lp:ubuntu/lucid-security/wget
- Get this branch:
- bzr branch lp:ubuntu/lucid-security/wget
Branch merges
Branch information
Recent revisions
- 18. By Marc Deslauriers
-
* SECURITY UPDATE: remote code execution via absolute path traversal
vulnerability in FTP
- debian/patches/ CVE-2014- 4877.dpatch: don't create local symlinks in
src/init.c, check for duplicate file nodes in src/ftp.c, updated
documentation in doc/wget.texi.
- CVE-2014-4877 - 17. By Marc Deslauriers
-
* SECURITY UPDATE: arbitrary file overwrite via 3xx redirect
- debian/patches/ CVE-2010- 2252.dpatch: don't use server names in
doc/wget.texi, src/{http.*,init. c,main. c,options. h,retr. c}.
- This update changes previous behaviour by ignoring the filename
supplied by the server during redirects. To re-enable previous
behaviour, see the new --trust-server- names option.
- CVE-2010-2252 - 15. By Colin Watson
-
Rebuild against libssl-dev 0.9.8k-7ubuntu4 to fix wget-udeb dependencies
(LP: #503339). - 14. By Marc Deslauriers
-
* Merge from debian testing, remaining changes:
- Add wget-udeb to ship wget.gnu as alternative to busybox wget
implementation.
* Keep build dependencies in main:
- debian/control: remove info2man build-dep
- debian/patches/ 00list: disable wget-infopod_ generated_ manpage. dpatch - 13. By Marc Deslauriers
-
* SECURITY UPDATE: SSL certificate bypass with NULL CN byte.
- debian/patches/ security- CVE-2009- 3490.dpatch: make sure there is no
NULL in the common-name in src/openssl.c.
- CVE-2009-3490 - 12. By Pedro Fragoso
-
* Merge from Debian unstable (LP: #295181), Ubuntu remaining changes:
- Add wget-udeb to ship wget.gnu as alternative to busybox wget
implementation. - 11. By Pedro Fragoso
-
* Merge from Debian unstable (LP: #249277), Ubuntu remaining changes:
- Add wget-udeb to ship wget.gnu as alternative to busybox wget
implementation.
* Modify Maintainer value to match Debian-Maintainer- Field Spec - 10. By Michael Vogt
-
* Merge from debian unstable, remaining changes:
- Add wget-udeb to ship wget.gnu as alternative to busybox wget
implementation. - 9. By Michael Vogt
-
* Merge from debian unstable, remaining changes:
- Add wget-udeb to ship wget.gnu as alternative to busybox wget
implementation.
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp:ubuntu/maverick/wget