File _patchinfo of Package patchinfo.42794
<patchinfo incident="42794"> <issue tracker="cve" id="2025-58190"/> <issue tracker="cve" id="2025-47911"/> <issue tracker="bnc" id="1258048">VUL-0: CVE-2025-58190: apptainer: golang.org/x/net/html: excessive memory consumption by `html.ParseFragment` when processing specially crafted input</issue> <issue tracker="bnc" id="1258047">VUL-0: CVE-2025-47911: apptainer: golang.org/x/net/html: various algorithms with quadratic complexity when parsing HTML documents</issue> <issue tracker="bnc" id="1253924">VUL-0: CVE-2025-58181: apptainer: golang.org/x/crypto/ssh: invalidated number of mechanisms can cause unbounded memory consumption</issue> <packager>eeich</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for apptainer</summary> <description>This update for apptainer fixes the following issues: - CVE-2025-58190: Fixed a HTML parser misimplementation of a part of the HTML specification for table related tags. (bsc#1258048). - CVE-2025-47911: Fixed an issue where the HTML parser takes a very long time or even never returns. (bsc#1258047). </description> </patchinfo>