UbuntuUpdates.org

Package "wget"

Name: wget

Description:

retrieves files from the web
Latest version: 1.20.3-1ubuntu2.1
Release: focal (20.04)
Level: security
Repository: main
Homepage: https://www.gnu.org/software/wget/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "wget"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "wget" in Focal

Repository Area Version
base main 1.20.3-1ubuntu1
updates main 1.20.3-1ubuntu2.1

Changelog

Version: 1.20.3-1ubuntu2.1 2024-06-26 16:07:16 UTC

  wget (1.20.3-1ubuntu2.1) focal-security; urgency=medium

  * SECURITY UPDATE: mishandling of semicolons in userinfo
    - debian/patches/CVE-2024-38428.patch: properly re-implement userinfo
      parsing in src/url.c.
    - CVE-2024-38428

 -- Marc Deslauriers <email address hidden> Wed, 19 Jun 2024 08:19:28 -0400
CVE-2024-38428 url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data t


About   -   Send Feedback to @ubuntu_updates