Wget up untill version 1.19.1 does not ensure control characters are not used in the hostname part of a url. This security update rejects control characters in host part of a url.
{ "section": "core" }
"https://advisories.mageia.org/MGASA-2017-0104.json"