[ALSA-2026:62142] Moderate: wget security, bug fix, and enhancement update
Type:
security
Severity:
moderate
Release date:
2026-09-02
Description:
The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): * wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption (CVE-2026-58471) * wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute (CVE-2026-58472) Bug Fix(es) and Enhancement(s): * wget async unsafe code in signal handler context [almalinux-10.2.z] (JIRA:AlmaLinux-220498) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 wget-1.24.5-8.el10_2.aarch64.rpm 33d89e817d5ca24c5e4d0f8b9191aa06c6ef66a20f92561a6f2645e02ccb06ac
ppc64le wget-1.24.5-8.el10_2.ppc64le.rpm 30da80c0af429d036b51e241bd68f9465be3bdcfd02db4ec5b995dcd574a5d4c
s390x wget-1.24.5-8.el10_2.s390x.rpm 57ab54155e7daa3b9de13f1593104750c1145256ba14d9f847b7e6086880296f
x86_64 wget-1.24.5-8.el10_2.x86_64.rpm 90fcb1cf158388279656eaabfe883bb51e76001298cea261c1dd23d96aaef2d4
x86_64_v2 wget-1.24.5-8.el10_2.x86_64_v2.rpm 46c791ddc173d4e6bccfa9145df954c3cd70a90514698c1372c8b75987fa0919
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.