Security update for wget SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:4145-1 Final 1 1 2024-12-03T09:07:29Z current 2024-12-03T09:07:29Z 2024-12-03T09:07:29Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for wget This update for wget fixes the following issues: - CVE-2024-10524: Fixed SSRF via shorthand HTTP URL (bsc#1233773) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container containers/pytorch:2-nvidia-2024-4145,Container containers/pytorch:2.5.0-2024-4145,Image SLES15-SP6-2024-4145,Image SLES15-SP6-Azure-Basic-2024-4145,Image SLES15-SP6-Azure-Standard-2024-4145,Image SLES15-SP6-BYOS-2024-4145,Image SLES15-SP6-BYOS-Azure-2024-4145,Image SLES15-SP6-BYOS-EC2-2024-4145,Image SLES15-SP6-BYOS-GCE-2024-4145,Image SLES15-SP6-CHOST-BYOS-2024-4145,Image SLES15-SP6-CHOST-BYOS-Aliyun-2024-4145,Image SLES15-SP6-CHOST-BYOS-Azure-2024-4145,Image SLES15-SP6-CHOST-BYOS-EC2-2024-4145,Image SLES15-SP6-CHOST-BYOS-GCE-2024-4145,Image SLES15-SP6-CHOST-BYOS-GDC-2024-4145,Image SLES15-SP6-CHOST-BYOS-SAP-CCloud-2024-4145,Image SLES15-SP6-EC2-2024-4145,Image SLES15-SP6-EC2-ECS-HVM-2024-4145,Image SLES15-SP6-GCE-2024-4145,Image SLES15-SP6-HPC-2024-4145,Image SLES15-SP6-HPC-Azure-2024-4145,Image SLES15-SP6-HPC-BYOS-2024-4145,Image SLES15-SP6-HPC-BYOS-Azure-2024-4145,Image SLES15-SP6-HPC-BYOS-EC2-2024-4145,Image SLES15-SP6-HPC-BYOS-GCE-2024-4145,Image SLES15-SP6-HPC-EC2-2024-4145,Image SLES15-SP6-HPC-GCE-2024-4145,Image SLES15-SP6-Hardened-BYOS-2024-4145,Image SLES15-SP6-Hardened-BYOS-Azure-2024-4145,Image SLES15-SP6-Hardened-BYOS-EC2-2024-4145,Image SLES15-SP6-Hardened-BYOS-GCE-2024-4145,Image SLES15-SP6-SAP-2024-4145,Image SLES15-SP6-SAP-Azure-2024-4145,Image SLES15-SP6-SAP-Azure-LI-BYOS-2024-4145,Image SLES15-SP6-SAP-Azure-LI-BYOS-Production-2024-4145,Image SLES15-SP6-SAP-Azure-VLI-BYOS-2024-4145,Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production-2024-4145,Image SLES15-SP6-SAP-BYOS-2024-4145,Image SLES15-SP6-SAP-BYOS-Azure-2024-4145,Image SLES15-SP6-SAP-BYOS-EC2-2024-4145,Image SLES15-SP6-SAP-BYOS-GCE-2024-4145,Image SLES15-SP6-SAP-EC2-2024-4145,Image SLES15-SP6-SAP-GCE-2024-4145,Image SLES15-SP6-SAP-Hardened-2024-4145,Image SLES15-SP6-SAP-Hardened-Azure-2024-4145,Image SLES15-SP6-SAP-Hardened-BYOS-2024-4145,Image SLES15-SP6-SAP-Hardened-BYOS-Azure-2024-4145,Image SLES15-SP6-SAP-Hardened-BYOS-EC2-2024-4145,Image SLES15-SP6-SAP-Hardened-BYOS-GCE-2024-4145,Image SLES15-SP6-SAP-Hardened-EC2-2024-4145,Image SLES15-SP6-SAP-Hardened-GCE-2024-4145,Image SLES15-SP6-SAPCAL-2024-4145,Image SLES15-SP6-SAPCAL-Azure-2024-4145,Image SLES15-SP6-SAPCAL-EC2-2024-4145,Image SLES15-SP6-SAPCAL-GCE-2024-4145,Image ai_15_6-2024-4145,SUSE-2024-4145,SUSE-SLE-Module-Basesystem-15-SP6-2024-4145,openSUSE-SLE-15.6-2024-4145 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20244145-1/ Link for SUSE-SU-2024:4145-1 https://lists.suse.com/pipermail/sle-security-updates/2024-December/019902.html E-Mail link for SUSE-SU-2024:4145-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1233773 SUSE Bug 1233773 https://www.suse.com/security/cve/CVE-2024-10524/ SUSE CVE CVE-2024-10524 page Container containers/pytorch:2-nvidia Container containers/pytorch:2.5.0 Image SLES15-SP6 Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-CHOST-BYOS-GDC Image SLES15-SP6-CHOST-BYOS-SAP-CCloud Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-BYOS-GCE Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-HPC-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-Hardened-BYOS-GCE Image SLES15-SP6-SAP Image SLES15-SP6-SAP-Azure Image SLES15-SP6-SAP-Azure-LI-BYOS Image SLES15-SP6-SAP-Azure-LI-BYOS-Production Image SLES15-SP6-SAP-Azure-VLI-BYOS Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production Image SLES15-SP6-SAP-BYOS Image SLES15-SP6-SAP-BYOS-Azure Image SLES15-SP6-SAP-BYOS-EC2 Image SLES15-SP6-SAP-BYOS-GCE Image SLES15-SP6-SAP-EC2 Image SLES15-SP6-SAP-GCE Image SLES15-SP6-SAP-Hardened Image SLES15-SP6-SAP-Hardened-Azure Image SLES15-SP6-SAP-Hardened-BYOS Image SLES15-SP6-SAP-Hardened-BYOS-Azure Image SLES15-SP6-SAP-Hardened-BYOS-EC2 Image SLES15-SP6-SAP-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Hardened-EC2 Image SLES15-SP6-SAP-Hardened-GCE Image SLES15-SP6-SAPCAL Image SLES15-SP6-SAPCAL-Azure Image SLES15-SP6-SAPCAL-EC2 Image SLES15-SP6-SAPCAL-GCE Image ai_15_6 SUSE Linux Enterprise Module for Basesystem 15 SP6 openSUSE Leap 15.6 wget-1.20.3-150600.19.9.1 wget-lang-1.20.3-150600.19.9.1 wget-1.20.3-150600.19.9.1 as a component of Container containers/pytorch:2-nvidia wget-1.20.3-150600.19.9.1 as a component of Container containers/pytorch:2.5.0 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-Azure-Basic wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-Azure-Standard wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-BYOS wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-BYOS-Azure wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-BYOS-EC2 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-BYOS-GCE wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-CHOST-BYOS wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-CHOST-BYOS-Aliyun wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-CHOST-BYOS-Azure wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-CHOST-BYOS-EC2 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-CHOST-BYOS-GCE wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-CHOST-BYOS-GDC wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-CHOST-BYOS-SAP-CCloud wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-EC2 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-EC2-ECS-HVM wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-GCE wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-HPC wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-HPC-Azure wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-HPC-BYOS wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-HPC-BYOS-Azure wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-HPC-BYOS-EC2 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-HPC-BYOS-GCE wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-HPC-EC2 