SUSE-SU-2026:2285-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20262285-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:2285-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:2285-1
- Upstream
- Related
- Published
- 2026-06-05T12:16:31Z
- Modified
- 2026-06-06T07:30:26Z
- Summary
- Security update for yq
- Details
-
This update for yq fixes the following issues:
- CVE-2026-25680,CVE-2026-25681,CVE-2026-27136,CVE-2026-42502,CVE-2026-42506: golang.org/x/net/html: multiple issues when parsing HTML files (bsc#1267053).
- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation bypass and privilege escalation (bsc#1267199).
- References
-
- https://www.suse.com/support/update/announcement/2026/suse-su-20262285-1/
- https://bugzilla.suse.com/1267053
- https://bugzilla.suse.com/1267199
- https://www.suse.com/security/cve/CVE-2026-25680
- https://www.suse.com/security/cve/CVE-2026-25681
- https://www.suse.com/security/cve/CVE-2026-27136
- https://www.suse.com/security/cve/CVE-2026-39821
- https://www.suse.com/security/cve/CVE-2026-42502
- https://www.suse.com/security/cve/CVE-2026-42506