Synopsis

Important: wget security update

Type/Severity

Security Advisory: Important

Topic

An update for wget is now available for Red Hat Enterprise Linux 7.5 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols.

Security Fix(es):

• wget: do_conversion() heap-based buffer overflow vulnerability (CVE-2019-5953)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5 ppc64le

Fixes

• BZ - 1695679 - CVE-2019-5953 wget: do_conversion() heap-based buffer overflow vulnerability

CVEs

• CVE-2019-5953

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5

SRPM
wget-1.14-16.el7_5.1.src.rpm	SHA-256: ae3216ab6679ecc67e089b749ad17ac03c01661da2f822b127b0a4eab7e491cd
x86_64
wget-1.14-16.el7_5.1.x86_64.rpm	SHA-256: afa8f5c68a34b1e5c25cbca5c285bd0e1d4323ae6b0fbed7812ddc6a715ad193
wget-debuginfo-1.14-16.el7_5.1.x86_64.rpm	SHA-256: 58b8866b831eb25ec9bec47e0cd7b96c8d3af2a062ef7c108584f146408a7f82

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5

SRPM
wget-1.14-16.el7_5.1.src.rpm	SHA-256: ae3216ab6679ecc67e089b749ad17ac03c01661da2f822b127b0a4eab7e491cd
s390x
wget-1.14-16.el7_5.1.s390x.rpm	SHA-256: a5c23c314fdbcf702aa1151a7fdef429ce137471556b323ea25c120989742759
wget-debuginfo-1.14-16.el7_5.1.s390x.rpm	SHA-256: f3c6badb0a74ea87c44e5f17a985e9beb43a65d937a8bf8f350889b122490db3

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5

SRPM
wget-1.14-16.el7_5.1.src.rpm	SHA-256: ae3216ab6679ecc67e089b749ad17ac03c01661da2f822b127b0a4eab7e491cd
ppc64
wget-1.14-16.el7_5.1.ppc64.rpm	SHA-256: 0361b60d3ab31d715560cd0f5db6acb41aafc57a595e740a4d167fc25beaf68b
wget-debuginfo-1.14-16.el7_5.1.ppc64.rpm	SHA-256: 793103473be7b2e1fb8f91dbadd9dc199dfcac053a7f1d581c1fa546ed729120

Red Hat Enterprise Linux EUS Compute Node 7.5

SRPM
wget-1.14-16.el7_5.1.src.rpm	SHA-256: ae3216ab6679ecc67e089b749ad17ac03c01661da2f822b127b0a4eab7e491cd
x86_64
wget-1.14-16.el7_5.1.x86_64.rpm	SHA-256: afa8f5c68a34b1e5c25cbca5c285bd0e1d4323ae6b0fbed7812ddc6a715ad193
wget-debuginfo-1.14-16.el7_5.1.x86_64.rpm	SHA-256: 58b8866b831eb25ec9bec47e0cd7b96c8d3af2a062ef7c108584f146408a7f82

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5

SRPM
wget-1.14-16.el7_5.1.src.rpm	SHA-256: ae3216ab6679ecc67e089b749ad17ac03c01661da2f822b127b0a4eab7e491cd
ppc64le
wget-1.14-16.el7_5.1.ppc64le.rpm	SHA-256: 53a8cf5959cb6532e6c07f7d66d6fe2d1e43392f93c7736242e813857dd24d75
wget-debuginfo-1.14-16.el7_5.1.ppc64le.rpm	SHA-256: c5d09a4b077b8ecec99a728e98c897ffda3ceacf748a81ad4531f17ef999e1fc