GNU Wget: Multiple vulnerabilities

GNU Wget: Multiple vulnerabilities Multiple vulnerabilities have been found in Wget, the worst of which could allow remote attackers to execute arbitrary code. wget 2017-11-11 2017-11-11 635496 remote 1.19.1-r2 1.19.1-r2

GNU Wget is a free software package for retrieving files using HTTP, HTTPS and FTP, the most widely-used Internet protocols.

Multiple vulnerabilities have been discovered in Wget. Please review the referenced CVE identifiers for details.

A remote attacker, by enticing a user to connect to a malicious server, could remotely execute arbitrary code or cause a Denial of Service condition.

There is no known workaround at this time.

All Wget users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=net-misc/wget-1.19.1-r2"

CVE-2017-13089 CVE-2017-13090 jmbailey jmbailey