Security update for wget
This update for wget fixes the following issues:
- Fix for HTTP to a FTP redirection file name confusion vulnerability
(bsc#984060, CVE-2016-4971).
- Work around a libidn vulnerability
(bsc#937096, CVE-2015-2059).
- Fix for wget fails with basicauth: Failed writing HTTP request:
Bad file descriptor
(bsc#958342)
This update was imported from the SUSE:SLE-12:Update update project.
-
Submitted by
Josef Möllers (jmoellers)
Fixed bugs
bnc#937096
VUL-1: wget: mitigation for CVE-2015-2059 (libidn: out-of-bounds read with stringprep on invalid UTF-8)
bnc#958342
wget fails with basicauth: Failed writing HTTP request: Bad file descriptor
bnc#984060
VUL-0: CVE-2016-4971: wget: HTTP to a FTP redirection file name confusion vulnerability
