[ GLSA 201711-06 ] GNU Wget

[GLSA]

Gentoo Linux Security Advisory

Title: GNU Wget: Multiple vulnerabilities (GLSA 201711-06)
Severity: normal
Exploitable: remote
Date: 2017-11-11
Bug(s): #635496
ID: 201711-06

Synopsis

Multiple vulnerabilities have been found in Wget, the worst of
which could allow remote attackers to execute arbitrary code.


Background

GNU Wget is a free software package for retrieving files using HTTP,
HTTPS and FTP, the most widely-used Internet protocols.


Affected Packages

Package: net-misc/wget
Vulnerable: < 1.19.1-r2
Unaffected: >= 1.19.1-r2
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Wget. Please review the
referenced CVE identifiers for details.


Impact

A remote attacker, by enticing a user to connect to a malicious server,
could remotely execute arbitrary code or cause a Denial of Service
condition.


Workaround

There is no known workaround at this time.

Resolution

All Wget users should upgrade to the latest version: