rpms/wget
7
0
Fork 0
Code Issues Pull Requests Releases Activity
A utility for retrieving files using the HTTP or FTP protocols
16 Commits 9 Branches 24 Tags 626 KiB
Diff 100%
c9s
Go to file
RHEL Packaging Agent eb49e00e28 Fix CVE-2026-58471: buffer overflow in convert_fname() 
Backport upstream commit c2640fe5171c to fix a buffer overflow
in src/url.c convert_fname() (CVE-2026-58471). The bug was in
incorrect buffer size handling during iconv filename conversion,
where the output buffer tracking used wrong offset calculations.
The patch corrects the reallocation logic in the E2BIG branch
and simplifies the null-termination of the converted string.

CVE: CVE-2026-58471
Upstream patches:
 - c2640fe517.patch
Resolves: RHEL-194521

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-03 11:54:09 +00:00
.fmf Adding tmt test files 2023-03-30 10:21:18 +00:00
.gitignore Merged update from upstream sources 2021-01-22 09:50:50 +00:00
ci.fmf Adding tmt test files 2023-03-30 10:21:18 +00:00
gating.yaml Update 4 files 2026-05-07 10:38:47 +00:00
plans.fmf Update 4 files 2026-05-07 10:38:47 +00:00
sources Merged update from upstream sources 2021-01-22 09:50:50 +00:00
wget-1.17-path.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 13:43:03 -07:00
wget-1.21-CVE-2024-38428.patch Resolves: RHEL-43226 - Misinterpretation of input may lead to improper behavior 2024-07-15 10:26:23 +02:00
wget-1.21-CVE-2026-58471.patch Fix CVE-2026-58471: buffer overflow in convert_fname() 2026-08-03 11:54:09 +00:00
wget-1.21-CVE-2026-58472.patch Fix CVE-2026-58472: integer+buffer overflow in html_quote_string() 2026-08-03 11:51:17 +00:00
wget-1.21-metalink-man.patch Resolves: #2017842 - Two different segfaults when downloading multiple files 2021-11-03 13:19:55 +01:00
wget-1.21-segfault.patch Resolves: #2017842 - Two different segfaults when downloading multiple files 2021-11-03 13:19:55 +01:00
wget-1.21-strtol.patch Resolves: #1949045 - wget in F33 i686 is unable to download files larger than 2GiB 2021-04-14 12:22:19 +02:00
wget.spec Fix CVE-2026-58471: buffer overflow in convert_fname() 2026-08-03 11:54:09 +00:00