12.1
Image ai_15_6
wget-1.20.3-150600.19.12.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
wget-1.20.3-150600.19.12.1
openSUSE Leap 15.6
wget-1.20.3-150600.19.12.1
wget-lang-1.20.3-150600.19.12.1

Описание

GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007.


Затронутые продукты
Container containers/pytorch:2-nvidia:wget-1.20.3-150600.19.12.1
Container containers/pytorch:2.5.0:wget-1.20.3-150600.19.12.1
Image SLES15-SP6-BYOS-GCE:wget-1.20.3-150600.19.12.1
Image SLES15-SP6-BYOS:wget-1.20.3-150600.19.12.1

Ссылки