Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
202
security advisorybuffer overflowfile overwriteopenSUSE: wget2 Important Buffer Overflow Fixes CVE-2025-69194 2026:0010-1
An update that fixes two vulnerabilities is now available.. openSUSE Security Update: Security update for wget2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2026:0010-1 Rating: important References: #1255728 #1255729 Cross-References: CVE-2025-69194 CVE-2025-69195 Affected Products: openSUSE Backports SLE-15-SP6 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for wget2 fixes the following issues: - Update to release 2.2.1 * Fix file overwrite issue with metalink [CVE-2025-69194 bsc#1255728] * Fix remote buffer overflow in get_local_filename_real() [CVE-2025-69195 bsc#1255729] * Fix a redirect/mirror regression from 400713ca * Use the local system timestamp when requested via --no-use-server-timestamps * Prevent file truncation with --no-clobber * Improve messages about why URLs are not being followed * Fix metalink with -O/--output-document * Fix sorting of metalink mirrors by priority * Add --show-progress to improve backwards compatibility to wget * Fix buffer overflow in wget_iri_clone() after wget_iri_set_scheme() * Allow 'no_' prefix in config options * Use libnghttp2 for HTTP/2 testing * Set exit status to 8 on 403 response code * Fix convert-links * Fix --server-response for HTTP/1.1 - Update to release 2.2.0 * Don't truncate file when -c and -O are combined * Don't log URI userinfo to logs * Fix downloading multiple files via HTTP/2 * Support connecting with HTTP/1.0 proxies * Ignore 1xx HTTP responses for HTTP/1.1 * Disable TCP Fast Open by default * Fix segfault when OCSP response is missing * Add libproxy support Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods likeYaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP6: zypper in -t patch openSUSE-2026-10=1 Package List: - openSUSE Backports SLE-15-SP6 (aarch64 i586 ppc64le s390x x86_64): libwget4-2.2.1-bp156.2.3.1 wget2-2.2.1-bp156.2.3.1 wget2-devel-2.2.1-bp156.2.3.1 References: https://www.suse.com/security/cve/CVE-2025-69194.html https://www.suse.com/security/cve/CVE-2025-69195.html https://bugzilla.suse.com/1255728 https://bugzilla.suse.com/1255729 . An important update is available for openSUSE to fix multiple issues in wget2, including critical buffer overflows.. openSUSE wget2 update important buffer overflow file overwrite. . Severity: Important. LinuxSecurity.com Team
Jan 12, 2026
•Important
OpenSUSE
203
security advisoryimportantpath traversalMageia 9: wget2 Important Path Traversal Fix MGASA-2026-0002 CVE-2025-69194
MGASA-2026-0002 - Updated wget2 packages fix security vulnerability. MGASA-2026-0002 - Updated wget2 packages fix security vulnerability Publication date: 10 Jan 2026 URL: https://advisories.mageia.org/MGASA-2026-0002.html Type: security Affected Mageia releases: 9 CVE: CVE-2025-69194 Description: Arbitrary File Write via Metalink Path Traversal in GNU Wget2. (CVE-2025-69194) References: - https://bugs.mageia.org/show_bug.cgi?id=34947 - https://www.openwall.com/lists/oss-security/2026/01/07/1 - https://www.cve.org/CVERecord?id=CVE-2025-69194 SRPMS: - 9/core/wget2-2.0.1-1.1.mga9 . Updated wget2 packages for Mageia fix critical path traversal security issue, affecting releases 9 and fix details.. wget2 security update, Mageia security advisory, file write vulnerability, path traversal exploit. . Severity: Important. LinuxSecurity.com Team
Jan 10, 2026
•Important
Mageia
89
security advisoryfedoramemory corruptionFedora 43: wget2 Critical Memory Corruption and File Write Issues 2026:01
