Red Hat Product Errata RHSA-2026:62142 - Security Advisory Issued: 2026-09-01 Updated: 2026-09-01 RHSA-2026:62142 - Security Advisory Overview Updated Packages Synopsis Moderate: wget security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for wget is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols. Security Fix(es): wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption (CVE-2026-58471) wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute (CVE-2026-58472) Bug Fix(es) and Enhancement(s): wget async unsafe code in signal handler context [rhel-10.2.z] (JIRA:RHEL-220498) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2497850 - CVE-2026-58471 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption BZ - 2497857 - CVE-2026-58472 wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute CVEs CVE-2026-58471 CVE-2026-58472 References https://access.redhat.com/security/updates/classification/#moderate Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 x86_64 wget-1.24.5-8.el10_2.x86_64.rpm SHA-256: 06e5a4443fddde1d95bec655972d37d4ca01f41532f7b84b0fb3f27988170037 wget-debuginfo-1.24.5-8.el10_2.x86_64.rpm SHA-256: 985137948b1288a2fb8f6f9609c2f26fc976c27f153ec1564f38ac445895d211 wget-debugsource-1.24.5-8.el10_2.x86_64.rpm SHA-256: b43e064900671bbeb918b43ddbe79ce7ce1a9c00b92b848c33b71487b052dc34 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 x86_64 wget-1.24.5-8.el10_2.x86_64.rpm SHA-256: 06e5a4443fddde1d95bec655972d37d4ca01f41532f7b84b0fb3f27988170037 wget-debuginfo-1.24.5-8.el10_2.x86_64.rpm SHA-256: 985137948b1288a2fb8f6f9609c2f26fc976c27f153ec1564f38ac445895d211 wget-debugsource-1.24.5-8.el10_2.x86_64.rpm SHA-256: b43e064900671bbeb918b43ddbe79ce7ce1a9c00b92b848c33b71487b052dc34 Red Hat Enterprise Linux for IBM z Systems 10 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 s390x wget-1.24.5-8.el10_2.s390x.rpm SHA-256: 802495e47e0e47c580022b8230eeb06f75fe5daa49b2153841d4de53053654a5 wget-debuginfo-1.24.5-8.el10_2.s390x.rpm SHA-256: ed678eb2aaa9531d779d84705430b650f17cb9fe9fd67f032754be78c59a7d82 wget-debugsource-1.24.5-8.el10_2.s390x.rpm SHA-256: f18039448ae2376f3b02b771e464e7bce750b6c8698e3825db75c4d067ba88de Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 s390x wget-1.24.5-8.el10_2.s390x.rpm SHA-256: 802495e47e0e47c580022b8230eeb06f75fe5daa49b2153841d4de53053654a5 wget-debuginfo-1.24.5-8.el10_2.s390x.rpm SHA-256: ed678eb2aaa9531d779d84705430b650f17cb9fe9fd67f032754be78c59a7d82 wget-debugsource-1.24.5-8.el10_2.s390x.rpm SHA-256: f18039448ae2376f3b02b771e464e7bce750b6c8698e3825db75c4d067ba88de Red Hat Enterprise Linux for Power, little endian 10 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 ppc64le wget-1.24.5-8.el10_2.ppc64le.rpm SHA-256: 424d82c3471fd0d087ddd95933767296edc14566bd44dac1149bddfa25959a49 wget-debuginfo-1.24.5-8.el10_2.ppc64le.rpm SHA-256: c197d40dd4cec350c65208c10b641be5cb23b9e2338e6587b75bfedf75e1adb0 wget-debugsource-1.24.5-8.el10_2.ppc64le.rpm SHA-256: 2f0e63d4cd091398715a634344f2c63c76b1292ebf525e01016a11bb4365965c Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 ppc64le wget-1.24.5-8.el10_2.ppc64le.rpm SHA-256: 424d82c3471fd0d087ddd95933767296edc14566bd44dac1149bddfa25959a49 wget-debuginfo-1.24.5-8.el10_2.ppc64le.rpm