Format: 1.8
Date: Mon, 23 Oct 2017 15:36:01 -0400
Source: wget
Binary: wget wget-udeb
Architecture: i386 i386_translations
Version: 1.17.1-1ubuntu1.3
Distribution: xenial
Urgency: medium
Maintainer: Launchpad Build Daemon <buildd@lcy01-30.buildd>
Changed-By: Marc Deslauriers <marc.deslauriers@ubuntu.com>
Description:
 wget       - retrieves files from the web
 wget-udeb  - retrieves files from the web (udeb)
Changes:
 wget (1.17.1-1ubuntu1.3) xenial-security; urgency=medium
 .
   * SECURITY UPDATE: race condition leading to access list bypass
     - debian/patches/CVE-2016-7098-1.patch: limit file mode in src/http.c.
     - debian/patches/CVE-2016-7098-2.patch: add .tmp to temp files in
       src/http.c.
     - debian/patches/CVE-2016-7098-3.patch: replace asprintf by aprint in
       src/http.c.
     - CVE-2016-7098
   * SECURITY UPDATE: CRLF injection in url_parse
     - debian/patches/CVE-2017-6508.patch: check for invalid control
       characters in src/url.c.
     - CVE-2017-6508
   * SECURITY UPDATE: stack overflow in HTTP protocol handling
     - debian/patches/CVE-2017-13089.patch: return error on negative chunk
       size in src/http.c.
     - CVE-2017-13089
   * SECURITY UPDATE: heap overflow in HTTP protocol handling
     - debian/patches/CVE-2017-13090.patch: stop processing on negative
       chunk size in src/retr.c.
     - CVE-2017-13090
Checksums-Sha1:
 ffc92dc138af97c91fde60c1c7c1a25a0195fd8b 297170 wget-dbgsym_1.17.1-1ubuntu1.3_i386.ddeb
 453946a9255168aa5daecdd57f6f5de000261db9 251792 wget-udeb-dbgsym_1.17.1-1ubuntu1.3_i386.ddeb
 f753804e83f42580e8e00ae3121a5564170878c3 142660 wget-udeb_1.17.1-1ubuntu1.3_i386.udeb
 1195829b09ffaea125ede7136537d49e89caee82 312268 wget_1.17.1-1ubuntu1.3_i386.deb
 d084d7622eab73debb9ce2ccebabf8329bdd63e6 1578318 wget_1.17.1-1ubuntu1.3_i386_translations.tar.gz
Checksums-Sha256:
 0e7adde9f631090e98d748f764a5a7278c7e4b600d7ecfb318de72afad4d0280 297170 wget-dbgsym_1.17.1-1ubuntu1.3_i386.ddeb
 b4394c048d58e1dd1078782221e4ab92cf486fdfaffac4a804dc84376a9fc492 251792 wget-udeb-dbgsym_1.17.1-1ubuntu1.3_i386.ddeb
 d3e73c37da668714e3e2df40bf946470f6f35ccde436cde30415f7ff9d895624 142660 wget-udeb_1.17.1-1ubuntu1.3_i386.udeb
 286085cb577a1f89e73f82d71bb3944bd9ef16824907af19b64726583e5c6848 312268 wget_1.17.1-1ubuntu1.3_i386.deb
 43bc22c15917fe170d5ee9ddb443be1fac2e5b7e77be7a1761c3dc99b63118d4 1578318 wget_1.17.1-1ubuntu1.3_i386_translations.tar.gz
Files:
 7ad34c6d980431e9622019883cc16655 297170 web extra wget-dbgsym_1.17.1-1ubuntu1.3_i386.ddeb
 805bd642f4a5724c3e66de700f8ec601 251792 debian-installer extra wget-udeb-dbgsym_1.17.1-1ubuntu1.3_i386.ddeb
 2e026dd59d4a864e6efadc8979a55d62 142660 debian-installer extra wget-udeb_1.17.1-1ubuntu1.3_i386.udeb
 80584a2e4c1c03ca09544a4123da22b6 312268 web important wget_1.17.1-1ubuntu1.3_i386.deb
 e29d564dd0a6063ef67bb1792bc3e959 1578318 raw-translations - wget_1.17.1-1ubuntu1.3_i386_translations.tar.gz
Original-Maintainer: Noël Köthe <noel@debian.org>
Package-Type: udeb