SUSE-SU-2023:4000-1
Security update for yq
No scoreFix available
SUSE-SU-2023:4000-1 is a vulnerability with no CVSS score yet in yq, published October 6, 2023. No source lists public exploit code. Fixed in yq 4.35.2-150500.3.3.1.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
4.35.2-150500.3.3.1yq +1 more
Description
This update for yq fixes the following issues:
yq was updated to 4.35.2 (bsc#1215808):
- Fixed number parsing as float bug in JSON #1756
- Fixed string, null concatenation consistency #1712
- Fixed expression parsing issue #1711
Update to 4.35.1:
- Added Lua output support
- Added BSD checksum format
Update to 4.34.1:
- Added shell output format
- Fixed nil pointer dereference
Update to 4.33.3:
- Fixed bug when splatting empty array #1613
- Added scalar output for TOML (#1617)
- Fixed passing of read-only context in pipe (partial fix for #1631)
Update to 4.33.2:
- Add
--nul-output|-0flag to separate element with NUL character (#1550) Thanks @vaab! - Add removable-media interface plug declaration to the snap packaging(#1618) Thanks @brlin-tw!
- Scalar output now handled in csv, tsv and property files
Update to 4.33.1:
- Added read-only TOML support! #1364. Thanks @pelletier for making your API available in your toml lib :)
- Added warning when auto detect by file type is outputs JSON
Update to 4.32.2:
- Fixes parsing terraform tfstate files results in 'unknown' format
- Added divide and modulo operators (#1593)
- Add support for decoding base64 strings without padding
- Add filter operation (#1588) - thanks @rbren!
- Detect input format based on file name extension (#1582)
- Auto output format when input format is automatically detected
- Fixed npe in log #1596
- Improved binary file size!
Update to 4.31.2:
- Fixed merged anchor reference problem #1482
- Fixed xml encoding of ProcInst #1563, improved XML comment handling
- Allow build without json and xml support (#1556) Thanks
Update to 4.31.1:
- Added shuffle command #1503
- Added ability to sort by multiple fields #1541
- Added @sh encoder #1526
- Added @uri/@urid encoder/decoder #1529
- Fixed date comparison with string date #1537
- Added from_unix/to_unix Operators
Affected packages
What each source reports
OSVNo score
Security update for yq
This update for yq fixes the following issues:
yq was updated to 4.35.2 (bsc#1215808):
- Fixed number parsing as float bug in JSON #1756
- Fixed string, null concatenation consistency #1712
- Fixed expression parsing issue #1711
Update to 4.35.1:
- Added Lua output support
- Added BSD checksum format
Update to 4.34.1:
- Added shell output format
- Fixed nil pointer dereference
Update to 4.33.3:
- Fixed bug when splatting empty array #1613
- Added scalar output for TOML (#1617)
- Fixed passing of read-only context in pipe (partial fix for #1631)
Update to 4.33.2:
- Add
--nul-output|-0flag to separate element with NUL character (#1550) Thanks @vaab! - Add removable-media interface plug declaration to the snap packaging(#1618) Thanks @brlin-tw!
- Scalar output now handled in csv, tsv and property files
Update to 4.33.1:
- Added read-only TOML support! #1364. Thanks @pelletier for making your API available in your toml lib :)
- Added warning when auto detect by file type is outputs JSON
Update to 4.32.2:
- Fixes parsing terraform tfstate files results in 'unknown' format
- Added divide and modulo operators (#1593)
- Add support for decoding base64 strings without padding
- Add filter operation (#1588) - thanks @rbren!
- Detect input format based on file name extension (#1582)
- Auto output format when input format is automatically detected
- Fixed npe in log #1596
- Improved binary file size!
Update to 4.31.2:
- Fixed merged anchor reference problem #1482
- Fixed xml encoding of ProcInst #1563, improved XML comment handling
- Allow build without json and xml support (#1556) Thanks
Update to 4.31.1:
- Added shuffle command #1503
- Added ability to sort by multiple fields #1541
- Added @sh encoder #1526
- Added @uri/@urid encoder/decoder #1529
- Fixed date comparison with string date #1537
- Added from_unix/to_unix Operators
- Record
SUSE-SU-2023:4000-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.