gpp_maybe Security update for wget

SUSE-SLE-Module-Basesystem-15-SP7-2026-3148

This update for wget fixes the following issues: - CVE-2026-15146: unvalidated IP address in an FTP PASV response can lead to server-side request forgery (bsc#1271320). - CVE-2026-58469: Metalink document containing a whitespace-only URL can cause a heap buffer underread (bsc#1271033). - CVE-2026-58470: server-controlled values can cause an integer overflow in parse_content_range() (bsc#1271034). - CVE-2026-58471: server-supplied filenames requiring character set conversion could lead to heap memory corruption (bsc#1271035). - CVE-2026-58472: crafted HTML attribute with a large number of characters can lead to a heap buffer overflow (bsc#1271036).

Release Date

Jul 21 2026
References

Bugzilla: 1233773, 1271033, 1271034, 1271035, 1271036, 1271320
CVEs: CVE-2024-10524, CVE-2026-15146, CVE-2026-58469, CVE-2026-58470, CVE-2026-58471, CVE-2026-58472
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

Basesystem Module 15.7 aarch64

Packages

wget
A Tool for Mirroring FTP and HTTP Servers

1.24.5-150700.3.3.1 lock rpm lock src

Basesystem Module 15.7 x86_64

Packages

wget
A Tool for Mirroring FTP and HTTP Servers

1.24.5-150700.3.3.1 lock rpm lock src

Basesystem Module 15.7 s390x

Packages

wget
A Tool for Mirroring FTP and HTTP Servers

1.24.5-150700.3.3.1 lock rpm lock src

Basesystem Module 15.7 ppc64le

Packages

wget
A Tool for Mirroring FTP and HTTP Servers

1.24.5-150700.3.3.1 lock rpm lock src