Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Fedora 42: wget2 Critical Memory Crash Advisory 2026-28b0f7bd35

fedora
Calendar Grey January 10, 2026
Dist Fedora Esm H88
The Fedora 42 release of wget2 includes critical updates addressing key security issues. Stay protected with upgrades!
New version 2.2.1

Summary

GNU Wget2 is the successor of GNU Wget, a file and recursive website

downloader.

Designed and written from scratch it wraps around libwget, that provides the

basic functions needed by a web client.

Wget2 works multi-threaded and uses many features to allow fast operation.

In many cases Wget2 downloads much faster than Wget1.x due to HTTP2, HTTP

compression, parallel connections and use of If-Modified-Since HTTP header.

Update Information:

New version 2.2.1

Topics%20covered

Topics Covered

security advisory fedora memory corruption important network attack downloader

Change Log

* Tue Jan 6 2026 LuK1337 - 2.2.1-1 - New version 2.2.1

References


[ 1 ] Bug #2425777 - CVE-2025-69195 wget2: GNU Wget2: Memory corruption and crash via filename sanitization logic with attacker-controlled URLs [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2425777 [ 2 ] Bug #2425778 - CVE-2025-69195 wget2: GNU Wget2: Memory corruption and crash via filename sanitization logic with attacker-controlled URLs [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2425778 [ 3 ] Bug #2425782 - CVE-2025-69194 wget2: Arbitrary File Write via Metalink Path Traversal in GNU Wget2 [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2425782 [ 4 ] Bug #2425783 - CVE-2025-69194 wget2: Arbitrary File Write via Metalink Path Traversal in GNU Wget2 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2425783 [ 5 ] Bug #2426325 - wget2-2.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2426325

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-28b0f7bd35' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: wget2
Product: Fedora 42
Version: 2.2.1
Release: 1.fc42
URL: https://gitlab.com/gnuwget/wget2
Summary: An advanced file and recursive website downloader

Topics%20covered

Topics Covered

security advisory fedora memory corruption important network attack downloader

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here