yq Info

yq was added to epel9 repo on 2025-09-06
Page updated: 2025-11-12 16:43
Repo Status - Overall Status

Source NVR: yq-4.47.1-2.el9 (2025-09-06)

Binary Packages

yq yq-4.47.1-2.el9

Bugs

2398381 NEW CVE-2025-47910 yq: CrossOriginProtection bypass in net/http [epel-9]
2399034 NEW CVE-2025-47906 yq: Unexpected paths returned from LookPath in os/exec [epel-9]
2407569 NEW CVE-2025-58189 yq: go crypto/tls ALPN negotiation error contains attacker controlled information [epel-9]
2409023 NEW CVE-2025-61723 yq: Quadratic complexity when parsing some invalid inputs in encoding/pem [epel-9]
2409970 NEW CVE-2025-58185 yq: Parsing DER payload can cause memory exhaustion in encoding/asn1 [epel-9]
2410903 NEW CVE-2025-58188 yq: Panic when validating certificates with DSA public keys in crypto/x509 [epel-9]

Install Failures