Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
An update that solves one vulnerability and has two fixes An update that solves one vulnerability and has two fixes An update that solves one vulnerability and has two fixes is now available. is now available.. SUSE Security Update: Security update for wget ______________________________________________________________________________ Announcement ID: SUSE-SU-2014:1366-2 Rating: important References: #885069 #901276 #902709 Cross-References: CVE-2014-4877 Affected Products: SUSE Linux Enterprise Server 11 SP2 LTSS SUSE Linux Enterprise Server 11 SP1 LTSS ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: wget was updated to fix one security issue and two non-security issues: * FTP symbolic link arbitrary filesystem access (CVE-2014-4877). * Fix displaying of download time (bnc#901276). * Fix 0 size FTP downloads after failure (bnc#885069). Security Issues: * CVE-2014-4877 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP2 LTSS: zypper in -t patch slessp2-wget-9939 - SUSE Linux Enterprise Server 11 SP1 LTSS: zypper in -t patch slessp1-wget-9938 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP2 LTSS (i586 s390x x86_64): wget-1.11.4-1.19.1 - SUSE Linux Enterprise Server 11 SP1 LTSS (i586 s390x x86_64): wget-1.11.4-1.19.1 References: https://www.suse.com/security/cve/CVE-2014-4877.html https://bugzilla.suse.com/show_bug.cgi?id=885069 https://bugzilla.suse.com/show_bug.cgi?id=901276 https://bugzilla.suse.com/show_bug.cgi?id=902709 https://scc.suse.com:443/patches/ https://scc.suse.com:443/patches/ . This patchaddresses a significant curl vulnerability and improves efficiency in openSUSE operating systems.. SUSE Linux Server,wget update,security patch,FTP access fix. . Severity: Important. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.