Bug 2499971 - CVE-2026-58472 wget1: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute [fedora-all]
Summary: CVE-2026-58472 wget1: GNU Wget: Arbitrary code execution or denial of service...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: wget1
Version: rawhide
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
Assignee: Michal Ruprich
QA Contact:
URL:
Whiteboard: {"flaws": ["2d586b1b-ffc9-49c3-8c68-7...
Depends On:
Blocks: CVE-2026-58472
TreeView+ depends on / blocked
 
Reported: 2026-07-14 13:02 UTC by Srikanth Balasubramanian
Modified: 2026-07-21 00:57 UTC (History)
1 user (show)

Fixed In Version: wget1-1.25.0-4.fc44
Clone Of:
Environment:
Last Closed: 2026-07-21 00:57:29 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Srikanth Balasubramanian 2026-07-14 13:02:34 UTC
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the html_quote_string() function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity encoding. A server-supplied HTML attribute causes a signed integer counter to overflow during output size accumulation, resulting in an undersized heap allocation and subsequent heap buffer overflow during the copy phase.

Comment 1 Fedora Update System 2026-07-16 08:35:03 UTC
FEDORA-2026-1b91a2f126 (wget1-1.25.0-4.fc44) has been submitted as an update to Fedora 44.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-1b91a2f126

Comment 2 Fedora Update System 2026-07-16 08:35:12 UTC
FEDORA-2026-7bbb52b49d (wget1-1.25.0-3.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2026-7bbb52b49d

Comment 3 Fedora Update System 2026-07-17 01:36:31 UTC
FEDORA-2026-1b91a2f126 has been pushed to the Fedora 44 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-1b91a2f126`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-1b91a2f126

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 4 Fedora Update System 2026-07-17 01:52:39 UTC
FEDORA-2026-7bbb52b49d has been pushed to the Fedora 43 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-7bbb52b49d`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-7bbb52b49d

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 5 Fedora Update System 2026-07-21 00:57:29 UTC
FEDORA-2026-1b91a2f126 (wget1-1.25.0-4.fc44) has been pushed to the Fedora 44 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.