Re: Vulnerability Report - 4 findings in GNU Wget 1.25.0

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------jRznYhyKi2xVQtGA9VoA4pFQ
Content-Type: multipart/mixed; boundary="------------s6cRgRFeT030b6qeHLQlhKbf";
 protected-headers="v1"
From: =?UTF-8?Q?Tim_R=C3=BChsen?= <[email protected]>
To: Tristan <[email protected]>, [email protected]
Message-ID: <[email protected]>
Subject: Re: Vulnerability Report - 4 findings in GNU Wget 1.25.0
References: <CAA1XrhOeUGDfVEM6xUm9m_BBLbVDyOo78F_=deu_eU655hzfCg@mail.gmail.com>
In-Reply-To: <CAA1XrhOeUGDfVEM6xUm9m_BBLbVDyOo78F_=deu_eU655hzfCg@mail.gmail.com>

--------------s6cRgRFeT030b6qeHLQlhKbf
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
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--------------s6cRgRFeT030b6qeHLQlhKbf--

--------------jRznYhyKi2xVQtGA9VoA4pFQ
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"

-----BEGIN PGP SIGNATURE-----
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=myFR
-----END PGP SIGNATURE-----

--------------jRznYhyKi2xVQtGA9VoA4pFQ--