Alerts This Week
Warning Icon 1 535
Alerts This Week
Warning Icon 1 535

openSUSE: kubo Moderate CVE-2025-22872 Content Issue 2025:0347-1

opensuse
Calendar Grey September 13, 2025
Dist Opensuse Esm H88
Patch released for openSUSE addressing the Kubo vulnerability, improving Document Object Model rendering pertaining to CVE-2025-22872.
An update that fixes one vulnerability is now available

Description

This update for kubo fixes the following issues:

- CVE-2025-22872: Fixed golang.org/x/net/html issue where incorrectly

interpreted tags can cause content to be placed wrong scope during DOM

construction (boo#1241776).

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Backports SLE-15-SP7:

zypper in -t patch openSUSE-2025-347=1

Package List

- openSUSE Backports SLE-15-SP7 (aarch64 i586 ppc64le s390x x86_64):

kubo-0.35.0-bp157.2.6.1

References

https://www.suse.com/security/cve/CVE-2025-22872.html

https://bugzilla.suse.com/1241776

Announcement ID: openSUSE-SU-2025:0347-1
Rating: moderate
Affected Products: openSUSE Backports SLE-15-SP7 .

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here