[ubuntu/jaunty-security] wget_1.11.4-2ubuntu1.2_hppa_translations.tar.gz, wget_1.11.4-2ubuntu1.2_powerpc_translations.tar.gz, wget_1.11.4-2ubuntu1.2_i386_translations.tar.gz, wget_1.11.4-2ubuntu1.2_ia64_translations.tar.gz, wget_1.11.4-2ubuntu1.2_lpia_translations.tar.gz, wget_1.11.4-2ubuntu1.2_amd64_translations.tar.gz, wget, wget_1.11.4-2ubuntu1.2_armel_translations.tar.gz, wget_1.11.4-2ubuntu1.2_sparc_translations.tar.gz (delayed) 1.11.4-2ubuntu1.2 (Accepted)

[Ubuntu Installer]

wget (1.11.4-2ubuntu1.2) jaunty-security; urgency=low

  * SECURITY UPDATE: arbitrary file overwrite via 3xx redirect
    - debian/patches/CVE-2010-2252.dpatch: don't use server names in
      doc/wget.texi, src/{http.*,init.c,main.c,options.h,retr.c}.
    - This update changes previous behaviour by ignoring the filename
      supplied by the server during redirects. To re-enable previous
      behaviour, see the new --trust-server-names option.
    - CVE-2010-2252

Date: Wed, 01 Sep 2010 11:01:02 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Core developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/jaunty/+source/wget/1.11.4-2ubuntu1.2
-------------- next part --------------
Format: 1.8
Date: Wed, 01 Sep 2010 11:01:02 -0400
Source: wget
Binary: wget wget-udeb
Architecture: source
Version: 1.11.4-2ubuntu1.2
Distribution: jaunty-security
Urgency: low
Maintainer: Ubuntu Core developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 wget       - retrieves files from the web
 wget-udeb  - retrieves files from the web (udeb)
Changes: 
 wget (1.11.4-2ubuntu1.2) jaunty-security; urgency=low
 .
   * SECURITY UPDATE: arbitrary file overwrite via 3xx redirect
     - debian/patches/CVE-2010-2252.dpatch: don't use server names in
       doc/wget.texi, src/{http.*,init.c,main.c,options.h,retr.c}.
     - This update changes previous behaviour by ignoring the filename
       supplied by the server during redirects. To re-enable previous
       behaviour, see the new --trust-server-names option.
     - CVE-2010-2252
Checksums-Sha1: 
 ea0cd3e0571a1279a51d7965f4e043d4305e35a6 1163 wget_1.11.4-2ubuntu1.2.dsc
 01773bee67a7ba51e897fe054d4842dbcf955ae8 20472 wget_1.11.4-2ubuntu1.2.diff.gz
Checksums-Sha256: 
 37b5b4f0af34518a1441a56a22c44b30d1db155558b65724c9d09907e3487bbd 1163 wget_1.11.4-2ubuntu1.2.dsc
 1a52bbac72f29ae8acb7c96a98bb079ffcd829c8b3e3bc352fa52e25c179726a 20472 wget_1.11.4-2ubuntu1.2.diff.gz
Files: 
 46bf0822cb7b2f7e1780e6d55518c5b5 1163 web important wget_1.11.4-2ubuntu1.2.dsc
 2fe3cb90188edccb119d695b252c52ec 20472 web important wget_1.11.4-2ubuntu1.2.diff.gz
Original-Maintainer: Noèl Köthe <noel at debian.org>