rpms/wget
7
0
Fork 0
Code Issues Pull Requests Releases Activity
A utility for retrieving files using the HTTP or FTP protocols
15 Commits 9 Branches 24 Tags 646 KiB
Diff 100%
a596752c69
Go to file
RHEL Packaging Agent a596752c69 Fix CVE-2026-58472: integer+buffer overflow in html_quote_string() 
Backport fix for CVE-2026-58472 to wget-1.21.1. The patch
addresses an integer and buffer overflow in html_quote_string()
by using INT_ADD_OK for safe integer arithmetic when calculating
the output buffer size for HTML entity encoding. Also includes
the follow-up fix for an off-by-1 error in the size calculation
for each entity-encoded character, along with unit tests.

The combined fix is added as Patch6: wget-1.21-CVE-2026-58472.patch
based on upstream commits dd692d9 and f76978a.

CVE: CVE-2026-58472
Upstream patches:
 - dd692d9cea.patch
 - f76978a51b.patch
Resolves: RHEL-210636

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-03 11:51:17 +00:00
.fmf Adding tmt test files 2023-03-30 10:21:18 +00:00
.gitignore Merged update from upstream sources 2021-01-22 09:50:50 +00:00
ci.fmf Adding tmt test files 2023-03-30 10:21:18 +00:00
gating.yaml Update 4 files 2026-05-07 10:38:47 +00:00
plans.fmf Update 4 files 2026-05-07 10:38:47 +00:00
sources Merged update from upstream sources 2021-01-22 09:50:50 +00:00
wget-1.17-path.patch RHEL 9.0.0 Alpha bootstrap 2020-10-15 13:43:03 -07:00
wget-1.21-CVE-2024-38428.patch Resolves: RHEL-43226 - Misinterpretation of input may lead to improper behavior 2024-07-15 10:26:23 +02:00
wget-1.21-CVE-2026-58472.patch Fix CVE-2026-58472: integer+buffer overflow in html_quote_string() 2026-08-03 11:51:17 +00:00
wget-1.21-metalink-man.patch Resolves: #2017842 - Two different segfaults when downloading multiple files 2021-11-03 13:19:55 +01:00
wget-1.21-segfault.patch Resolves: #2017842 - Two different segfaults when downloading multiple files 2021-11-03 13:19:55 +01:00
wget-1.21-strtol.patch Resolves: #1949045 - wget in F33 i686 is unable to download files larger than 2GiB 2021-04-14 12:22:19 +02:00
wget.spec Fix CVE-2026-58472: integer+buffer overflow in html_quote_string() 2026-08-03 11:51:17 +00:00