FEDORA-EPEL-2026-dcca0faa1b — security update for xq

testing

FEDORA-EPEL-2026-dcca0faa1b created by mikelo2 4 days ago for Fedora EPEL 9

Update to 1.4.0

This update has been submitted for testing by mikelo2.

This update's test gating status has been changed to 'ignored'.

This update has been pushed to testing.

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Thresholds

Minimum Karma

Minimum Testing

7 days

Dates

submitted

4 days ago

in testing

4 days ago

days to stable

Builds

BZ#2398379 CVE-2025-47910 xq: CrossOriginProtection bypass in net/http [epel-9]

BZ#2399032 CVE-2025-47906 xq: Unexpected paths returned from LookPath in os/exec [epel-9]

BZ#2407567 CVE-2025-58189 xq: go crypto/tls ALPN negotiation error contains attacker controlled information [epel-9]

BZ#2409021 CVE-2025-61723 xq: Quadratic complexity when parsing some invalid inputs in encoding/pem [epel-9]

BZ#2409968 CVE-2025-58185 xq: Parsing DER payload can cause memory exhaustion in encoding/asn1 [epel-9]

BZ#2410901 CVE-2025-58188 xq: Panic when validating certificates with DSA public keys in crypto/x509 [epel-9]

xq-1.4.0-2.el9

ignored