Format: 1.8
Date: Mon, 23 Oct 2017 15:36:01 -0400
Source: wget
Binary: wget wget-udeb
Architecture: arm64 arm64_translations
Version: 1.17.1-1ubuntu1.3
Distribution: xenial
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@bos01-arm64-007.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 wget       - retrieves files from the web
 wget-udeb  - retrieves files from the web (udeb)
Changes:
 wget (1.17.1-1ubuntu1.3) xenial-security; urgency=medium
 .
   * SECURITY UPDATE: race condition leading to access list bypass
     - debian/patches/CVE-2016-7098-1.patch: limit file mode in src/http.c.
     - debian/patches/CVE-2016-7098-2.patch: add .tmp to temp files in
       src/http.c.
     - debian/patches/CVE-2016-7098-3.patch: replace asprintf by aprint in
       src/http.c.
     - CVE-2016-7098
   * SECURITY UPDATE: CRLF injection in url_parse
     - debian/patches/CVE-2017-6508.patch: check for invalid control
       characters in src/url.c.
     - CVE-2017-6508
   * SECURITY UPDATE: stack overflow in HTTP protocol handling
     - debian/patches/CVE-2017-13089.patch: return error on negative chunk
       size in src/http.c.
     - CVE-2017-13089
   * SECURITY UPDATE: heap overflow in HTTP protocol handling
     - debian/patches/CVE-2017-13090.patch: stop processing on negative
       chunk size in src/retr.c.
     - CVE-2017-13090
Checksums-Sha1:
 ac5aa6c8c735f976208b1be1d092a5520c8bc59f 336232 wget-dbgsym_1.17.1-1ubuntu1.3_arm64.ddeb
 36850c6be041ea717e437705c1b09870931cdff1 278258 wget-udeb-dbgsym_1.17.1-1ubuntu1.3_arm64.ddeb
 8a99dd9c55e61dbc2573e67f6c04b2cf752fdd28 122310 wget-udeb_1.17.1-1ubuntu1.3_arm64.udeb
 1bf154799ef42de8029c5b45d9b2e9094c0499cc 272180 wget_1.17.1-1ubuntu1.3_arm64.deb
 7d74a2e321f36ac3ad7c6e02b8f4722fdb1302f6 1578328 wget_1.17.1-1ubuntu1.3_arm64_translations.tar.gz
Checksums-Sha256:
 8d1a1992f075d612731553041d1aaa810738259f6d39a98dc846c26ac9777c13 336232 wget-dbgsym_1.17.1-1ubuntu1.3_arm64.ddeb
 2995895ee7776543dfcc3efb5fb9200b9658e01d49035c833200a0b147a096a0 278258 wget-udeb-dbgsym_1.17.1-1ubuntu1.3_arm64.ddeb
 845e63f733096f5135039bca54ddf0a80a70d379e8a0e11e56b69a01ef4f7f5a 122310 wget-udeb_1.17.1-1ubuntu1.3_arm64.udeb
 37a27af39cc753f4c6b7f6c8ebd11b6f5573081fe5124c6396dbd88dfe187d37 272180 wget_1.17.1-1ubuntu1.3_arm64.deb
 12df777ccb782139de1826d12470f3ac41f06a60d2ab9830b67d83ea98c35283 1578328 wget_1.17.1-1ubuntu1.3_arm64_translations.tar.gz
Files:
 60d1b21b6076b557a178a153b1eff961 336232 web extra wget-dbgsym_1.17.1-1ubuntu1.3_arm64.ddeb
 cba86e6c8a884831c6108944066a1a49 278258 debian-installer extra wget-udeb-dbgsym_1.17.1-1ubuntu1.3_arm64.ddeb
 419dd5d2ad0e877ee1de2f55487a40b2 122310 debian-installer extra wget-udeb_1.17.1-1ubuntu1.3_arm64.udeb
 ca219455068d805af6f4306b7b58ca72 272180 web important wget_1.17.1-1ubuntu1.3_arm64.deb
 077e2a365ee501b9f59484e8c18c9a43 1578328 raw-translations - wget_1.17.1-1ubuntu1.3_arm64_translations.tar.gz
Original-Maintainer: Noël Köthe <noel@debian.org>
Package-Type: udeb