Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian 10 Buster: DLA-3116-1 Critical Risk of Mako DoS Vulnerability

debian lts
Calendar Grey September 21, 2022
Dist Debian Esm H88
The Mako templating engine addressed a Denial of Service vulnerability in Debian 10 Buster. It is advised to update for enhanced security.
It was found that Mako, a Python template library, was vulnerable to a denial of service attack via crafted regular expressions
Topics%20covered

Topics Covered

security advisory denial of service critical debian mako template library dsa

Summary

For Debian 10 buster, this problem has been fixed in version
1.0.7+ds1-1+deb10u1.

We recommend that you upgrade your mako packages.

For the detailed security status of mako please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/mako

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: mako
Version: 1.0.7+ds1-1+deb10u1
CVE ID: CVE-2022-40023

Topics%20covered

Topics Covered

security advisory denial of service critical debian mako template library dsa

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here