openSUSE 16 Security Update : varnish (openSUSE-SU-2026:22131-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22131-1 advisory. Changes in varnish: - update to 7.7.3 bsc1280114, CVE-2025-8671: https://vinyl-cache.org/docs/7.7/whats-new/changes-7.7.html...

Security update for varnish (important)

openSUSE security update: security update for varnish ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:22131-1 Rating: important References: bsc1239892 bsc1280114 Cross-References: CVE-2025-30346 CVE-2025-8671 CVSS scores: CVE-2025-8671 SUSE : 7.5...

OPENSUSE-SU-2026:22131-1 Security update for varnish

This update for varnish fixes the following issues: Changes in varnish: - update to 7.7.3 bsc1280114, CVE-2025-8671: https://vinyl-cache.org/docs/7.7/whats-new/changes-7.7.html https://vinyl-cache.org/security/VSV00017.htmlvsv00017 - Update to release 7.7.1 VSV-16: Resolve request smuggling attac...

Security update for wget (important)

openSUSE security update: security update for wget ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21665-1 Rating: important References: bsc1271033 bsc1271034 bsc1271035 bsc1271036 bsc1271320 bsc1272219 bsc1273449 Cross-References: CVE-2026-15146...

JLSEC-2026-1159 GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in...

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

wget: Fix of 2 CVEs

CVE-2026-58470: fix integer overflow in Content-Range header parsing - CVE-2026-58472: fix integer/heap buffer overflow in HTML attribute entity encoding...

CLSA-2026-1784035382 wget: Fix of 2 CVEs

CVE-2026-58470: fix integer overflow in Content-Range header parsing - CVE-2026-58472: fix integer/heap buffer overflow in HTML attribute entity encoding...

USN-8543-1: Wget vulnerabilities

It was discovered that Wget mishandled semicolons in the userinfo subcomponent of a URL. A remote attacker could possibly use this issue to trick a user into connecting to a different host than intended. This issue only affected Ubuntu 14.04 LTS. CVE-2024-38428 It was discovered that Wget...

CLSA-2026-1784035081 wget: Fix of 2 CVEs

CVE-2026-58470: fix integer overflow in Content-Range header parsing - CVE-2026-58472: fix integer/heap buffer overflow in HTML attribute entity encoding...

CVE-2026-58470

An integer overflow in GNU Wget's parsecontentrange function allows malicious servers to send crafted Content-Range headers. This triggers undefined behavior and download desynchronization, potentially causing a denial of service or data integrity issues for the client. Mitigation To mitigate thi...

SUSE CVE-2026-58470

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

Linux Distros Unpatched Vulnerability : CVE-2026-58470

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows...

UBUNTU-CVE-2026-58470

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

CVE-2026-58470 GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

CVE-2026-58470

GNU Wget 1.25.0 and earlier is affected by an integer overflow in parse_content_range() (src/http.c) triggered by server-controlled Content-Range headers, leading to undefined behavior and download desynchronization. The issue is fixed in commit 43d3ba9, and users should upgrade to a version that...

EUVD-2026-42082

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

CVE-2026-58470 GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

CVE-2026-58470

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

CVE-2026-58470

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...

CVE-2026-58470 GNU Wget 1.25.0 Integer Overflow via Content-Range Header Parsing

GNU Wget through 1.25.0, fixed in commit 43d3ba9, contains an integer overflow vulnerability in the parsecontentrange function within src/http.c that allows server-controlled values to cause signed integer arithmetic to overflow. Attackers can supply malicious Content-Range header values to trigg...