Security update for yq SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2023:4000-1 Final 1 1 2023-10-06T12:40:29Z current 2023-10-06T12:40:29Z 2023-10-06T12:40:29Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for yq This update for yq fixes the following issues: yq was updated to 4.35.2 (bsc#1215808): * Fixed number parsing as float bug in JSON #1756 * Fixed string, null concatenation consistency #1712 * Fixed expression parsing issue #1711 Update to 4.35.1: * Added Lua output support * Added BSD checksum format Update to 4.34.1: * Added shell output format * Fixed nil pointer dereference Update to 4.33.3: * Fixed bug when splatting empty array #1613 * Added scalar output for TOML (#1617) * Fixed passing of read-only context in pipe (partial fix for #1631) Update to 4.33.2: * Add ``--nul-output|-0`` flag to separate element with NUL character (#1550) Thanks @vaab! * Add removable-media interface plug declaration to the snap packaging(#1618) Thanks @brlin-tw! * Scalar output now handled in csv, tsv and property files Update to 4.33.1: * Added read-only TOML support! #1364. Thanks @pelletier for making your API available in your toml lib :) * Added warning when auto detect by file type is outputs JSON Update to 4.32.2: * Fixes parsing terraform tfstate files results in 'unknown' format * Added divide and modulo operators (#1593) * Add support for decoding base64 strings without padding * Add filter operation (#1588) - thanks @rbren! * Detect input format based on file name extension (#1582) * Auto output format when input format is automatically detected * Fixed npe in log #1596 * Improved binary file size! Update to 4.31.2: * Fixed merged anchor reference problem #1482 * Fixed xml encoding of ProcInst #1563, improved XML comment handling * Allow build without json and xml support (#1556) Thanks Update to 4.31.1: * Added shuffle command #1503 * Added ability to sort by multiple fields #1541 * Added @sh encoder #1526 * Added @uri/@urid encoder/decoder #1529 * Fixed date comparison with string date #1537 * Added from_unix/to_unix Operators The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2023-4000,SUSE-SLE-Module-Packagehub-Subpackages-15-SP5-2023-4000,openSUSE-SLE-15.5-2023-4000 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2023/suse-su-20234000-1/ Link for SUSE-SU-2023:4000-1 https://lists.suse.com/pipermail/sle-security-updates/2023-October/016562.html E-Mail link for SUSE-SU-2023:4000-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1215808 SUSE Bug 1215808 SUSE Linux Enterprise Module for Package Hub 15 SP5 openSUSE Leap 15.5 yq-4.35.2-150500.3.3.1 yq-bash-completion-4.35.2-150500.3.3.1 yq-fish-completion-4.35.2-150500.3.3.1 yq-zsh-completion-4.35.2-150500.3.3.1 yq-4.35.2-150500.3.3.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 yq-4.35.2-150500.3.3.1 as a component of openSUSE Leap 15.5 yq-bash-completion-4.35.2-150500.3.3.1 as a component of openSUSE Leap 15.5 yq-fish-completion-4.35.2-150500.3.3.1 as a component of openSUSE Leap 15.5 yq-zsh-completion-4.35.2-150500.3.3.1 as a component of openSUSE Leap 15.5