Skip to Content.
Sympa Menu

sm-security - [SM-Security] SECURITY UPDATE for ftp/wget

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Seth Alan Woolley <seth AT positivism.org>
  • To: sm-security AT lists.ibiblio.org
  • Subject: [SM-Security] SECURITY UPDATE for ftp/wget
  • Date: Fri, 10 Dec 2004 10:47:11 -0800

2004-12-10 Seth Woolley <seth AT tautology.org>
* DETAILS: UPDATED updated
* BUILD: added to patch wget-filter-control.patch SECURITY FIX
* SECURITY: added warning to not use wget in bad ways

>> SECURITY file contents:
Please note that due to the poorly written nature of wget, use of wget
especially with -x and -r can be risky.

See http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261755

We have applied the control character patch and development versions of
sorcery avoid the other vulnerabilities listed.

Hope is that shortly the upstream author of wget will release a new
version to fix everything.

-- Seth Woolley, Security Team Leader, <security AT sourcemage.org>
<<

The following files are attached for spell ftp/wget:
BUILD
DEPENDS
DETAILS
HISTORY
INSTALL
POST_REMOVE
SECURITY
TRIGGERS
wget-filter-controls.patch.gz


--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: securityupdate.14566.tar.bz2
Description: Binary data

Attachment: pgpR7OEZnn2NO.pgp
Description: PGP signature



  • [SM-Security] SECURITY UPDATE for ftp/wget, Seth Alan Woolley, 12/10/2004

Archive powered by MHonArc 2.6.24.

Top of Page