[Secure-testing-team] Bug#827003: wget: CVE-2016-4971

[Salvatore Bonaccorso]

Source: wget
Version: 1.17.1-2
Severity: important
Tags: security upstream patch fixed-upstream

Hi,

the following vulnerability was published for wget.

CVE-2016-4971[0]:
HTTP to a FTP redirection file name confusion vulnerability

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-4971
[1] http://lists.gnu.org/archive/html/info-gnu/2016-06/msg00004.html
[2] http://git.savannah.gnu.org/cgit/wget.git/commit/?id=e996e322ffd42aaa051602da182d03178d0f13e1

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore