Debian alert DLA-2086-1 (wget)

From:
             
 
Thorsten Alteholz <debian@alteholz.de> 
To:
             
 
debian-lts-announce@lists.debian.org 
Subject:
             
 
[SECURITY] [DLA 2086-1] wget security update 
Date:
             
 
Wed, 29 Jan 2020 22:58:04 +0100 (CET)
Message-ID:
             
 
<alpine.DEB.2.20.2001292254530.25258@jupiter.server.alteholz.net>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Package        : wget
Version        : 1.16-1+deb8u7
CVE ID         : CVE-2016-7098


An issue has been found in wget, a tool to retrieve files from the web.
A race condition might occur as files rejected by an access list are kept 
on the disk for the duration of a HTTP connection.


For Debian 8 "Jessie", this problem has been fixed in version
1.16-1+deb8u7.

We recommend that you upgrade your wget packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=qYbv
-----END PGP SIGNATURE-----