New version 2.2.1. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-de1a91fe79 2026-01-08 01:26:39.511506+00:00 -------------------------------------------------------------------------------- Name : wget2 Product : Fedora 43 Version : 2.2.1 Release : 1.fc43 URL : https://gitlab.com/gnuwget/wget2 Summary : An advanced file and recursive website downloader Description : GNU Wget2 is the successor of GNU Wget, a file and recursive website downloader. Designed and written from scratch it wraps around libwget, that provides the basic functions needed by a web client. Wget2 works multi-threaded and uses many features to allow fast operation. In many cases Wget2 downloads much faster than Wget1.x due to HTTP2, HTTP compression, parallel connections and use of If-Modified-Since HTTP header. -------------------------------------------------------------------------------- Update Information: New version 2.2.1 -------------------------------------------------------------------------------- ChangeLog: * Thu Jan 1 2026 LuK1337 - 2.2.1-1 - New version 2.2.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2425777 - CVE-2025-69195 wget2: GNU Wget2: Memory corruption and crash via filename sanitization logic with attacker-controlled URLs [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2425777 [ 2 ] Bug #2425778 - CVE-2025-69195 wget2: GNU Wget2: Memory corruption and crash via filename sanitization logic with attacker-controlled URLs [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2425778 [ 3 ] Bug #2425782 - CVE-2025-69194 wget2: Arbitrary File Write via Metalink Path Traversal in GNU Wget2 [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2425782 [ 4 ] Bug #2425783 - CVE-2025-69194 wget2: Arbitrary File Write via Metalink Path Traversal in GNU Wget2 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2425783 [ 5 ] Bug #2426325 - wget2-2.2.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2426325 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-de1a91fe79' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list --
Jan 08, 2026
•Important
Fedora
99
security advisorysecurity issuecriticalSlackware: wget2 Critical Remote Buffer Overflow SSA:2025-364-02
New wget2 packages are available for Slackware 15.0 and -current to fix security issues.. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 [slackware-security] wget2 (SSA:2025-364-02) New wget2 packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: +--------------------------+ patches/packages/wget2-2.2.1-i586-1_slack15.0.txz: Upgraded. This update fixes bugs and the following security issues: Fix file overwrite issue with metalink. Fix remote buffer overflow in get_local_filename_real(), Fix buffer overflow in wget_iri_clone() after wget_iri_set_scheme(). Shared library .so-version bump. (* Security fix *) +--------------------------+ Where to find the new packages: +-----------------------------+ Thanks to the friendly folks at the OSU Open Source Lab (http://osuosl.org) for donating FTP and rsync hosting to the Slackware project! :-) Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you. Updated package for Slackware 15.0: ftp://ftp.slackware.com/pub/slackware/slackware-15.0/patches/packages/wget2-2.2.1-i586-1_slack15.0.txz Updated package for Slackware x86_64 15.0: ftp://ftp.slackware.com/pub/slackware/slackware64-15.0/patches/packages/wget2-2.2.1-x86_64-1_slack15.0.txz Updated package for Slackware -current: ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/n/wget2-2.2.1-i686-1.txz Updated package for Slackware x86_64 -current: ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/n/wget2-2.2.1-x86_64-1.txz MD5 signatures: +-------------+ Slackware 15.0 package: 06ccc5cb00d1bfae1cf28d8936f672e8 wget2-2.2.1-i586-1_slack15.0.txz Slackware x86_64 15.0 package: 64721c304ef80df73ad2dcd7b4086da2 wget2-2.2.1-x86_64-1_slack15.0.txz Slackware -current package: 1c46eafb055858059222b16252b4cb50 n/wget2-2.2.1-i686-1.txz Slackware x86_64 -current package: 4207ddd7bd3cce3e0eafe60c0a763d18 n/wget2-2.2.1-x86_64-1.txz Installationinstructions: +------------------------+ Upgrade the package as root: # upgradepkg wget2-2.2.1-i586-1_slack15.0.txz +-----+ . New wget2 packages address critical security issues in Slackware 15.0. Update recommended for all users to maintain safety.. Slackware wget2 update security critical issues buffer overflow. . Severity: Critical. LinuxSecurity.com Team
Dec 30, 2025
•Critical
Slackware
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!