Synopsis

Important: wget security update

Type/Severity

Security Advisory: Important

Topic

An update for wget is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The wget packages provide the GNU Wget file retrieval utility for HTTP, HTTPS, and FTP protocols.

Security Fix(es):

• wget: do_conversion() heap-based buffer overflow vulnerability (CVE-2019-5953)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - TUS 7.4 x86_64
• Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.4 ppc64le
• Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.4 x86_64

Fixes

• BZ - 1695679 - CVE-2019-5953 wget: do_conversion() heap-based buffer overflow vulnerability

CVEs

• CVE-2019-5953

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - AUS 7.4

SRPM
wget-1.14-15.el7_4.2.src.rpm	SHA-256: 8049c8147bfbdf14890d06ee3d36372bb60fe2c53f7e7686ac2925f6d44a27ef
x86_64
wget-1.14-15.el7_4.2.x86_64.rpm	SHA-256: 134bfa76af441db08e4d1ddc9c5206be546cea812e59431933d9a6cdbb250fc6
wget-debuginfo-1.14-15.el7_4.2.x86_64.rpm	SHA-256: 9e1e43a6880ef29c65252452712ef55e8014eedf078127b7b1138538a8ad661f

Red Hat Enterprise Linux Server - TUS 7.4

SRPM
wget-1.14-15.el7_4.2.src.rpm	SHA-256: 8049c8147bfbdf14890d06ee3d36372bb60fe2c53f7e7686ac2925f6d44a27ef
x86_64
wget-1.14-15.el7_4.2.x86_64.rpm	SHA-256: 134bfa76af441db08e4d1ddc9c5206be546cea812e59431933d9a6cdbb250fc6
wget-debuginfo-1.14-15.el7_4.2.x86_64.rpm	SHA-256: 9e1e43a6880ef29c65252452712ef55e8014eedf078127b7b1138538a8ad661f

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 7.4

SRPM
wget-1.14-15.el7_4.2.src.rpm	SHA-256: 8049c8147bfbdf14890d06ee3d36372bb60fe2c53f7e7686ac2925f6d44a27ef
ppc64le
wget-1.14-15.el7_4.2.ppc64le.rpm	SHA-256: debf2670865767a764c905943ad59e813e94adedd86008127da70ccf38564302
wget-debuginfo-1.14-15.el7_4.2.ppc64le.rpm	SHA-256: e2b8ba5cedb65d2992887b099bb4a5a0c9bb6e4791951a2b45f428121e487322

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 7.4

SRPM
wget-1.14-15.el7_4.2.src.rpm	SHA-256: 8049c8147bfbdf14890d06ee3d36372bb60fe2c53f7e7686ac2925f6d44a27ef
x86_64
wget-1.14-15.el7_4.2.x86_64.rpm	SHA-256: 134bfa76af441db08e4d1ddc9c5206be546cea812e59431933d9a6cdbb250fc6
wget-debuginfo-1.14-15.el7_4.2.x86_64.rpm	SHA-256: 9e1e43a6880ef29c65252452712ef55e8014eedf078127b7b1138538a8ad661f