QSN-8543-2: Wget regression
2026-08-20

Summary:
USN-8543-1 introduced a regression in Wget.

Details:
USN-8543-1 fixed vulnerabilities in Wget. The update for CVE-2026-58472
was incomplete and could introduce a regression. This update fixes the
problem.

We apologize for the inconvenience.

Original advisory details:

 It was discovered that Wget mishandled semicolons in the userinfo
 subcomponent of a URL. A remote attacker could possibly use this issue
 to trick a user into connecting to a different host than intended. This
 issue only affected Ubuntu 14.04 LTS. (CVE-2024-38428)

 It was discovered that Wget incorrectly handled Metalink documents
 containing a whitespace-only URL. A remote attacker could possibly use
 this issue to cause a denial of service. This issue only affected Ubuntu
 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and
 Ubuntu 26.04 LTS. (CVE-2026-58469)

 It was discovered that Wget incorrectly handled Content-Range header
 values, leading to an integer overflow. A remote attacker could
 possibly use this issue to cause download desynchronization.
 (CVE-2026-58470)

 It was discovered that Wget incorrectly handled character set
 conversion of server-supplied filenames. A remote attacker could
 possibly use this issue to cause a denial of service or possibly execute
 arbitrary code. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04
 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.
 (CVE-2026-58471)

 It was discovered that Wget incorrectly handled HTML attributes
 requiring entity encoding. A remote attacker could possibly use this
 issue to cause a denial of service or possibly execute arbitrary code.
 (CVE-2026-58472)

Affected QuantaStor releases:
  6.9.1.001 jammy: wget 1.21.2-2ubuntu1.1 (fixed in 1.21.2-2ubuntu1.5)
  6.9.0.464 jammy: wget 1.21.2-2ubuntu1.1 (fixed in 1.21.2-2ubuntu1.5)
  6.8.6.015 jammy: wget 1.21.2-2ubuntu1.1 (fixed in 1.21.2-2ubuntu1.5)
  6.8.5.018 jammy: wget 1.21.2-2ubuntu1.1 (fixed in 1.21.2-2ubuntu1.5)
  6.8.4.038 jammy: wget 1.21.2-2ubuntu1.1 (fixed in 1.21.2-2ubuntu1.5)
  6.8.3.018 jammy: wget 1.21.2-2ubuntu1.1 (fixed in 1.21.2-2ubuntu1.5)
  6.8.2.002 jammy: wget 1.21.2-2ubuntu1.1 (fixed in 1.21.2-2ubuntu1.5)
  6.8.1.007 jammy: wget 1.21.2-2ubuntu1.1 (fixed in 1.21.2-2ubuntu1.5)
  6.8.0.205 jammy: wget 1.21.2-2ubuntu1.1 (fixed in 1.21.2-2ubuntu1.5)

CVEs: 

References:
  https://ubuntu.com/security/notices/USN-8543-2
  https://bugs.launchpad.net/ubuntu/+source/wget/+bug/2163754