rpms/wget
7
0
Fork 0
Code Issues Pull Requests Releases Activity
A utility for retrieving files using the HTTP or FTP protocols
197 Commits 9 Branches 24 Tags 626 KiB
Diff 100%
008cb44596
Go to file
RHEL Packaging Agent 008cb44596 Fix CVE-2026-58471: buffer overflow in convert_fname() 
Backport upstream commit c2640fe5171c59f87c58dc9fcb195b2d18b010ee
to fix a buffer overflow in the convert_fname() function in
src/url.c (CVE-2026-58471). The patch corrects buffer size
handling during iconv E2BIG reallocation, preventing potential
out-of-bounds writes when converting filenames between character
encodings.

CVE: CVE-2026-58471
Upstream patches:
 - c2640fe517.patch
Resolves: RHEL-194518

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-15 10:34:56 +00:00
.fmf Sources import 2024-07-24 09:40:26 +02:00
.gitignore Sources import 2024-07-24 09:40:26 +02:00
ci.fmf Sources import 2024-07-24 09:40:26 +02:00
gating.yaml Sources import 2024-07-24 09:40:26 +02:00
plans.fmf https://issues.redhat.com/browse/RHELMISC-13072 2025-06-12 13:26:54 +02:00
sources Sources import 2024-07-24 09:40:26 +02:00
wget-1.17-path.patch Sources import 2024-07-24 09:40:26 +02:00
wget-1.21-CVE-2024-38428.patch Sources import 2024-07-24 09:40:26 +02:00
wget-1.21-metalink-man.patch Sources import 2024-07-24 09:40:26 +02:00
wget-1.24.5-CVE-2026-58471.patch Fix CVE-2026-58471: buffer overflow in convert_fname() 2026-07-15 10:34:56 +00:00
wget-1.24.5-CVE-2026-58472.patch Fix CVE-2026-58472: integer+buffer overflow in html_quote_string() 2026-07-15 10:31:50 +00:00
wget-1.24.5-no-nettle.patch Revert back to using GnuTLS as the TLS backend 2024-12-11 17:36:47 +09:00
wget.spec Fix CVE-2026-58471: buffer overflow in convert_fname() 2026-07-15 10:34:56 +00:00