File _patchinfo of Package patchinfo.41575
<patchinfo incident="41575"> <issue tracker="bnc" id="1248897">VUL-0: CVE-2025-58058: trivy: github.com/ulikunitz/xz: github.com/ulikunitz/xz leaks memory</issue> <issue tracker="bnc" id="1250625">VUL-0: CVE-2025-11065: trivy: github.com/go-viper/mapstructure/v2: sensitive Information leak in logs</issue> <issue tracker="cve" id="2025-58058"/> <issue tracker="cve" id="2025-11065"/> <packager>dirkmueller</packager> <rating>moderate</rating> <category>security</category> <summary>Security update for trivy</summary> <description>This update for trivy fixes the following issues: Update to version 0.67.2: - CVE-2025-11065: Fixed sensitive Information leak in logs in github.com/go-viper/mapstructure/v2 (bsc#1250625) - CVE-2025-58058: Fixed leaks of memory in github.com/ulikunitz/xz (bsc#1248897) Other fixes: - Fix version number shown for 'trivy -v' </description> </patchinfo>