GNU Wget: Multiple vulnerabilities

2016-10-29T00:00:00
ID GLSA-201610-11
Type gentoo
Reporter Gentoo Foundation
Modified 2016-10-29T00:00:00

Description

Background

GNU Wget is a free software package for retrieving files using HTTP, HTTPS and FTP, the most widely-used Internet protocols.

Description

Multiple vulnerabilities have been discovered in Wget. Please review the CVE identifier and bug reports referenced for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process or obtain sensitive information.

Workaround

There is no known workaround at this time.

Resolution

All GNU Wget users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=net-misc/wget-1.18"