SUSE-SU-2023:4000-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2023/suse-su-20234000-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:4000-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2023:4000-1
Published
2023-10-06T12:40:29Z
Modified
2023-10-06T12:40:29Z
Summary
Security update for yq
Details

This update for yq fixes the following issues:

yq was updated to 4.35.2 (bsc#1215808):

  • Fixed number parsing as float bug in JSON #1756
  • Fixed string, null concatenation consistency #1712
  • Fixed expression parsing issue #1711

Update to 4.35.1:

  • Added Lua output support
  • Added BSD checksum format

Update to 4.34.1:

  • Added shell output format
  • Fixed nil pointer dereference

Update to 4.33.3:

  • Fixed bug when splatting empty array #1613
  • Added scalar output for TOML (#1617)
  • Fixed passing of read-only context in pipe (partial fix for #1631)

Update to 4.33.2:

  • Add --nul-output|-0 flag to separate element with NUL character (#1550) Thanks @vaab!
  • Add removable-media interface plug declaration to the snap packaging(#1618) Thanks @brlin-tw!
  • Scalar output now handled in csv, tsv and property files

Update to 4.33.1:

  • Added read-only TOML support! #1364. Thanks @pelletier for making your API available in your toml lib :)
  • Added warning when auto detect by file type is outputs JSON

Update to 4.32.2:

  • Fixes parsing terraform tfstate files results in 'unknown' format
  • Added divide and modulo operators (#1593)
  • Add support for decoding base64 strings without padding
  • Add filter operation (#1588) - thanks @rbren!
  • Detect input format based on file name extension (#1582)
  • Auto output format when input format is automatically detected
  • Fixed npe in log #1596
  • Improved binary file size!

Update to 4.31.2:

  • Fixed merged anchor reference problem #1482
  • Fixed xml encoding of ProcInst #1563, improved XML comment handling
  • Allow build without json and xml support (#1556) Thanks

Update to 4.31.1:

  • Added shuffle command #1503
  • Added ability to sort by multiple fields #1541
  • Added @sh encoder #1526
  • Added @uri/@urid encoder/decoder #1529
  • Fixed date comparison with string date #1537
  • Added from_unix/to_unix Operators
References

Affected packages

SUSE:Linux Enterprise Module for Package Hub 15 SP5 / yq

Package

Name
yq
Purl
pkg:rpm/suse/yq&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.35.2-150500.3.3.1

Ecosystem specific 

{
    "binaries":  [
        {
            "yq":  "4.35.2-150500.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:4000-1.json"

openSUSE:Leap 15.5 / yq

Package

Name
yq
Purl
pkg:rpm/opensuse/yq&distro=openSUSE%20Leap%2015.5

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.35.2-150500.3.3.1

Ecosystem specific 

{
    "binaries":  [
        {
            "yq":  "4.35.2-150500.3.3.1",
            "yq-bash-completion":  "4.35.2-150500.3.3.1",
            "yq-fish-completion":  "4.35.2-150500.3.3.1",
            "yq-zsh-completion":  "4.35.2-150500.3.3.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2023:4000-1.json"