products/SUSE_ALP_Standard
9
0
Fork 1
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

Adding patchinfo patchinfo.20240709130932955043.255638743075857

Browse Source
This commit is contained in:
Adrian Schröter 2024-08-02 17:24:03 +02:00
parent f934be97c1
commit a6f211b32d
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
patchinfo.20240709130932955043.255638743075857/_patchinfo Normal file
View File

@ -0,0 +1,24 @@
<patchinfo>
<!-- generated from request(s) 336343 -->
<issue tracker="bnc" id="1226419">VUL-0: CVE-2024-38428: wget: mishandles semicolons in the userinfo subcomponent of a URI</issue>
<issue tracker="cve" id="2024-38428"/>
<packager>vlefebvre</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for wget</summary>
<description>This update for wget fixes the following issues:
- CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419)
- Update to GNU wget 1.24.5:
* Fix how subdomain matches are checked for HSTS.
* Wget will now also parse the srcset attribute in &lt;source&gt; HTML tags
* Support reading fetchmail style "user" and "passwd" fields from netrc
* In some cases, prevent the confusing "Cannot write to... (success)" error messages
* Support extremely fast download speeds (TB/s)
* Ensure that CSS URLs are corectly quoted
* libproxy support is now upstream- drop wget-libproxy.patch
</description>
<package>wget</package>
<seperate_build_arch/>
</patchinfo>