rpms/wget
7
0
Fork 0
Code Issues Pull Requests Releases Activity
A utility for retrieving files using the HTTP or FTP protocols
7 Commits 9 Branches 24 Tags 626 KiB
Diff 100%
19edc769bb
Go to file
RHEL Packaging Agent 19edc769bb Fix CVE-2026-58471: buffer overflow in convert_fname() 
Backport upstream fix for CVE-2026-58471, a buffer overflow in
convert_fname() in src/url.c. The patch (from upstream commit
c2640fe5171c59f87c58dc9fcb195b2d18b010ee) fixes incorrect buffer
size tracking during iconv filename conversion by removing the
flawed `done` variable and replacing the E2BIG reallocation logic
with a correct implementation that properly tracks used bytes,
ensures buffer growth, and updates all size/pointer variables
after reallocation.

CVE: CVE-2026-58471
Upstream patches:
 - c2640fe517.patch
Resolves: RHEL-194519

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-21 09:17:02 +00:00
.gitignore Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior 2024-07-11 07:12:22 +02:00
gating.yaml Bring gating.yaml over from Brew dist-git 2023-03-10 12:03:46 -08:00
sources Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior 2024-07-11 07:12:22 +02:00
wget-1.17-path.patch Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior 2024-07-11 07:12:22 +02:00
wget-1.19.5-Add-TLS-1.3-support-for-GnuTLS.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-ca-cert-too-verbose.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-covscan-important-issues.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-CVE-2019-5953.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-CVE-2024-38428.patch Resolves: RHEL-43559 - Misinterpretation of input may lead to improper behavior 2024-07-11 07:12:22 +02:00
wget-1.19.5-CVE-2026-58471.patch Fix CVE-2026-58471: buffer overflow in convert_fname() 2026-07-21 09:17:02 +00:00
wget-1.19.5-CVE-2026-58472.patch Fix CVE-2026-58472: integer+buffer overflow in html_quote_string() 2026-07-21 09:17:02 +00:00
wget-1.19.5-Don-t-limit-the-test-suite-HTTPS-server-to-TLSv1.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-Dont-save-userpw-with---xattr.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-Dont-use-extended-attributes---xattr-by-default.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-Enable-post-handshake-auth-under-gnutls-on-TLS1.3.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-no_proxy-dot-prefix.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-no_proxy-tests.patch Auto sync2gitlab import of wget-1.19.5-10.el8.src.rpm 2022-05-26 16:14:59 -04:00
wget-1.19.5-no-log-when-quiet.patch Auto sync2gitlab import of wget-1.19.5-11.el8.src.rpm 2022-12-15 06:10:47 +00:00
wget.spec Fix CVE-2026-58471: buffer overflow in convert_fname() 2026-07-21 09:17:02 +00:00