FlawAtlas
Search the atlas
OPENSUSE-SU-2026:21367-1 Not scored

Security update for lux

This update for lux fixes the following issues: Changes in lux: - CVE-2026-25680, CVE-2026-42502, CVE-2026-27136, CVE-2026-25681, CVE-2026-42506: Issues when parsing HTML files (bsc#1267110) - CVE-2024-45338: Denial of service due to non-linear parsing of case-insensitive content (bsc#1235304) - CVE-2025-22872: Incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241766) - CVE-2025-47911: Various algorithms with quadratic complexity when parsing HTML documents (bsc#1251460) - CVE-2025-58190: Excessive memory consumption (bsc#1251627) Bump x/net to 0.57.0 - Update to 0.24.1: * ci: bump go version to 1.22 #1350

Exploit probability Not scored
Published July 17, 2026
Required by Not available
Last source change July 19, 2026

02 / AFFECTED SOFTWARE

Affected packages

openSUSE:Leap 16.0 lux

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities openSUSE-SU-2026:21367-1

This update for lux fixes the following issues: Changes in lux: - CVE-2026-25680, CVE-2026-42502, CVE-2026-27136, CVE-2026-25681, CVE-2026-42506: Issues when parsing HTML files (bsc#1267110) - CVE-2024-45338: Denial of service due to non-linear parsing of case-insensitive content (bsc#1235304) - CVE-2025-22872: Incorrectly interpreted tags can cause content to be placed wrong scope during DOM construction (bsc#1241766) - CVE-2025-47911: Various algorithms with quadratic complexity when parsing HTML documents (bsc#1251460) - CVE-2025-58190: Excessive memory consumption (bsc#1251627) Bump x/net to 0.57.0 - Update to 0.24.1: * ci: bump go version to 1.22 #1350

View original source

05 / REFERENCES

Further evidence