rpms/wget
7
0
Fork 0
Code Issues Pull Requests Releases Activity
A utility for retrieving files using the HTTP or FTP protocols
196 Commits 9 Branches 24 Tags 646 KiB
Diff 100%
68032084e6
Go to file
RHEL Packaging Agent 68032084e6 Fix CVE-2026-58472: integer+buffer overflow in html_quote_string() 
Backport fix for CVE-2026-58472 to wget-1.24.5. The patch
addresses an integer and buffer overflow in html_quote_string()
in src/convert.c by using overflow-safe arithmetic
(INT_ADD_OK) for size calculations and correcting off-by-one
errors in size constants. Comprehensive unit tests for
html_quote_string(), construct_relative(), match_except_index(),
and find_fragment() are included.

CVE: CVE-2026-58472
Upstream patches:
 - dd692d9cea.patch
 - f76978a51b.patch
Resolves: RHEL-210625

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-15 10:31:50 +00:00
.fmf Sources import 2024-07-24 09:40:26 +02:00
.gitignore Sources import 2024-07-24 09:40:26 +02:00
ci.fmf Sources import 2024-07-24 09:40:26 +02:00
gating.yaml Sources import 2024-07-24 09:40:26 +02:00
plans.fmf https://issues.redhat.com/browse/RHELMISC-13072 2025-06-12 13:26:54 +02:00
sources Sources import 2024-07-24 09:40:26 +02:00
wget-1.17-path.patch Sources import 2024-07-24 09:40:26 +02:00
wget-1.21-CVE-2024-38428.patch Sources import 2024-07-24 09:40:26 +02:00
wget-1.21-metalink-man.patch Sources import 2024-07-24 09:40:26 +02:00
wget-1.24.5-CVE-2026-58472.patch Fix CVE-2026-58472: integer+buffer overflow in html_quote_string() 2026-07-15 10:31:50 +00:00
wget-1.24.5-no-nettle.patch Revert back to using GnuTLS as the TLS backend 2024-12-11 17:36:47 +09:00
wget.spec Fix CVE-2026-58472: integer+buffer overflow in html_quote_string() 2026-07-15 10:31:50 +00:00