Stay Secure with the Latest Linux Advisories

security advisorysoftware updateFedora

Fedora 23: Security Update for Wget Tool – Critical IP Exposure Fix

- new version. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2015-10f92d4d06 2015-11-30 18:50:49.211698 -------------------------------------------------------------------------------- Name : wget Product : Fedora 23 Version : 1.17 Release : 1.fc23 URL : Summary : A utility for retrieving files using the HTTP or FTP protocols Description : GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest with FTP servers and Range with HTTP servers to retrieve files over slow or unstable connections, support for Proxy servers, and configurability. -------------------------------------------------------------------------------- Update Information: - new version -------------------------------------------------------------------------------- References: [ 1 ] Bug #1260925 - wget: IP address exposure via FTP PORT command [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1260925 [ 2 ] Bug #1281829 - Harden all packages: wget should be a position-independent executable https://bugzilla.redhat.com/show_bug.cgi?id=1281829 [ 3 ] Bug #1286008 - wget-1.17 is available https://bugzilla.redhat.com/show_bug.cgi?id=1286008 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update wget' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be foundat https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. https://lists.fedoraproject.org/admin/lists/package-announce.lists.fedoraproject.org/ . Latest security patch for wget on Fedora 23 boosts file download mechanisms and strengthens system protection capabilities.. Fedora Security Update, Wget Improvements, File Retrieval Security. . Severity: Critical. LinuxSecurity.com Team

Nov 30, 2015 •Critical Fedora