tocsin

Alpine/wget: medium 6.5

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

Action: Upgrade wget to 1.18-r4 or later.

Affected

introducedfixedlast affected
01.18-r4-

Fixed versions

1.18-r4

Sources

published · modified · JSON