FlawAtlas
Search the atlas
SUSE-SU-2016:3268-1 Not scored

Security update for wget

This update for wget fixes the following issues: Security issues fixed: - CVE-2016-7098: Fixed a potential race condition by creating files with .tmp ext and making them accessible to the current user only. (bsc#995964) Non security issues fixed: - bsc#1005091: Don't call xfree() on string returned by usr_error() - bsc#1012677: Add support for enforcing TLSv1.1 and TLSv1.2 (TLS 1.2 support was already present, but it was not enforcable).

Exploit probability Not scored
Published December 23, 2016
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Desktop 12 SP1 wget
SUSE:Linux Enterprise Desktop 12 SP2 wget
SUSE:Linux Enterprise Server 12 SP1 wget
SUSE:Linux Enterprise Server 12 SP2 wget
SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2 wget
SUSE:Linux Enterprise Server for SAP Applications 12 SP1 wget
SUSE:Linux Enterprise Server for SAP Applications 12 SP2 wget

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2016:3268-1

This update for wget fixes the following issues: Security issues fixed: - CVE-2016-7098: Fixed a potential race condition by creating files with .tmp ext and making them accessible to the current user only. (bsc#995964) Non security issues fixed: - bsc#1005091: Don't call xfree() on string returned by usr_error() - bsc#1012677: Add support for enforcing TLSv1.1 and TLSv1.2 (TLS 1.2 support was already present, but it was not enforcable).

View original source

05 / REFERENCES

Further evidence