wget (1.13.4-3+deb7u2) stable-security; urgency=high

wget (1.13.4-3+deb7u2) stable-security; urgency=high

From: Darshit Shah <darnir@gmail.com>
Date: Sun, 07 Sep 2014 19:11:17 +0000
Subject: CVE-2014-4877: Arbitrary Symlink Access

Wget was susceptible to a symlink attack which could create arbitrary files, directories or symbolic links and set their permissions when retrieving a directory recursively through FTP. This commit changes the default settings in Wget such that Wget no longer creates local symbolic links, but rather traverses them and retrieves the pointed-to file in such a retrieval.

The old behaviour can be attained by passing the --retr-symlinks=no option to the Wget invocation command.

-- Thorsten Alteholz <debian@alteholz.de> Wed, 29 Oct 2014 19:00:14 +0100

gnupg gpgv updated 1.4.12-7+deb7u2

root@(none):/# apt-get upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages will be upgraded:
  gnupg gpgv
2 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 2,179 kB of archives.
After this operation, 374 kB disk space will be freed.
Do you want to continue [Y/n]? y
Get:1 http://security.debian.org/ wheezy/updates/main gpgv amd64 1.4.12-7+deb7u2 [226 kB]
Get:2 http://security.debian.org/ wheezy/updates/main gnupg amd64 1.4.12-7+deb7u2 [1,953 kB]
Fetched 2,179 kB in 0s (2,788 kB/s)
Reading changelogs... Done
(Reading database ... 28496 files and directories currently installed.)
Preparing to replace gpgv 1.4.12-7+deb7u1 (using .../gpgv_1.4.12-7+deb7u2_amd64.deb) ...
Unpacking replacement gpgv ...
Processing triggers for man-db ...
Setting up gpgv (1.4.12-7+deb7u2) ...
(Reading database ... 28496 files and directories currently installed.)
Preparing to replace gnupg 1.4.12-7+deb7u1 (using .../gnupg_1.4.12-7+deb7u2_amd64.deb) ...
Unpacking replacement gnupg ...
Processing triggers for man-db ...
Processing triggers for install-info ...
Setting up gnupg (1.4.12-7+deb7u2) ...

PHP: It's not possible to have the mail() function use an SMTP server on non-Windows systems.

linups
sendmail you...