[ubuntu/precise-updates] wget 1.13.4-2ubuntu1.2 (Accepted)
Ubuntu Archive Robot
cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk
Thu Oct 30 17:59:17 UTC 2014
wget (1.13.4-2ubuntu1.2) precise-security; urgency=medium
* SECURITY UPDATE: remote code execution via absolute path traversal
vulnerability in FTP
- debian/patches/CVE-2014-4877.patch: don't create local symlinks in
src/init.c, check for duplicate file nodes in src/ftp.c, updated
documentation in doc/wget.texi.
- CVE-2014-4877
Date: 2014-10-30 14:20:26.261131+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/precise/+source/wget/1.13.4-2ubuntu1.2
-------------- next part --------------
Sorry, changesfile not available.
More information about the Precise-changes
mailing list