CLSA-2026-1784038140

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784038140.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1784038140
Upstream
CVE (3)
Published
2026-07-14T14:09:19Z
Modified
2026-10-26T09:31:52Z
Summary
Fix CVE(s): CVE-2026-58470, CVE-2026-58471, CVE-2026-58472
Details
  • SECURITY UPDATE: fix integer overflow in Content-Range header parsing in src/http.c
    • debian/patches/CVE-2026-58470.patch: fix integer overflow in Content-Range header parsing in src/http.c
    • CVE-2026-58470
  • SECURITY UPDATE: fix heap buffer overflow in filename charset conversion (convert_fname) in src/url.c
    • debian/patches/CVE-2026-58471.patch: fix heap buffer overflow in filename charset conversion (convert_fname) in src/url.c
    • CVE-2026-58471
  • SECURITY UPDATE: fix integer/heap buffer overflow in HTML attribute entity encoding (html_quote_string) in src/convert.c
    • debian/patches/CVE-2026-58472.patch: fix integer/heap buffer overflow in HTML attribute entity encoding (html_quote_string) in src/convert.c
    • CVE-2026-58472
References

Affected packages

TuxCare:Debian:10 / wget

Package

Name
wget
Purl
pkg:deb/tuxcare/wget?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.1-1.1+tuxcare.els2

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1784038140.json"