[Bug 728288] New: wget don't solve filenames correctly
https://bugzilla.novell.com/show_bug.cgi?id=728288 https://bugzilla.novell.com/show_bug.cgi?id=728288#c0 Summary: wget don't solve filenames correctly Classification: openSUSE Product: openSUSE 12.1 Version: RC 2 Platform: Other OS/Version: Other Status: NEW Severity: Critical Priority: P5 - None Component: Basesystem AssignedTo: bnc-team-screening@forge.provo.novell.com ReportedBy: dkukawka@suse.com QAContact: qa@suse.de Found By: --- Blocker: --- On openSUSE 11.4 wget (wget-1.12-2.1) worked this way: wget "http://software.opensuse.org/search/download?base=openSUSE%3A11.4&file=openSUSE%3A%2F11.4%2Fstandard%2Fx86_64%2Fwget-1.12-2.1.x86_64.rpm&query=wget" --> file wget-1.12-2.1.x86_64.rpm was downloaded to the harddisk. on openSUSE 12.1RC2: --> the file is named 'download\?base\=openSUSE\:11.4\&file\=openSUSE\:%2F11.4%2Fstandard%2Fx86_64%2Fwget-1.12-2.1.x86_64.rpm\&query\=wget' -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728288 https://bugzilla.novell.com/show_bug.cgi?id=728288#c Andreas Jaeger <aj@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|bnc-team-screening@forge.pr |max@suse.com |ovo.novell.com | -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728288 https://bugzilla.novell.com/show_bug.cgi?id=728288#c1 Glenn Doig <doiggl@velocitynet.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |doiggl@velocitynet.com.au --- Comment #1 from Glenn Doig <doiggl@velocitynet.com.au> 2011-11-10 07:52:22 UTC --- Get the file from the mirror directly. The first run locates the mirror used and provides a fully qualified name for the file. The second run gets the fully qualified file. Glenn Example: # wget -c "http://software.opensuse.org/search/download?base=openSUSE%3A11.4&file=openSUSE%3A%2F11.4%2Fstandard%2Fx86_64%2Fwget-1.12-2.1.x86_64.rpm&query=wget" asking libproxy about url 'http://software.opensuse.org/search/download?base=openSUSE%3A11.4&file=openSUSE%3A%2F11.4%2Fstandard%2Fx86_64%2Fwget-1.12-2.1.x86_64.rpm&query=wget' libproxy suggest to use 'direct://' --2011-11-10 18:38:25-- http://software.opensuse.org/search/download?base=openSUSE%3A11.4&file=openSUSE%3A%2F11.4%2Fstandard%2Fx86_64%2Fwget-1.12-2.1.x86_64.rpm&query=wget Resolving software.opensuse.org (software.opensuse.org)... 195.135.221.150, 2001:67c:2178:8::19 Connecting to software.opensuse.org (software.opensuse.org)|195.135.221.150|:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://download.opensuse.org/repositories/openSUSE:/11.4/standard/x86_64/wge... [following] asking libproxy about url 'http://download.opensuse.org/repositories/openSUSE:/11.4/standard/x86_64/wge...' libproxy suggest to use 'direct://' --2011-11-10 18:38:26-- http://download.opensuse.org/repositories/openSUSE:/11.4/standard/x86_64/wge... Resolving download.opensuse.org (download.opensuse.org)... 195.135.221.134, 2001:67c:2178:8::13 Connecting to download.opensuse.org (download.opensuse.org)|195.135.221.134|:80... connected. HTTP request sent, awaiting response... 302 Found Location: http://download.opensuse.org/distribution/11.4/repo/oss/suse/x86_64/wget-1.1... [following] asking libproxy about url 'http://download.opensuse.org/distribution/11.4/repo/oss/suse/x86_64/wget-1.1...' libproxy suggest to use 'direct://' --2011-11-10 18:38:27-- http://download.opensuse.org/distribution/11.4/repo/oss/suse/x86_64/wget-1.1... Reusing existing connection to download.opensuse.org:80. HTTP request sent, awaiting response... 302 Found Location: http://opensuse.mirror.aussiehq.net.au/distribution/11.4/repo/oss/suse/x86_6... [following] asking libproxy about url 'http://opensuse.mirror.aussiehq.net.au/distribution/11.4/repo/oss/suse/x86_6...' libproxy suggest to use 'direct://' --2011-11-10 18:38:28-- http://opensuse.mirror.aussiehq.net.au/distribution/11.4/repo/oss/suse/x86_6... Resolving opensuse.mirror.aussiehq.net.au (opensuse.mirror.aussiehq.net.au)... 117.55.229.1, 2405:5000:2:185::11 Connecting to opensuse.mirror.aussiehq.net.au (opensuse.mirror.aussiehq.net.au)|117.55.229.1|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 450284 (440K) [application/x-rpm] Saving to: `download?base=openSUSE:11.4&file=openSUSE:%2F11.4%2Fstandard%2Fx86_64%2Fwget-1.12-2.1.x86_64.rpm&query=wget' 100%[=========================>] 50,284 1.49M/s in 0.3s 2011-11-10 18:38:28 (1.49 MB/s) - `download?base=openSUSE:11.4&file=openSUSE:%2F11.4%2Fstandard%2Fx86_64%2Fwget-1.12-2.1.x86_64.rpm&query=wget' saved [450284/450284] # # # wget -c http://opensuse.mirror.aussiehq.net.au/distribution/11.4/repo/oss/suse/x86_6... asking libproxy about url 'http://opensuse.mirror.aussiehq.net.au/distribution/11.4/repo/oss/suse/x86_6...' libproxy suggest to use 'direct://' --2011-11-10 18:39:22-- http://opensuse.mirror.aussiehq.net.au/distribution/11.4/repo/oss/suse/x86_6... Resolving opensuse.mirror.aussiehq.net.au (opensuse.mirror.aussiehq.net.au)... 117.55.229.1, 2405:5000:2:185::11 Connecting to opensuse.mirror.aussiehq.net.au (opensuse.mirror.aussiehq.net.au)|117.55.229.1|:80... connected. HTTP request sent, awaiting response... 200 OK Length: 450284 (440K) [application/x-rpm] Saving to: `wget-1.12-2.1.x86_64.rpm' 100%[=========================>] 450,284 1.49M/s in 0.3s 2011-11-10 18:39:22 (1.49 MB/s) - `wget-1.12-2.1.x86_64.rpm' saved [450284/450284] -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=728288 https://bugzilla.novell.com/show_bug.cgi?id=728288#c2 Reinhard Max <max@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FEATURE Severity|Critical |Normal --- Comment #2 from Reinhard Max <max@suse.com> 2011-11-23 16:42:15 CET --- This was an intentional change to resolve a security issue: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2252 To restore the old behaviour (and the vulnerability), use the --trust-server-names command line switch, or add the line "trust_server_names = yes" to your ~/.wgetrc file. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply＠novell.com