rpms/wget
7
0
Fork 0
Code Issues Pull Requests Releases Activity
A utility for retrieving files using the HTTP or FTP protocols
8 Commits 9 Branches 24 Tags 626 KiB
Diff 100%
c8s
Go to file
RHEL Packaging Agent cd93d10bd8 Fix CVE-2026-58469: buffer underflow in clean_metalink_string() 
Backport fix for CVE-2026-58469 to wget-1.19.5. The patch
addresses a buffer underflow in clean_metalink_string() in
src/metalink.c by replacing manual whitespace checks with
isspace(), adding a bounds guard, fixing an inverted
trailing-space condition, and including the required ctype.h
header. Three upstream commits (37a40fcb, 7b1cdecc, 82d945ff)
are combined into a single patch.

CVE: CVE-2026-58469
Upstream patches:
 - 37a40fcb45.patch
 - 7b1cdecc49.patch
 - 82d945ff5d.patch
Resolves: RHEL-212496

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-21 09:20:00 +00:00
.gitignore Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior 2024-07-11 07:12:22 +02:00
gating.yaml Bring gating.yaml over from Brew dist-git 2023-03-10 12:03:46 -08:00
sources Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior 2024-07-11 07:12:22 +02:00
wget-1.17-path.patch Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior 2024-07-11 07:12:22 +02:00
wget-1.19.5-Add-TLS-1.3-support-for-GnuTLS.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-ca-cert-too-verbose.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-covscan-important-issues.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-CVE-2019-5953.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-CVE-2024-38428.patch Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior 2024-07-11 07:12:22 +02:00
wget-1.19.5-CVE-2026-58469.patch Fix CVE-2026-58469: buffer underflow in clean_metalink_string() 2026-07-21 09:20:00 +00:00
wget-1.19.5-CVE-2026-58471.patch Fix CVE-2026-58471: buffer overflow in convert_fname() 2026-07-21 09:17:02 +00:00
wget-1.19.5-CVE-2026-58472.patch Fix CVE-2026-58472: integer+buffer overflow in html_quote_string() 2026-07-21 09:17:02 +00:00
wget-1.19.5-Don-t-limit-the-test-suite-HTTPS-server-to-TLSv1.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-Dont-save-userpw-with---xattr.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-Dont-use-extended-attributes---xattr-by-default.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-Enable-post-handshake-auth-under-gnutls-on-TLS1.3.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-no_proxy-dot-prefix.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-no_proxy-tests.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-no-log-when-quiet.patch Auto sync2gitlab import of wget-1.19.5-11.el8.src.rpm 2022-12-15 06:10:47 +00:00
wget.spec Fix CVE-2026-58469: buffer underflow in clean_metalink_string() 2026-07-21 09:20:00 +00:00