[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

[SECURITY] [DLA 4133-1] wget security update



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4133-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                          Adrian Bunk
April 21, 2025                                https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : wget
Version        : 1.21-1+deb11u2
CVE ID         : CVE-2024-38428
Debian Bug     : 1073523

Mishandling of semicolons in the userinfo subcomponent of a URI has been 
fixed in GNU Wget, a utility for retrieving files over HTTP, HTTPS, FTP 
and FTPS.

For Debian 11 bullseye, this problem has been fixed in version
1.21-1+deb11u2.

We recommend that you upgrade your wget packages.

For the detailed security status of wget please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/wget

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=Tsuy
-----END PGP SIGNATURE-----


Reply to: