Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 38: 2024-6ad6b9f417 Critical: Security Fixes for Hakyll

fedora
Calendar Grey March 31, 2024
Dist Fedora Esm H88
Crucial vulnerability patches for pandoc and base64 in Fedora released for ghc-hakyll users. Keep your systems secure!
Security fix for CVE-2023-35936 and CVE-2023-38745 pandoc: backport fixes for CVE-2023-35936 and CVE-2023-38745 base64 now packaged in Fedora

Summary

Hakyll is a static website compiler library. It provides you with the tools to

create a simple or advanced static website using a Haskell DSL and formats such

as markdown or RST. You can find more information, including a tutorial, on the

website: .

Update Information:

Security fix for CVE-2023-35936 and CVE-2023-38745 pandoc: backport fixes for CVE-2023-35936 and CVE-2023-38745 base64 now packaged in Fedora

Topics%20covered

Topics Covered

security advisory fedora critical pandoc issue base64 fix

Change Log

* Thu Sep 28 2023 Jens Petersen - 4.16.2.0-1 - https://hackage.haskell.org/package/hakyll-4.16.2.0/changelog * Sun Jul 23 2023 Jens Petersen - 4.16.0.0-1 - https://hackage.haskell.org/package/hakyll-4.16.0.0/changelog * Wed Jul 19 2023 Fedora Release Engineering - 4.15.1.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

References


[ 1 ] Bug #2163472 - Review Request: ghc-base64 - A modern RFC 4648-compliant Base64 library https://bugzilla.redhat.com/show_bug.cgi?id=2163472 [ 2 ] Bug #2220873 - TRIAGE pandoc: TRIAGE_CVE-2023-35936 pandoc: allows attacker to create or overwrite arbitrary files on the system [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2220873 [ 3 ] Bug #2227034 - CVE-2023-38745 pandoc: allows attacker to create or overwrite arbitrary files on the system [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2227034

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-6ad6b9f417' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: ghc-hakyll
Product: Fedora 38
Version: 4.16.2.0
Release: 1.fc38
URL: https://hackage.haskell.org/package/hakyll
Summary: A static website compiler library

Topics%20covered

Topics Covered

security advisory fedora critical pandoc issue base64 fix

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here