gpp_maybe
Security update for yq
SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-2096
This update for yq fixes the following issues - CVE-2025-22872: golang.org/x/net/html: incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241719). - CVE-2025-47911: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents (bsc#1251339). - CVE-2025-58190: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input (bsc#1251540). - CVE-2026-33814: golang.org/x/net/http2: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE (bsc#1266248). Changes for yq: - update to v4.53.2
-
Release DateMay 27 2026
-
ReferencesBugzilla: 1241719, 1251339, 1251540, 1266248
CVEs: CVE-2025-22872, CVE-2025-47911, CVE-2025-58190, CVE-2026-33814 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Package Hub 15.7 s390x
-
Packages
SUSE Package Hub 15.7 ppc64le
-
Packages
SUSE Package Hub 15.7 aarch64
-
Packages
SUSE Package Hub 15.7 x86_64
-
Packages