SHA-256: c197d40dd4cec350c65208c10b641be5cb23b9e2338e6587b75bfedf75e1adb0 wget-debugsource-1.24.5-8.el10_2.ppc64le.rpm SHA-256: 2f0e63d4cd091398715a634344f2c63c76b1292ebf525e01016a11bb4365965c Red Hat Enterprise Linux for ARM 64 10 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 aarch64 wget-1.24.5-8.el10_2.aarch64.rpm SHA-256: 5e51a6832120f9054c377126faa2260c2c07180c61c3d8ebd66415feff28e487 wget-debuginfo-1.24.5-8.el10_2.aarch64.rpm SHA-256: e3dfae3704690a1fcdda78b7caed4c62e6444795f43917fbb429ca24e43cea8a wget-debugsource-1.24.5-8.el10_2.aarch64.rpm SHA-256: ee4f6a155c4c44ae56276bf08df2846f8951be043f5caf4762d9ef2d83601b79 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 aarch64 wget-1.24.5-8.el10_2.aarch64.rpm SHA-256: 5e51a6832120f9054c377126faa2260c2c07180c61c3d8ebd66415feff28e487 wget-debuginfo-1.24.5-8.el10_2.aarch64.rpm SHA-256: e3dfae3704690a1fcdda78b7caed4c62e6444795f43917fbb429ca24e43cea8a wget-debugsource-1.24.5-8.el10_2.aarch64.rpm SHA-256: ee4f6a155c4c44ae56276bf08df2846f8951be043f5caf4762d9ef2d83601b79 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 aarch64 wget-1.24.5-8.el10_2.aarch64.rpm SHA-256: 5e51a6832120f9054c377126faa2260c2c07180c61c3d8ebd66415feff28e487 wget-debuginfo-1.24.5-8.el10_2.aarch64.rpm SHA-256: e3dfae3704690a1fcdda78b7caed4c62e6444795f43917fbb429ca24e43cea8a wget-debugsource-1.24.5-8.el10_2.aarch64.rpm SHA-256: ee4f6a155c4c44ae56276bf08df2846f8951be043f5caf4762d9ef2d83601b79 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 s390x wget-1.24.5-8.el10_2.s390x.rpm SHA-256: 802495e47e0e47c580022b8230eeb06f75fe5daa49b2153841d4de53053654a5 wget-debuginfo-1.24.5-8.el10_2.s390x.rpm SHA-256: ed678eb2aaa9531d779d84705430b650f17cb9fe9fd67f032754be78c59a7d82 wget-debugsource-1.24.5-8.el10_2.s390x.rpm SHA-256: f18039448ae2376f3b02b771e464e7bce750b6c8698e3825db75c4d067ba88de Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 ppc64le wget-1.24.5-8.el10_2.ppc64le.rpm SHA-256: 424d82c3471fd0d087ddd95933767296edc14566bd44dac1149bddfa25959a49 wget-debuginfo-1.24.5-8.el10_2.ppc64le.rpm SHA-256: c197d40dd4cec350c65208c10b641be5cb23b9e2338e6587b75bfedf75e1adb0 wget-debugsource-1.24.5-8.el10_2.ppc64le.rpm SHA-256: 2f0e63d4cd091398715a634344f2c63c76b1292ebf525e01016a11bb4365965c Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 x86_64 wget-1.24.5-8.el10_2.x86_64.rpm SHA-256: 06e5a4443fddde1d95bec655972d37d4ca01f41532f7b84b0fb3f27988170037 wget-debuginfo-1.24.5-8.el10_2.x86_64.rpm SHA-256: 985137948b1288a2fb8f6f9609c2f26fc976c27f153ec1564f38ac445895d211 wget-debugsource-1.24.5-8.el10_2.x86_64.rpm SHA-256: b43e064900671bbeb918b43ddbe79ce7ce1a9c00b92b848c33b71487b052dc34 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031553c0bcec8a64a73fac5351c44df71 x86_64 wget-1.24.5-8.el10_2.x86_64.rpm SHA-256: 06e5a4443fddde1d95bec655972d37d4ca01f41532f7b84b0fb3f27988170037 wget-debuginfo-1.24.5-8.el10_2.x86_64.rpm SHA-256: 985137948b1288a2fb8f6f9609c2f26fc976c27f153ec1564f38ac445895d211 wget-debugsource-1.24.5-8.el10_2.x86_64.rpm SHA-256: b43e064900671bbeb918b43ddbe79ce7ce1a9c00b92b848c33b71487b052dc34 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 SRPM wget-1.24.5-8.el10_2.src.rpm SHA-256: 90e4f30fdbfa30fc2bd7a5cdd01055d031