Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 596
Alerts This Week
Warning Icon 1 596

Debian DSA-4195-1 Critical: wget Cookie Injection Issue

debian
Calendar Grey May 8, 2018
Debian Logo
Ubuntu Security Notice USN-3957-1 for wget addressing vulnerabilities in cookie processing. Prompt upgrade is advised for all users.
Harry Sintonen discovered that wget, a network utility to retrieve files from the web, does not properly handle '\r\n' from continuation lines while parsing the Set-Cookie HTTP hea...
Topics%20covered

Topics Covered

security advisory critical software update debian wget web threat cookie injection

Summary

For the oldstable distribution (jessie), this problem has been fixed
in version 1.16-1+deb8u5.

For the stable distribution (stretch), this problem has been fixed in
version 1.18-5+deb9u2.

We recommend that you upgrade your wget packages.

For the detailed security status of wget please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/source-package/wget

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: wget
CVE ID: CVE-2018-0494

Topics%20covered

Topics Covered

security advisory critical software update debian wget web threat cookie injection

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.