Slackware 14.1 SSA:2014-302-01 Critical: Wget Symlink Fix
slackware
October 29, 2014
New wget packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue
Summary
Here are the details from the Slackware 14.1 ChangeLog: patches/packages/wget-1.14-i486-3_slack14.1.txz: Rebuilt. This update fixes a symlink vulnerability that could allow an attacker to write outside of the expected directory. For more information, see: https://www.cve.org/CVERecord?id=CVE-2014-4877 (* Security fix *)
Topics Covered
Where Find New Packages
Thanks to the friendly folks at the OSU Open Source Lab
(https://osuosl.org/) for donating FTP and rsync hosting
to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for
additional mirror sites near you.
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware 13.1:
Updated package for Slackware x86_64 13.1:
Updated package for Slackware 13.37:
Updated package for Slackware x86_64 13.37:
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:
MD5 Signatures
Slackware 13.0 package:
b7a81d5572aee18d5c869bbd9f59893d wget-1.11.4-i486-2_slack13.0.txz
Slackware x86_64 13.0 package:
102437fb8609a463691711e252af4ff8 wget-1.11.4-x86_64-2_slack13.0.txz
Slackware 13.1 package:
e4d34ed701fc66d12322038d895cb3d3 wget-1.12-i486-2_slack13.1.txz
Slackware x86_64 13.1 package:
cf85b424baff5aecbf8681bb557e6e12 wget-1.12-x86_64-2_slack13.1.txz
Slackware 13.37 package:
a9c99de9c8e7c30b9327e5c8a3d04228 wget-1.12-i486-2_slack13.37.txz
Slackware x86_64 13.37 package:
3b2c2cbe1d8f646580f78460b0c2df2a wget-1.12-x86_64-2_slack13.37.txz
Slackware 14.0 package:
922b995ba10798ee698d07782e1aadda wget-1.14-i486-2_slack14.0.txz
Slackware x86_64 14.0 package:
1fdeebdd813a14848e45a7c3b717bd90 wget-1.14-x86_64-2_slack14.0.txz
Slackware 14.1 package:
b9bb85eb35501cc88c44160116a3c90b wget-1.14-i486-3_slack14.1.txz
Slackware x86_64 14.1 package:
5c1246ee37bfcc9d8055105152fb8827 wget-1.14-x86_64-3_slack14.1.txz
Slackware -current package:
7a653e3e70efccf0951572c48debf409 n/wget-1.16-i486-1.txz
Slackware x86_64 -current package:
1c165656309faf28127690637e85d954 n/wget-1.16-x86_64-1.txz
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Installation Instructions
Installation instructions: Upgrade the package as root: # upgradepkg wget-1.14-i486-3_slack14.1.txz
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!