Public bug reported: A new release of wget is available for merging from Debian.
Ubuntu Proposed: 1.25.0-2ubuntu6 Debian Unstable: 1.25.0-3 ### New Debian Changes ### wget (1.25.0-3) unstable; urgency=medium * patch from upstream git to fix CVE-2026-15146 a problem with IP validation in FTP PASV. closes: Bug#1142284 -- Noël Köthe <[email protected]> Fri, 24 Jul 2026 15:53:14 +0200 ### Old Ubuntu Delta ### wget (1.25.0-2ubuntu6) stonking; urgency=medium * SECURITY UPDATE: Buffer overflow in metalink. - debian/patches/CVE-2026-58469.patch: Fix buffer overflow in src/metalink.c - CVE-2026-58469 * SECURITY UPDATE: Integer overflow in http - debian/patches/CVE-2026-58470.patch: Fix integer overflow in src/http.c - CVE-2026-58470 * SECURITY UPDATE: Buffer overflow in convert_fname. - debian/patches/CVE-2026-58471.patch: Fix buffer overflow in src/url.c - CVE-2026-58471 * SECURITY UPDATE: Integer and buffer overflow in html_quote_string. - debian/patches/CVE-2026-58472.patch: Fix integer+buffer overflow in src/convert.c - CVE-2026-58472 -- Kyle Kernick <[email protected]> Fri, 10 Jul 2026 17:22:16 -0600 wget (1.25.0-2ubuntu4) resolute; urgency=medium * No-change mass rebuild for Ubuntu 26.04 (LP: #2132257) -- Sebastien Bacher <[email protected]> Mon, 02 Feb 2026 21:52:17 +0100 wget (1.25.0-2ubuntu3) questing; urgency=medium * d/p/wget-maybe-prepend-scheme-only-in-verbose-mode: Print message only in verbose mode (LP:# 2122484). -- Frode Nordahl <[email protected]> Thu, 02 Oct 2025 15:30:42 +0000 wget (1.25.0-2ubuntu2) questing; urgency=medium * Rebuild to include updated RISC-V base ISA RVA23 -- Heinrich Schuchardt <[email protected]> Sat, 06 Sep 2025 15:39:36 +0000 wget (1.25.0-2ubuntu1) questing; urgency=medium * Merge with Debian unstable (LP: #2111101). Remaining changes: - d/rules: pass --with-ssl=openssl * Dropped changes, as libgnutls28-dev is now required: - d/control: don't Build-Depend on libgnutls28-dev, only on libssl-dev -- Ural Tunaboyu <[email protected]> Sun, 18 May 2025 14:46:05 -0700 ** Affects: wget (Ubuntu) Importance: Wishlist Status: New ** Tags: dcr-merge ** Changed in: wget (Ubuntu) Importance: Undecided => Wishlist ** Changed in: wget (Ubuntu) Milestone: None => ubuntu-26.05 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2163536 Title: Merge wget 1.25.0-3 from Debian for stonking cycle To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/wget/+bug/2163536/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
