Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 512
Alerts This Week
Warning Icon 1 512

Fedora 43 wget1 Critical Memory Corruption DoS Fix 2026-7bbb52b49d

fedora
Calendar Grey July 24, 2026
Scroller Fedora
This advisory details critical fixes for wget1 in Fedora 43 addressing multiple security issues that could lead to data loss.
A Fedora update for wget1 addresses multiple vulnerabilities, including a server-side request forgery and buffer overflow, improving the security of file retrieval via HTTP and FTP...

Summary

GNU Wget is a file retrieval utility which can use either the HTTP or

FTP protocols. Wget features include the ability to work in the

background while you are logged out, recursive retrieval of

directories, file name wildcard matching, remote file timestamp

storage and comparison, use of Rest with FTP servers and Range with

HTTP servers to retrieve files over slow or unstable connections,

support for Proxy servers, and configurability.

Update Information:

Fix for CVE-2026-15146, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472

Topics%20covered

Topics Covered

security advisory denial of service fedora memory corruption important wget1

Change Log

* Thu Jul 16 2026 Michal Ruprich - 1.25.0-3 - Fix for CVE-2026-15146, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472

References


[ 1 ] Bug #2499188 - CVE-2026-15146 wget1: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2499188 [ 2 ] Bug #2499583 - CVE-2026-58471 wget1: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2499583 [ 3 ] Bug #2499957 - CVE-2026-58470 wget1: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2499957 [ 4 ] Bug #2499971 - CVE-2026-58472 wget1: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2499971

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7bbb52b49d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: wget1
Product: Fedora 43
Version: 1.25.0
Release: 3.fc43
URL: http://www.gnu.org/software/wget/
Summary: A utility for retrieving files using the HTTP or FTP protocols

Topics%20covered

Topics Covered

security advisory denial of service fedora memory corruption important wget1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.