USN-8543-2: Wget regression

USN-8543-1 fixed vulnerabilities in Wget. The update for CVE-2026-58472 was incomplete and could introduce a regression. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that Wget mishandled semicolons in the userinfo subcomponent of ...

ROOT-OS-DEBIAN-13-CVE-2026-58472 CVE-2026-58472 in wget - Patched by Root

Root has patched CVE-2026-58472 in the wget package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-58472 CVE-2026-58472 in wget - Patched by Root

Root has patched CVE-2026-58472 in the wget package for Root:Debian:11. Multiple fixed versions available...

CVE-2026-58472 vulnerabilities

Vulnerabilities for packages: wget...

ROOT-OS-DEBIAN-12-CVE-2026-58472 CVE-2026-58472 in rootio-wget - Patched by Root

Root has patched CVE-2026-58472 in the rootio-wget package for Root:Debian:12. Multiple fixed versions available...

SUSE CVE-2026-58472

GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the htmlquotestring function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity...

CVE-2026-58472

GNU Wget through 1.25.0, fixed in commit dd692d9, contains a heap buffer overflow vulnerability in the htmlquotestring function in src/convert.c that allows a remote attacker to trigger memory corruption by supplying a crafted HTML attribute with a large number of characters requiring entity...