Description:
The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols.
Security Fix(es):
* wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption (CVE-2026-58471)
* wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute (CVE-2026-58472)
Bug Fix(es) and Enhancement(s):
* wget async unsafe code in signal handler context [almalinux-10.2.z] (JIRA:AlmaLinux-220498)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
| Architecture |
Package |
Checksum |
| aarch64 |
wget-1.24.5-8.el10_2.aarch64.rpm |
33d89e817d5ca24c5e4d0f8b9191aa06c6ef66a20f92561a6f2645e02ccb06ac |
| ppc64le |
wget-1.24.5-8.el10_2.ppc64le.rpm |
30da80c0af429d036b51e241bd68f9465be3bdcfd02db4ec5b995dcd574a5d4c |
| s390x |
wget-1.24.5-8.el10_2.s390x.rpm |
57ab54155e7daa3b9de13f1593104750c1145256ba14d9f847b7e6086880296f |
| x86_64 |
wget-1.24.5-8.el10_2.x86_64.rpm |
90fcb1cf158388279656eaabfe883bb51e76001298cea261c1dd23d96aaef2d4 |
| x86_64_v2 |
wget-1.24.5-8.el10_2.x86_64_v2.rpm |
46c791ddc173d4e6bccfa9145df954c3cd70a90514698c1372c8b75987fa0919 |