Format: 1.8 Date: Mon, 23 Oct 2017 15:36:01 -0400 Source: wget Binary: wget wget-udeb Architecture: ppc64el ppc64el_translations Version: 1.17.1-1ubuntu1.3 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: wget - retrieves files from the web wget-udeb - retrieves files from the web (udeb) Changes: wget (1.17.1-1ubuntu1.3) xenial-security; urgency=medium . * SECURITY UPDATE: race condition leading to access list bypass - debian/patches/CVE-2016-7098-1.patch: limit file mode in src/http.c. - debian/patches/CVE-2016-7098-2.patch: add .tmp to temp files in src/http.c. - debian/patches/CVE-2016-7098-3.patch: replace asprintf by aprint in src/http.c. - CVE-2016-7098 * SECURITY UPDATE: CRLF injection in url_parse - debian/patches/CVE-2017-6508.patch: check for invalid control characters in src/url.c. - CVE-2017-6508 * SECURITY UPDATE: stack overflow in HTTP protocol handling - debian/patches/CVE-2017-13089.patch: return error on negative chunk size in src/http.c. - CVE-2017-13089 * SECURITY UPDATE: heap overflow in HTTP protocol handling - debian/patches/CVE-2017-13090.patch: stop processing on negative chunk size in src/retr.c. - CVE-2017-13090 Checksums-Sha1: 04447f1e24c960af15095d5458ddaeb4fd9c312d 386616 wget-dbgsym_1.17.1-1ubuntu1.3_ppc64el.ddeb 240378cf2600c08c9b74694209b5dad3401fa460 278448 wget-udeb-dbgsym_1.17.1-1ubuntu1.3_ppc64el.ddeb c67d474ac06006f1a39cc8f671b3a7f993b30efb 132438 wget-udeb_1.17.1-1ubuntu1.3_ppc64el.udeb 4a550552d3e09fa2a771f9f40ab60da26ab51c53 305822 wget_1.17.1-1ubuntu1.3_ppc64el.deb 98c8531164382d941de4db208f5c4d08b6452227 1577150 wget_1.17.1-1ubuntu1.3_ppc64el_translations.tar.gz Checksums-Sha256: 35f388365f7ac054bd797920461ffddf31093e06e4caf346fc2ce5d22e0f436f 386616 wget-dbgsym_1.17.1-1ubuntu1.3_ppc64el.ddeb a3f5586bf00d44f22fec911c681f5c6297e24d5290fc65034c3ee1da1f520e37 278448 wget-udeb-dbgsym_1.17.1-1ubuntu1.3_ppc64el.ddeb 3d2822572072ec92b3d97665b62d5e6670d18cd003b8ba42d1ad283b7093dfae 132438 wget-udeb_1.17.1-1ubuntu1.3_ppc64el.udeb 12ffdb8b9a6acf67b0ccd53b2308c216b20ed07c0dbed34e32b2eac3fafc13f2 305822 wget_1.17.1-1ubuntu1.3_ppc64el.deb 58411dc261828155be06ff8cf4a9635d1ecefa59e3c0c2bb9d2697e8e1137354 1577150 wget_1.17.1-1ubuntu1.3_ppc64el_translations.tar.gz Files: 6077db1a64bd2dace3ae14d1ea180e68 386616 web extra wget-dbgsym_1.17.1-1ubuntu1.3_ppc64el.ddeb be6effea4853cacc304b6f3abd9e1cb5 278448 debian-installer extra wget-udeb-dbgsym_1.17.1-1ubuntu1.3_ppc64el.ddeb 015dcc0491479797176bc90fefd83cf1 132438 debian-installer extra wget-udeb_1.17.1-1ubuntu1.3_ppc64el.udeb 7077b3baf54b99858570bdd0cca4ce45 305822 web important wget_1.17.1-1ubuntu1.3_ppc64el.deb bab9c440c8ea69f663c1af2c29a27c57 1577150 raw-translations - wget_1.17.1-1ubuntu1.3_ppc64el_translations.tar.gz Original-Maintainer: Noël Köthe Package-Type: udeb