This is the mail archive of the cygwin-apps mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: SECURITY: wget


On 10/16/2011 12:04 PM, Yaakov (Cygwin/X) wrote:
Eric,

wget-1.12 is vulnerable to CVE-2010-2252; please update to the latest
upstream release (1.13.4) to fix.  While you're at it, may I suggest
adding the attached patch to fix the documented location of wgetrc.

Thanks for the heads-up.


--
Eric Blake   eblake@redhat.com    +1-801-349-2682
Libvirt virtualization library http://libvirt.org


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]