Skip to contentSkip to conversation

wget: security bump to version 1.19.5

PATCH New Baruch Siach 3 participants 3 messages May 8, 2018 – May 28, 2018

lore
Share & tools
lore

Baruch Siach

author
#0 lore raw

PATCH 1/1 wget: security bump to version 1.19.5

Fixes CVE-2018-0494: cookie injection vulnerability.

Signed-off-by Baruch Siach <[email protected]>
---
 package/wget/wget.hash | 4 ++--
 package/wget/wget.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)
package/wget/wget.hash +2 -2
index ab0d1d1dfd46..eee4a5194ec9 100644
@@ -1,5 +1,5 @@
 # Locally calculated after checking pgp signature
-# https://ftp.gnu.org/gnu/wget/wget-1.19.4.tar.lz.sig
-sha256 2fc0ffb965a8dc8f1e4a89cbe834c0ae7b9c22f559ebafc84c7874ad1866559a  wget-1.19.4.tar.lz
+# https://ftp.gnu.org/gnu/wget/wget-1.19.5.tar.lz.sig
+sha256 29fbe6f3d5408430c572a63fe32bd43d5860f32691173dfd84edc06869edca75  wget-1.19.5.tar.lz
 # Locally calculated
 sha256 e79e9c8a0c85d735ff98185918ec94ed7d175efc377012787aebcf3b80f0d90b  COPYING
package/wget/wget.mk +1 -1
index 23e4c8accaa2..72a73cce7971 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-WGET_VERSION = 1.19.4
+WGET_VERSION = 1.19.5
 WGET_SOURCE = wget-$(WGET_VERSION).tar.lz
 WGET_SITE = $(BR2_GNU_MIRROR)/wget
 WGET_DEPENDENCIES = host-pkgconf
Signature · 1 line
2.17.0
Applied
#1 lore raw

PATCH 1/1 wget: security bump to version 1.19.5

Hello,

Quoted 7 lines · Baruch Siach

Fixes CVE-2018-0494: cookie injection vulnerability.

Signed-off-by Baruch Siach <[email protected]>
---
 package/wget/wget.hash | 4 ++--
 package/wget/wget.mk   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

Applied to master, thanks.

Thomas

Signature · 3 lines
Thomas Petazzoni, CTO, Bootlin (formerly Free Electrons)
Embedded Linux and Kernel engineering
https://bootlin.com