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-HPC-GCE wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-Hardened-BYOS wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-Hardened-BYOS-Azure wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-Hardened-BYOS-EC2 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-Hardened-BYOS-GCE wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Azure wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Azure-LI-BYOS wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Azure-LI-BYOS-Production wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Azure-VLI-BYOS wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-BYOS wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-BYOS-Azure wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-BYOS-EC2 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-BYOS-GCE wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-EC2 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-GCE wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Hardened wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Hardened-Azure wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS-Azure wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS-EC2 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Hardened-BYOS-GCE wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Hardened-EC2 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAP-Hardened-GCE wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAPCAL wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAPCAL-Azure wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAPCAL-EC2 wget-1.20.3-150600.19.9.1 as a component of Image SLES15-SP6-SAPCAL-GCE wget-1.20.3-150600.19.9.1 as a component of Image ai_15_6 wget-1.20.3-150600.19.9.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 wget-1.20.3-150600.19.9.1 as a component of openSUSE Leap 15.6 wget-lang-1.20.3-150600.19.9.1 as a component of openSUSE Leap 15.6 Applications that use Wget to access a remote resource using shorthand URLs and pass arbitrary user credentials in the URL are vulnerable. In these cases attackers can enter crafted credentials which will cause Wget to access an arbitrary host. CVE-2024-10524 Container containers/pytorch:2-nvidia:wget-1.20.3-150600.19.9.1 Container containers/pytorch:2.5.0:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-Azure-Basic:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-Azure-Standard:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-BYOS-Azure:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-BYOS-EC2:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-BYOS-GCE:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-BYOS:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-CHOST-BYOS-Aliyun:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-CHOST-BYOS-Azure:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-CHOST-BYOS-EC2:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-CHOST-BYOS-GCE:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-CHOST-BYOS-GDC:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-CHOST-BYOS-SAP-CCloud:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-CHOST-BYOS:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-EC2-ECS-HVM:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-EC2:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-GCE:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-HPC-Azure:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-HPC-BYOS-Azure:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-HPC-BYOS-EC2:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-HPC-BYOS-GCE:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-HPC-BYOS:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-HPC-EC2:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-HPC-GCE:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-HPC:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-Hardened-BYOS-Azure:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-Hardened-BYOS-EC2:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-Hardened-BYOS-GCE:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-Hardened-BYOS:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Azure-LI-BYOS-Production:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Azure-LI-BYOS:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Azure-VLI-BYOS:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Azure:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-BYOS-Azure:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-BYOS-EC2:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-BYOS-GCE:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-BYOS:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-EC2:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-GCE:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Hardened-Azure:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Hardened-BYOS-Azure:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Hardened-BYOS-EC2:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Hardened-BYOS-GCE:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Hardened-BYOS:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Hardened-EC2:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Hardened-GCE:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP-Hardened:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAP:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAPCAL-Azure:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAPCAL-EC2:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAPCAL-GCE:wget-1.20.3-150600.19.9.1 Image SLES15-SP6-SAPCAL:wget-1.20.3-150600.19.9.1 Image SLES15-SP6:wget-1.20.3-150600.19.9.1 Image ai_15_6:wget-1.20.3-150600.19.9.1 SUSE Linux Enterprise Module for Basesystem 15 SP6:wget-1.20.3-150600.19.9.1 openSUSE Leap 15.6:wget-1.20.3-150600.19.9.1 openSUSE Leap 15.6:wget-lang-1.20.3-150600.19.9.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20244145-1/ https://www.suse.com/security/cve/CVE-2024-10524.html CVE-2024-10524 https://bugzilla.suse.com/1233256 SUSE Bug 1233256 https://bugzilla.suse.com/1233773 SUSE Bug 1233773