Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2025:0366-1 moderate: authorization issue in wget software

suse
Calendar Grey February 6, 2025
Dist Suse Esm H88
Patch release for curl rectifying a security flaw; apply suggested updates for Red Hat environments.
* bsc#1185551 * bsc#1230795 Cross-References: * CVE-2021-31879

Summary

## This update for wget fixes the following issues: * CVE-2021-31879: Authorization header disclosed upon redirects to different origins. (bsc#1185551) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2025-366=1 ## Package List: * SUSE Linux Enterprise Micro 5.5 (aarch64 ppc64le s390x x86_64) * wget-1.20.3-150000.3.29.1 * wget-debuginfo-1.20.3-150000.3.29.1 * wget-debugsource-1.20.3-150000.3.29.1

Topics%20covered

Topics Covered

security advisory moderate update SUSE wget authorization disclosure

References

* bsc#1185551

* bsc#1230795

Cross-

* CVE-2021-31879

CVSS scores:

* CVE-2021-31879 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

* CVE-2021-31879 ( NVD ): 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products:

* SUSE Linux Enterprise Micro 5.5

An update that solves one vulnerability and has one security fix can now be

installed.

##

* https://www.suse.com/security/cve/CVE-2021-31879.html

* https://bugzilla.suse.com/show_bug.cgi?id=1185551

* https://bugzilla.suse.com/show_bug.cgi?id=1230795

Announcement ID: SUSE-SU-2025:0366-1
Release Date: 2025-02-05T10:57:47Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update SUSE wget authorization disclosure

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here