Red Hat Security Advisory

RHSA-2026:62143

wget security, bug fix, and enhancement update

Released 2026-09-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) wget-1.21.1-11.el9_8

Fixes 2 records

TI-2026-42076 CVE-2026-58472 · GHSA-332r-8pmf-8m9p

GNU Wget 1.25.0 Heap Buffer Overflow via HTML Attribute Encoding

LOW 27

GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying…

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.0039 Published 2026-07-07 Partial fix CWE-190

TI-2026-42075 CVE-2026-58471 · GHSA-vv88-699v-w5rh

GNU Wget 1.25.0 Heap Buffer Overflow via convert_fname() in url.c

LOW 27

GNU Wget through 1.25.0, fixed in commit c2640fe, contains a heap buffer overflow vulnerability in the convert_fname() function within src/url.c that allows remote attackers to trigger memory corruption through a server-…

CVSS 4.0MEDIUM 6.0 Network No auth User interaction EPSS 0.0039 Published 2026-07-07 Partial fix CWE-122