Issued:
2019-05-07
Updated:
2019-05-07

RHSA-2019:0983 - Security Advisory

Synopsis

Important: wget security update

Type/Severity

Security Advisory: Important

Topic

An update for wget is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols.

Security Fix(es):

  • wget: do_conversion() heap-based buffer overflow vulnerability (CVE-2019-5953)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux for x86_64 8 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 8 s390x
  • Red Hat Enterprise Linux for Power, little endian 8 ppc64le
  • Red Hat Enterprise Linux for ARM 64 8 aarch64
  • Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.0 ppc64le
  • Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.0 x86_64

Fixes

  • BZ - 1695679 - CVE-2019-5953 wget: do_conversion() heap-based buffer overflow vulnerability

CVEs

References

Red Hat Enterprise Linux for x86_64 8

SRPM
wget-1.19.5-7.el8_0.1.src.rpm SHA-256: 45997f6e763da22e8ee581e73acc5ea8d56db5a4c69a9d44eb0aef7ffe17ba36
x86_64
wget-1.19.5-7.el8_0.1.x86_64.rpm SHA-256: fcc09fd365b8c16deeb14ee4da05a61111af522807d3d0cede0614fc4ad75d59
wget-debuginfo-1.19.5-7.el8_0.1.x86_64.rpm SHA-256: 4afa310d7e0382431454463548b06d1b768538280f0b62d8f361a3f3c17e7f66
wget-debugsource-1.19.5-7.el8_0.1.x86_64.rpm SHA-256: bb7bd8fbea455cb7a89f9ccdf4208096fc13b155a5e513524a3245fb3773fade

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
wget-1.19.5-7.el8_0.1.src.rpm SHA-256: 45997f6e763da22e8ee581e73acc5ea8d56db5a4c69a9d44eb0aef7ffe17ba36
s390x
wget-1.19.5-7.el8_0.1.s390x.rpm SHA-256: 6dfba40e1318ae33ca113847ffcfc7d37b6b0238e398031fcbb01ed289d66c54
wget-debuginfo-1.19.5-7.el8_0.1.s390x.rpm SHA-256: ce614cbf9bd2eb4de5c04278bff78c3649dd69656bbec1c57fc8e837b3008020
wget-debugsource-1.19.5-7.el8_0.1.s390x.rpm SHA-256: 9593d0cddbd1ad9ca05302044e45e5751ff1c1ac5137dd474e6cbc95fa24c0e5

Red Hat Enterprise Linux for Power, little endian 8

SRPM
wget-1.19.5-7.el8_0.1.src.rpm SHA-256: 45997f6e763da22e8ee581e73acc5ea8d56db5a4c69a9d44eb0aef7ffe17ba36
ppc64le
wget-1.19.5-7.el8_0.1.ppc64le.rpm SHA-256: cf9bdbca1e21095fc93bd88810111998579ea6dd76592f5053538222d60ab1f3
wget-debuginfo-1.19.5-7.el8_0.1.ppc64le.rpm SHA-256: 652d91e00d97c630953398e9b959e75b86687ff00185f5d610812f84619373cb
wget-debugsource-1.19.5-7.el8_0.1.ppc64le.rpm SHA-256: b6d01be556ad53c53f5fc5e61666695e48ccfa8e0e0efe5ad2b2f88785aaefc3

Red Hat Enterprise Linux for ARM 64 8

SRPM
wget-1.19.5-7.el8_0.1.src.rpm SHA-256: 45997f6e763da22e8ee581e73acc5ea8d56db5a4c69a9d44eb0aef7ffe17ba36
aarch64
wget-1.19.5-7.el8_0.1.aarch64.rpm SHA-256: 3c8de4e2aec84c545240cc6e46d85f2d305a4782d43bec7636aef56f598d8eba
wget-debuginfo-1.19.5-7.el8_0.1.aarch64.rpm SHA-256: a04f94f2582451fc28755dee9df2a6fe63621e844aa3caf8f9423954c2a6d82c
wget-debugsource-1.19.5-7.el8_0.1.aarch64.rpm SHA-256: 53f0e038d31a1c6d15dce8ec0371bd4eca390cc45f305ed2b1571d41afbdad67

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.0

SRPM
wget-1.19.5-7.el8_0.1.src.rpm SHA-256: 45997f6e763da22e8ee581e73acc5ea8d56db5a4c69a9d44eb0aef7ffe17ba36
ppc64le
wget-1.19.5-7.el8_0.1.ppc64le.rpm SHA-256: cf9bdbca1e21095fc93bd88810111998579ea6dd76592f5053538222d60ab1f3
wget-debuginfo-1.19.5-7.el8_0.1.ppc64le.rpm SHA-256: 652d91e00d97c630953398e9b959e75b86687ff00185f5d610812f84619373cb
wget-debugsource-1.19.5-7.el8_0.1.ppc64le.rpm SHA-256: b6d01be556ad53c53f5fc5e61666695e48ccfa8e0e0efe5ad2b2f88785aaefc3

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.0

SRPM
wget-1.19.5-7.el8_0.1.src.rpm SHA-256: 45997f6e763da22e8ee581e73acc5ea8d56db5a4c69a9d44eb0aef7ffe17ba36
x86_64
wget-1.19.5-7.el8_0.1.x86_64.rpm SHA-256: fcc09fd365b8c16deeb14ee4da05a61111af522807d3d0cede0614fc4ad75d59
wget-debuginfo-1.19.5-7.el8_0.1.x86_64.rpm SHA-256: 4afa310d7e0382431454463548b06d1b768538280f0b62d8f361a3f3c17e7f66
wget-debugsource-1.19.5-7.el8_0.1.x86_64.rpm SHA-256: bb7bd8fbea455cb7a89f9ccdf4208096fc13b155a5e513524a3245fb3773fade

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.