[ubuntu/maverick] wget 1.12-1.1ubuntu3 (Accepted)
Marc Deslauriers
marc.deslauriers at ubuntu.com
Fri Sep 3 14:25:25 BST 2010
wget (1.12-1.1ubuntu3) maverick; urgency=low
* SECURITY UPDATE: arbitrary file overwrite via 3xx redirect
- debian/patches/CVE-2010-2252.dpatch: don't use server names in
doc/wget.texi, src/{http.*,init.c,main.c,options.h,retr.c}.
- This update changes previous behaviour by ignoring the filename
supplied by the server during redirects. To re-enable previous
behaviour, see the new --trust-server-names option.
- CVE-2010-2252
Date: Fri, 03 Sep 2010 09:19:11 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Core developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/maverick/+source/wget/1.12-1.1ubuntu3
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 03 Sep 2010 09:19:11 -0400
Source: wget
Binary: wget wget-udeb
Architecture: source
Version: 1.12-1.1ubuntu3
Distribution: maverick
Urgency: low
Maintainer: Ubuntu Core developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description:
wget - retrieves files from the web
wget-udeb - retrieves files from the web (udeb)
Changes:
wget (1.12-1.1ubuntu3) maverick; urgency=low
.
* SECURITY UPDATE: arbitrary file overwrite via 3xx redirect
- debian/patches/CVE-2010-2252.dpatch: don't use server names in
doc/wget.texi, src/{http.*,init.c,main.c,options.h,retr.c}.
- This update changes previous behaviour by ignoring the filename
supplied by the server during redirects. To re-enable previous
behaviour, see the new --trust-server-names option.
- CVE-2010-2252
Checksums-Sha1:
8a3ee7288a148a8b326b14cc26f193aa4ab1bf4e 1152 wget_1.12-1.1ubuntu3.dsc
c06d02edec3b08e7003cc29be0a1b09612bb2f4e 41146 wget_1.12-1.1ubuntu3.diff.gz
Checksums-Sha256:
7379b91c9457c9fb611251a721fcc7c70967058264176c4efb516f8b0ac0ab21 1152 wget_1.12-1.1ubuntu3.dsc
a275277e57a1e9e94de5cc430a9d1e175e94ef004d9a66da972a491383b37092 41146 wget_1.12-1.1ubuntu3.diff.gz
Files:
d26f81db875f0d9030e571414ff528cc 1152 web important wget_1.12-1.1ubuntu3.dsc
affd7dddb8d0778e284837e94b76393a 41146 web important wget_1.12-1.1ubuntu3.diff.gz
Original-Maintainer: Noèl Köthe <noel at debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
iEYEARECAAYFAkyA9ocACgkQLMAs/0C4zNqfRwCfehluMAp/Fv92ad+WhWdRJ9b2
lU8AnRAqa3Tw6oNpxkY2lNdUmVxKaIfa
=iVH6
-----END PGP SIGNATURE-----
More information about the Maverick-changes
mailing list