ALT-PU-2026-13338

Высокий

ALT-PU-2026-13338: package wget update to version 1.25.0-alt6

Источник

errata.altlinux.org

Дата публикации

25.08.2026

Дата обновления

25.08.2026

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades wget to version 1.25.0-alt6.

Устраненные уязвимости4

CVE-2026-58469

Высокий 7.5

Дата публикации: 07.07.2026

CWE-125

GNU Wget through 1.25.0, fixed in commit 37a40fc, contains a heap buffer underread vulnerability in the clean_metalink_string() function within src/metalink.c that allows a malicious server to trigger memory corruption by serving a Metalink document containing a whitespace-only URL. Attackers can cause the function to decrement a pointer past the start of the buffer when processing an all-whitespace Metalink URL, potentially leading to abnormal program behavior.

CVSS 3.1

Высокий 7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H