wget-1.14-18.1.0.1.el7.AXS7

GNU Wget is a file retrieval utility which can use either the HTTP or FTP
protocols. Wget features include the ability to work in the background while you
are logged out, recursive retrieval of directories, file name wildcard matching,
remote file timestamp storage and comparison, use of Rest with FTP servers and
Range with HTTP servers to retrieve files over slow or unstable connections,
support for Proxy servers, and configurability.

Security Fix(es):

* CVE-2024-38428: properly re-implement userinfo parsing (rfc2396)

CVE(s):
CVE-2024-38428
url.c in GNU Wget through 1.24.5 mishandles semicolons in the userinfo subcomponent of a URI, and thus there may be insecure behavior in which data that was supposed to be in the userinfo subcomponent is misinterpreted to be part of the host subcomponent.