Stay Secure with the Latest Linux Advisories

security advisorydenial of servicefedora

Fedora 43 wget1 Critical Memory Corruption DoS Fix 2026-7bbb52b49d

A Fedora update for wget1 addresses multiple vulnerabilities, including a server-side request forgery and buffer overflow, improving the security of file retrieval via HTTP and FTP protocols.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-7bbb52b49d 2026-07-25 01:17:32.017870+00:00 -------------------------------------------------------------------------------- Name : wget1 Product : Fedora 43 Version : 1.25.0 Release : 3.fc43 URL : http://www.gnu.org/software/wget/ Summary : A utility for retrieving files using the HTTP or FTP protocols Description : GNU Wget is a file retrieval utility which can use either the HTTP or FTP protocols. Wget features include the ability to work in the background while you are logged out, recursive retrieval of directories, file name wildcard matching, remote file timestamp storage and comparison, use of Rest with FTP servers and Range with HTTP servers to retrieve files over slow or unstable connections, support for Proxy servers, and configurability. -------------------------------------------------------------------------------- Update Information: Fix for CVE-2026-15146, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472 -------------------------------------------------------------------------------- ChangeLog: * Thu Jul 16 2026 Michal Ruprich - 1.25.0-3 - Fix for CVE-2026-15146, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2499188 - CVE-2026-15146 wget1: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2499188 [ 2 ] Bug #2499583 - CVE-2026-58471 wget1: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2499583 [ 3 ] Bug#2499957 - CVE-2026-58470 wget1: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2499957 [ 4 ] Bug #2499971 - CVE-2026-58472 wget1: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2499971 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-7bbb52b49d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new . This advisory details critical fixes for wget1 in Fedora 43 addressing multiple security issues that could lead to data loss.. Fedora, wget1, security issues, software update. . Severity: Important. LinuxSecurity.com Team

Jul 24, 2026 •Important Fedora