Red Hat Security Advisory

RHSA-2018:3052

wget security and bug fix update

Released 2018-10-30 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Client (v. 7) wget-1.14-18.el7
Red Hat Enterprise Linux ComputeNode (v. 7) wget-1.14-18.el7
Red Hat Enterprise Linux Server (v. 7) wget-1.14-18.el7
Red Hat Enterprise Linux Workstation (v. 7) wget-1.14-18.el7
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) wget-1.14-18.el7

TI-2018-00451 CVE-2018-0494 · GHSA-7cw3-q27m-9w5f

MEDIUM 45

GNU Wget before 1.19.5 is prone to a cookie injection vulnerability in the resp_new function in http.c via a \r\n sequence in a continuation line.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.16488 Published 2018-05-06 Partial fix CWE-20