FEDORA-2026-f8e0af09af — security update for xq

testing

FEDORA-2026-f8e0af09af created by mikelo2 4 days ago for Fedora 43

Update to 1.4.0

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-f8e0af09af

This update has been submitted for testing by mikelo2.

This update's test gating status has been changed to 'ignored'.

This update has been pushed to testing.

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Thresholds

Minimum Karma

Minimum Testing

7 days

Dates

submitted

4 days ago

in testing

4 days ago

days to stable

Builds

BZ#2408372 CVE-2025-58189 xq: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43]

BZ#2409843 CVE-2025-61723 xq: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43]

BZ#2410793 CVE-2025-58185 xq: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43]

BZ#2411689 CVE-2025-58188 xq: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43]

xq-1.4.0-2.fc43

ignored