From ad5e0fc720fe336f50315218c2e32648de606974 Mon Sep 17 00:00:00 2001
From: Nicolas Graves <ngraves@ngraves.fr>
Date: Wed, 27 Aug 2025 15:07:50 +0200
Subject: [PATCH] gnu: wget: Graft secure package.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* gnu/packages/wget.scm (wget/fixed): Add new variable.
(wget): Hide package. Graft wget/fixed.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>
---
 gnu/packages/wget.scm | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/gnu/packages/wget.scm b/gnu/packages/wget.scm
index 94e9a4e77f4..8e36fea6de9 100644
--- a/gnu/packages/wget.scm
+++ b/gnu/packages/wget.scm
@@ -46,6 +46,7 @@
 
 (define-public wget
   (package
+    (replacement wget/fixed)
     (name "wget")
     (version "1.21.4")
     (source
@@ -75,6 +76,17 @@ wild cards, supports proxies and cookies, and it can convert absolute links
 in downloaded documents to relative links.")
     (license license:gpl3+))) ; some files are under GPLv2+
 
+(define-public wget/fixed
+  (package
+    (inherit wget)
+    (version "1.25.0")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (string-append "mirror://gnu/wget/wget-" version ".tar.lz"))
+       (sha256
+        (base32 "07waw3s51zmjqzqq717xyyd353qc1ajcd38lh7y8i85hav3mq8hr"))))))
+
 (define-public wgetpaste
   (package
     (name "wgetpaste")