USN-3012-1: Wget vulnerability

Releases

• Ubuntu 16.04 ESM
• Ubuntu 15.10
• Ubuntu 14.04 ESM
• Ubuntu 12.04

Packages

• wget - retrieves files from the web

Details

Dawid Golunski discovered that Wget incorrectly handled filenames when
being redirected from an HTTP to an FTP URL. A malicious server could
possibly use this issue to overwrite local files.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 16.04

• wget - 1.17.1-1ubuntu1.1

Ubuntu 15.10

• wget - 1.16.1-1ubuntu1.1

Ubuntu 14.04

• wget - 1.15-1ubuntu1.14.04.2

Ubuntu 12.04

• wget - 1.13.4-2ubuntu1.4

In general, a standard system update will make all the necessary changes.

References

• CVE-2016-4971