Opened 2 years ago

Closed 2 years ago

#20646 closed enhancement (fixed)

wget-1.25.0

Reported by: Bruce Dubbs Owned by: blfs-book
Priority: elevated Milestone: 12.3
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New minor version.

Change History (3)

comment:1 by Bruce Dubbs, 2 years ago

GNU Wget NEWS -- history of user-visible changes.

Noteworthy changes in release 1.25.0 (2024-11-10) [stable]

  • [Breaking change] Drop support for shorthand FTP URLs (CVE-2024-10524)
  • [Breaking change] Switch to continuous reading from stdin pipes
  • Reimplement user-info parsing based on RFC 2396
  • Fix a build issue with libproxy and --disable-debug

Note: I could not find CVE-2024-10524, but I did find ​https://jfrog.com/blog/cve-2024-38428-wget-vuln-all-you-need-to-know/

Last edited 2 years ago by Bruce Dubbs (previous) (diff)

comment:2 by Bruce Dubbs, 2 years ago

Fixed at commit 90842acba6. Leaving ticket open for security advisory.

comment:3 by Douglas R. Reno, 2 years ago

Priority: normal → elevated
Resolution: → fixed
Status: new → closed

SA-12.2-040 issued

Note: See TracTickets for help on using tickets.