Red Hat Product Errata RHSA-2026:62143 - Security Advisory Issued: 2026-09-01 Updated: 2026-09-01 RHSA-2026:62143 - Security Advisory Overview Updated Packages Synopsis Moderate: wget security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for wget is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption (CVE-2026-58471) wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute (CVE-2026-58472) Bug Fix(es) and Enhancement(s): wget async unsafe code in signal handler context [rhel-9.8.z] (JIRA:RHEL-220497) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 9 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 x86_64 Red Hat Enterprise Linux for IBM z Systems 9 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 s390x Red Hat Enterprise Linux for Power, little endian 9 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 ppc64le Red Hat Enterprise Linux for ARM 64 9 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 aarch64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.8 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.8 s390x Fixes BZ - 2497850 - CVE-2026-58471 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption BZ - 2497857 - CVE-2026-58472 wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute CVEs CVE-2026-58471 CVE-2026-58472 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 9 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 x86_64 wget-1.21.1-11.el9_8.x86_64.rpm SHA-256: 42de6fc18dc14722a1793284c2f0692c4159837663168f1dd56925020c1f28f3 wget-debuginfo-1.21.1-11.el9_8.x86_64.rpm SHA-256: 72ae056df4f5c7be7be3e2d1d3d707b106952b29cebf0a3e16746a28e5714286 wget-debugsource-1.21.1-11.el9_8.x86_64.rpm SHA-256: 1cd1c16ced1951c2fd1a1a3614e48f2947cb51503f3926c89c1222edf3e9cd52 Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.8 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 x86_64 wget-1.21.1-11.el9_8.x86_64.rpm SHA-256: 42de6fc18dc14722a1793284c2f0692c4159837663168f1dd56925020c1f28f3 wget-debuginfo-1.21.1-11.el9_8.x86_64.rpm SHA-256: 72ae056df4f5c7be7be3e2d1d3d707b106952b29cebf0a3e16746a28e5714286 wget-debugsource-1.21.1-11.el9_8.x86_64.rpm SHA-256: 1cd1c16ced1951c2fd1a1a3614e48f2947cb51503f3926c89c1222edf3e9cd52 Red Hat Enterprise Linux for IBM z Systems 9 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 s390x wget-1.21.1-11.el9_8.s390x.rpm SHA-256: 742427330ccf6912b6c6fe3468f9ce5c7d546b9acfdd6312dd84c183344ecaf7 wget-debuginfo-1.21.1-11.el9_8.s390x.rpm SHA-256: aef31c7d8c5eb61e88cedc92c6c8c5fc107d605ed794bf0e380286395ad83710 wget-debugsource-1.21.1-11.el9_8.s390x.rpm SHA-256: b052782cd57d9f4b0b1bef29e8ff03a0258b2a585fa7939a9117aba4b2ccf618 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.8 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 s390x wget-1.21.1-11.el9_8.s390x.rpm SHA-256: 742427330ccf6912b6c6fe3468f9ce5c7d546b9acfdd6312dd84c183344ecaf7 wget-debuginfo-1.21.1-11.el9_8.s390x.rpm SHA-256: aef31c7d8c5eb61e88cedc92c6c8c5fc107d605ed794bf0e380286395ad83710 wget-debugsource-1.21.1-11.el9_8.s390x.rpm SHA-256: b052782cd57d9f4b0b1bef29e8ff03a0258b2a585fa7939a9117aba4b2ccf618 Red Hat Enterprise Linux for Power, little endian 9 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 ppc64le wget-1.21.1-11.el9_8.ppc64le.rpm SHA-256: 03456175552e40bea8008005299138f52f8c0d790fad55def97ba8474838f6ff wget-debuginfo-1.21.1-11.el9_8.ppc64le.rpm SHA-256: af7cac9f293524cf2294238e29f2a055b425984d339a81b819cedff0bbf47958 wget-debugsource-1.21.1-11.el9_8.ppc64le.rpm SHA-256: fb2a0c9bd3f602f9cc2b134f3238f09187f1e9264da96757e7fa424095881312 Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.8 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 ppc64le