Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

Slackware: 2017-300-02 Moderate: wget Stack and Heap Overflow Fix

slackware
Calendar Grey October 27, 2017
Dist Slackware Esm H88
Recent wget updates address vulnerabilities in various Slackware versions. Confirm your system is current to maintain security.
New wget packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, 14.2, and -current to fix security issues

Summary

Here are the details from the Slackware 14.2 ChangeLog: patches/packages/wget-1.19.2-i586-1_slack14.2.txz: Upgraded. This update fixes stack and heap overflows in in HTTP protocol handling. For more information, see: https://www.cve.org/CVERecord?id=CVE-2017-13089 https://www.cve.org/CVERecord?id=CVE-2017-13090 (* Security fix *)

Topics%20covered

Topics Covered

security advisory software update security fix heap overflow Slackware stack overflow wget

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 13.0:
Updated package for Slackware x86_64 13.0:
Updated package for Slackware 13.1:
Updated package for Slackware x86_64 13.1:
Updated package for Slackware 13.37:
Updated package for Slackware x86_64 13.37:
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware 14.2:
Updated package for Slackware x86_64 14.2:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 13.0 package: 6a2fdea44aeb773a883b8179fa05f8dd wget-1.19.2-i486-1_slack13.0.txz
Slackware x86_64 13.0 package: 1cbdea2a72f55841ec7497a33a4050d2 wget-1.19.2-x86_64-1_slack13.0.txz
Slackware 13.1 package: 2b931c21e366f28c3ec3d566895808e1 wget-1.19.2-i486-1_slack13.1.txz
Slackware x86_64 13.1 package: 3a0040373718b879ff81a590821cc957 wget-1.19.2-x86_64-1_slack13.1.txz
Slackware 13.37 package: 63e6d6396de6264109fc5db75a89a1fa wget-1.19.2-i486-1_slack13.37.txz
Slackware x86_64 13.37 package: 19a525ee83e14446902d4bb4fe0850c8 wget-1.19.2-x86_64-1_slack13.37.txz
Slackware 14.0 package: c57618f9fa8a13d00989ebf03622803b wget-1.19.2-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: 4d0fecab36336e9b00f841881852a619 wget-1.19.2-x86_64-1_slack14.0.txz
Slackware 14.1 package: b32791160dcf03d91721644a2d997c03 wget-1.19.2-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: c534b54abed76e5bb452f06cb3fd0f7e wget-1.19.2-x86_64-1_slack14.1.txz
Slackware 14.2 package: 1d20fe71cba764a5fd516329b3c84043 wget-1.19.2-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: 52f27f37dc54642f430790ba1f7ba5db wget-1.19.2-x86_64-1_slack14.2.txz
Slackware -current package: c528ea9f78c9658d620951fe575e2757 n/wget-1.19.2-i586-1.txz
Slackware x86_64 -current package: d3bdaa039410b993ac729bf88c80905f n/wget-1.19.2-x86_64-1.txz

Topics%20covered

Topics Covered

security advisory software update security fix heap overflow Slackware stack overflow wget

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg wget-1.19.2-i586-1_slack14.2.txz

Related News

Your message here