[El-errata] ELSA-2026-62144-0 Moderate: Oracle Linux 8 wget security, bug fix, and enhancement update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-62144-0

http://linux.oracle.com/errata/ELSA-2026-62144-0.html

The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:

x86_64:
wget-1.19.5-16.0.1.el8_10.x86_64.rpm

aarch64:
wget-1.19.5-16.0.1.el8_10.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol8/SRPMS-updates/wget-1.19.5-16.0.1.el8_10.src.rpm

Related CVEs:

CVE-2026-58469
CVE-2026-58471
CVE-2026-58472




Description of changes:

[1.19.5-16.0.1]
- SSLv3 support dropped from openssl, v3 test certificates need to be replaced [Orabug: 29613455]

[1.19.5-16]
- Resolves: RHEL-145875 - async unsafe code in signal handler context

[1.19.5-15]
- Fix CVE-2026-58469: buffer underflow in clean_metalink_string()
- Resolves: RHEL-212496

[1.19.5-14]
- Fix CVE-2026-58471: buffer overflow in convert_fname()
- Resolves: RHEL-194519

[1.19.5-13]
- Fix CVE-2026-58472: integer and buffer overflow in html_quote_string()
- Resolves: RHEL-210627