wget-1.21.1-11.el9_8.ppc64le.rpm SHA-256: 03456175552e40bea8008005299138f52f8c0d790fad55def97ba8474838f6ff wget-debuginfo-1.21.1-11.el9_8.ppc64le.rpm SHA-256: af7cac9f293524cf2294238e29f2a055b425984d339a81b819cedff0bbf47958 wget-debugsource-1.21.1-11.el9_8.ppc64le.rpm SHA-256: fb2a0c9bd3f602f9cc2b134f3238f09187f1e9264da96757e7fa424095881312 Red Hat Enterprise Linux for ARM 64 9 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 aarch64 wget-1.21.1-11.el9_8.aarch64.rpm SHA-256: fc87cebd183a429b065a54384eccad18c2b786497262926406da13b1d7a1abe9 wget-debuginfo-1.21.1-11.el9_8.aarch64.rpm SHA-256: 3867ec8fa905868d7281bc69974128264f2f42fef937551cb8cb2bd448117136 wget-debugsource-1.21.1-11.el9_8.aarch64.rpm SHA-256: 73f85ae59ada9d1699b097bd1ed8d75d7a282ad0ffb5931489b529a4fa3a966a Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.8 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 aarch64 wget-1.21.1-11.el9_8.aarch64.rpm SHA-256: fc87cebd183a429b065a54384eccad18c2b786497262926406da13b1d7a1abe9 wget-debuginfo-1.21.1-11.el9_8.aarch64.rpm SHA-256: 3867ec8fa905868d7281bc69974128264f2f42fef937551cb8cb2bd448117136 wget-debugsource-1.21.1-11.el9_8.aarch64.rpm SHA-256: 73f85ae59ada9d1699b097bd1ed8d75d7a282ad0ffb5931489b529a4fa3a966a Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.8 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 ppc64le wget-1.21.1-11.el9_8.ppc64le.rpm SHA-256: 03456175552e40bea8008005299138f52f8c0d790fad55def97ba8474838f6ff wget-debuginfo-1.21.1-11.el9_8.ppc64le.rpm SHA-256: af7cac9f293524cf2294238e29f2a055b425984d339a81b819cedff0bbf47958 wget-debugsource-1.21.1-11.el9_8.ppc64le.rpm SHA-256: fb2a0c9bd3f602f9cc2b134f3238f09187f1e9264da96757e7fa424095881312 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.8 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 x86_64 wget-1.21.1-11.el9_8.x86_64.rpm SHA-256: 42de6fc18dc14722a1793284c2f0692c4159837663168f1dd56925020c1f28f3 wget-debuginfo-1.21.1-11.el9_8.x86_64.rpm SHA-256: 72ae056df4f5c7be7be3e2d1d3d707b106952b29cebf0a3e16746a28e5714286 wget-debugsource-1.21.1-11.el9_8.x86_64.rpm SHA-256: 1cd1c16ced1951c2fd1a1a3614e48f2947cb51503f3926c89c1222edf3e9cd52 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.8 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 aarch64 wget-1.21.1-11.el9_8.aarch64.rpm SHA-256: fc87cebd183a429b065a54384eccad18c2b786497262926406da13b1d7a1abe9 wget-debuginfo-1.21.1-11.el9_8.aarch64.rpm SHA-256: 3867ec8fa905868d7281bc69974128264f2f42fef937551cb8cb2bd448117136 wget-debugsource-1.21.1-11.el9_8.aarch64.rpm SHA-256: 73f85ae59ada9d1699b097bd1ed8d75d7a282ad0ffb5931489b529a4fa3a966a Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.8 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 s390x wget-1.21.1-11.el9_8.s390x.rpm SHA-256: 742427330ccf6912b6c6fe3468f9ce5c7d546b9acfdd6312dd84c183344ecaf7 wget-debuginfo-1.21.1-11.el9_8.s390x.rpm SHA-256: aef31c7d8c5eb61e88cedc92c6c8c5fc107d605ed794bf0e380286395ad83710 wget-debugsource-1.21.1-11.el9_8.s390x.rpm SHA-256: b052782cd57d9f4b0b1bef29e8ff03a0258b2a585fa7939a9117aba4b2ccf618 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.8 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c94bd5340adc0642297157bcda2e57ec10799e1514d7c0268 x86_64 wget-1.21.1-11.el9_8.x86_64.rpm SHA-256: 42de6fc18dc14722a1793284c2f0692c4159837663168f1dd56925020c1f28f3 wget-debuginfo-1.21.1-11.el9_8.x86_64.rpm SHA-256: 72ae056df4f5c7be7be3e2d1d3d707b106952b29cebf0a3e16746a28e5714286 wget-debugsource-1.21.1-11.el9_8.x86_64.rpm SHA-256: 1cd1c16ced1951c2fd1a1a3614e48f2947cb51503f3926c89c1222edf3e9cd52 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.8 SRPM wget-1.21.1-11.el9_8.src.rpm SHA-256: f7c97c19a4d4941c