Описание
Security update for wget
This update for wget fixes the following issues:
Security issue fixed:
- CVE-2017-6508: (url_parse): Reject control characters in host part of URL (bsc#1028301).
This update was imported from the SUSE:SLE-12:Update update project.
Список пакетов
openSUSE Leap 42.1
wget-1.14-8.3.1
openSUSE Leap 42.2
wget-1.14-8.3.1
Ссылки
- E-Mail link for openSUSE-SU-2017:0890-1
- SUSE Security Ratings
Описание
CRLF injection vulnerability in the url_parse function in url.c in Wget through 1.19.1 allows remote attackers to inject arbitrary HTTP headers via CRLF sequences in the host subcomponent of a URL.
Затронутые продукты
openSUSE Leap 42.1:wget-1.14-8.3.1
openSUSE Leap 42.2:wget-1.14-8.3.1
Ссылки
- CVE-2017-6508
- SUSE Bug 1028301
- SUSE Bug 1159418