Medium ELSA-2018-3052 1 CVE

Moderate: wget security and bug fix update (Oracle Linux 7)

Published Nov 5, 2018 · Updated Nov 5, 2018

Ecosystem: Oracle Linux

Summary

[1.14-18]
- Fix CVE-2018-0494 (#1576106)

[1.14-17]
- Fix segfault when Digest Authentication header is missing 'qop' part (#1545310)

[1.14-16]
- Fixed various security flaws (CVE-2017-13089, CVE-2017-13090)

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	wget	0:1.14-18.el7

Vulnerabilities 1

Unscored —

CVE-2018-0494 Public exploit EPSS 16%

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n seque…

wget wget wget Debian Ubuntu Alpine

May 6, 2018