< back to search

gpp_maybe Security update for yq

SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2026-2285

This update for yq fixes the following issues: - CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267053). - CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1267199).

Release Date

Jun 5 2026
References

Bugzilla: 1267053, 1267199
CVEs: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502, CVE-2026-42506
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Package Hub 15.7 aarch64

Packages

yq
A portable command-line YAML processor

4.53.2-150500.3.9.1 lock rpm lock src

SUSE Package Hub 15.7 ppc64le

Packages

yq
A portable command-line YAML processor

4.53.2-150500.3.9.1 lock rpm lock src

SUSE Package Hub 15.7 s390x

Packages

yq
A portable command-line YAML processor

4.53.2-150500.3.9.1 lock rpm lock src

SUSE Package Hub 15.7 x86_64

Packages

yq
A portable command-line YAML processor

4.53.2-150500.3.9.1 lock rpm lock src