Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE Linux Enterprise Server 2014:1366-2 Important: Wget FTP Access Fix

suse
Calendar Grey November 12, 2014
Scroller Suse
This patch addresses a significant curl vulnerability and improves efficiency in openSUSE operating systems.
An update that solves one vulnerability and has two fixes An update that solves one vulnerability and has two fixes An update that solves one vulnerability and has two fixes is now...

Summary

wget was updated to fix one security issue and two non-security issues: * FTP symbolic link arbitrary filesystem access (CVE-2014-4877). * Fix displaying of download time (bnc#901276). * Fix 0 size FTP downloads after failure (bnc#885069). Security Issues: * CVE-2014-4877 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP2 LTSS: zypper in -t patch slessp2-wget-9939 - SUSE Linux Enterprise Server 11 SP1 LTSS: zypper in -t patch slessp1-wget-9938 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP2 LTSS (i586 s390x x86_64): wget-1.11.4-1.19.1

Topics%20covered

Topics Covered

security advisory patch important SUSE server update FTP access wget fix

References

#885069 #901276 #902709

Cross- CVE-2014-4877

Affected Products:

SUSE Linux Enterprise Server 11 SP2 LTSS

SUSE Linux Enterprise Server 11 SP1 LTSS

https://www.suse.com/security/cve/CVE-2014-4877.html

https://bugzilla.suse.com/show_bug.cgi?id=885069

https://bugzilla.suse.com/show_bug.cgi?id=901276

https://bugzilla.suse.com/show_bug.cgi?id=902709

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:1366-2
Rating: important

Topics%20covered

Topics Covered

security advisory patch important SUSE server update FTP access wget fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.