[ubuntu/lucid-updates] wget 1.12-1.1ubuntu2.2 (Accepted)

Thu Oct 30 17:59:15 UTC 2014

wget (1.12-1.1ubuntu2.2) lucid-security; urgency=medium

  * SECURITY UPDATE: remote code execution via absolute path traversal
    vulnerability in FTP
    - debian/patches/CVE-2014-4877.dpatch: don't create local symlinks in
      src/init.c, check for duplicate file nodes in src/ftp.c, updated
      documentation in doc/wget.texi.
    - CVE-2014-4877

Date: 2014-10-30 14:19:18.140357+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/lucid/+source/wget/1.12-1.1ubuntu2.2
-------------- next part --------------
Sorry, changesfile not available.