Security bugs are reported here via bugzilla

[Seth Alan Woolley <seth AT positivism.org>]

2004-12-10 Seth Woolley <seth AT tautology.org>
        * DETAILS: UPDATED updated
        * BUILD: added to patch wget-filter-control.patch SECURITY FIX
        * SECURITY: added warning to not use wget in bad ways

>> SECURITY file contents:
Please note that due to the poorly written nature of wget, use of wget 
especially with -x and -r can be risky.

See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755

We have applied the control character patch and development versions of 
sorcery avoid the other vulnerabilities listed.

Hope is that shortly the upstream author of wget will release a new 
version to fix everything.

 -- Seth Woolley, Security Team Leader, <security AT sourcemage.org>
<<

The following files are attached for spell ftp/wget:
BUILD
DEPENDS
DETAILS
HISTORY
INSTALL
POST_REMOVE
SECURITY
TRIGGERS
wget-filter-controls.patch.gz


-- 
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8  3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: securityupdate.14566.tar.bz2
Description: Binary data

Attachment: pgpR7OEZnn2NO.pgp
Description: PGP signature