Back Linuxsecurity openSUSE Issues Patch for Moderate DoS Vulnerabilities in git
This update for git-bug fixes the following issues: - Revendor to include golang.org/x/net/html v 0.45.0 to prevent possible DoS by various algorithms with quadratic complexity when parsing HTML documents (boo#1251463, CVE-2025-47911 and boo#1251664, CVE-2025-58190). - Update to version 0.10.1: - cli: ignore missing sections when removing configuration (ddb22a2f) - Update to version 0.10.0: - bridge: correct command used to create a new bridge (9942337b) - web: simplify header (7e95b169) - webui: remark upgrade + gfm + syntax highlighting (6ee47b96) - BREAKING CHANGE: dev-infra: remove gokart (89b880bd) - Update to version 0.10.0 - bridge: correct command used to create a new bridge (9942337b) - web: simplify header (7e95b169) - web: remark upgrade + gfm + syntax highlighting (6ee47b96) - Update to version 0.9.0: - completion: remove errata from string literal (aa102c91) - tui: improve
Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP7: zypper in -t patch openSUSE-2025-418=1
Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP7: zypper in -t patch openSUSE-2025-418=1
- openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64): git-bug-0.10.1-bp157.2.3.1 - openSUSE Backports SLE-15-SP7 (noarch): git-bug-bash-completion-0.10.1-bp157.2.3.1 git-bug-fish-completion-0.10.1-bp157.2.3.1 git-bug-zsh-completion-0.10.1-bp157.2.3.1
- openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64): git-bug-0.10.1-bp157.2.3.1 - openSUSE Backports SLE-15-SP7 (noarch): git-bug-bash-completion-0.10.1-bp157.2.3.1 git-bug-fish-completion-0.10.1-bp157.2.3.1 git-bug-zsh-completion-0.10.1-bp157.2.3.1
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
