SUSE-SU-2025:20010-1
- Source
- https://www.suse.com/support/update/announcement/2025/suse-su-202520010-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2025:20010-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/SUSE-SU-2025:20010-1
- Upstream
- Related
- Published
- 2025-02-03T08:47:27Z
- Modified
- 2026-03-11T07:29:38Z
- Summary
- Security update for wget
- Details
-
This update for wget fixes the following issues:
-
CVE-2024-38428: Fix mishandled semicolons in the userinfo subcomponent of a URI. (bsc#1226419)
-
Update to GNU wget 1.24.5:
- Fix how subdomain matches are checked for HSTS.
- Wget will now also parse the srcset attribute in HTML tags
- Support reading fetchmail style "user" and "passwd" fields from netrc
- In some cases, prevent the confusing "Cannot write to... (success)" error messages
- Support extremely fast download speeds (TB/s)
- Ensure that CSS URLs are corectly quoted
- libproxy support is now upstream- drop wget-libproxy.patch
-
- References