tocsin

Alpine/wget: medium 6.5

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

Action: Upgrade wget to 1.18-r3 or later.

Affected

introducedfixedlast affected
01.18-r3-

Fixed versions

1.18-r3

Sources

published · modified · JSON