-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Mon, 04 Jul 2016 18:37:47 +0200 Source: wget Binary: wget Architecture: source amd64 Version: 1.16-1+deb8u1 Distribution: jessie Urgency: medium Maintainer: Noël Köthe <noel@debian.org> Changed-By: Noël Köthe <noel@debian.org> Description: wget - retrieves files from the web Closes: 827003 829130 Changes: wget (1.16-1+deb8u1) jessie; urgency=medium . * added patch for CVE-2016-4971. closes: #827003, #829130 By default, on server redirects to a FTP resource, use the original URL to get the local file name. Close CVE-2016-4971. This introduces a backward-incompatibility for HTTP->FTP redirects and any script that relies on the old behaviour must use --trust-server-names. * debian/rules fixed clean target Checksums-Sha1: b2a8e6770610b072b7be5a15ae6b997ba93bc979 1769 wget_1.16-1+deb8u1.dsc e174984149d194ca16ab80ba8ce96444d6355d8c 21696 wget_1.16-1+deb8u1.debian.tar.xz 1103a7e4f82bebd3fe85ef26cc4200b896355c44 495812 wget_1.16-1+deb8u1_amd64.deb Checksums-Sha256: b3f36055616985f0d92b43ed6f3a51c8bee585ff84a475e93fe9c38eed32e276 1769 wget_1.16-1+deb8u1.dsc 39322969ff614d2a7416d5e9695bb87a09bda99a510d26f536ef3bdda7739bcd 21696 wget_1.16-1+deb8u1.debian.tar.xz 0982f09bf056fb0be9c2a519a20009c4c7dc8df45e05de983ae2c04e82cd1ab8 495812 wget_1.16-1+deb8u1_amd64.deb Files: 1f560feff1aa55cccf477f82f1babe8b 1769 web important wget_1.16-1+deb8u1.dsc eed0d8ba50dec4e0e39b9880124d4121 21696 web important wget_1.16-1+deb8u1.debian.tar.xz 1cca36679c3dad4adec9121c4fab47b4 495812 web important wget_1.16-1+deb8u1_amd64.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBCAAGBQJXe9xPAAoJEGjAeL6I+AzaJSMQAKErAMIbaL3/W2jw3b9apxGP hXSS9u0KfsC8d2NAaHilMIPgE/3jeCKDKuVJ0NYOcY5pO/BDEw5E2FlCDc+Z6lhi jp95fauo4qvCntZlFP6hdz8+74P4+YgxH+ObxkWlYhK3BGXOeUn508/27OECJG4r acCfnSNy1AEvKvdv6N6c58P3UYo1Uh8VMMDGNCMKE6EPXa++epo1TUrVKQCgtZTr L2+vLWNVy9VDS/808o783ooAivKBxDCvG0Sy1BrkPexpif7UiwABBbrdk3Pdeejy DeVwJbn7wPD+fmLMeGSpY9KKKEypbkH0BcGlVarwKgeJ7VHqj33JUxLEsG9ZYWgu mHOede3KF2I9QJzXv4nmr6tp/x82C33diL9OJR/pR9P+HCULIYzWxDXXWPjg0iBG vaF1t4cp/KGcpauxuJhvmRcQsdEaxfbJ19OxXoUVFuDk7ruywxfhbd/VYTG+5YjI Cp849tN7N4u49lu6JPs9xyJtAHXuEUM+5GxN69g4D8V6JAgmXn0StA/PUiB9IBQU 7EGhmBtp4nZ5vmQ4T4tSB0BoyHWfbVkn96bIkGbaUtCYzX0X+WoFFkm9LbPUM+qA sNmLDkY/h6rQoUNDuPpgV5roGxbKdRl3ud59MFJHa3jbymHi3UkeGQTh+rR3fDKO Ihpg/SwOokVD4xJBfXkp =n5aZ -----END PGP SIGNATURE-----