Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Fedora 41 glow 2.1.1 important: CVE-2025-22872 input issue

fedora
Calendar Grey June 27, 2025
Dist Fedora Esm H88
Fedora 41 users, ensure you update glow to version 2.1.1 for vital fixes that address major vulnerabilities and improve system stability and security
Update to version 2.1.1 for various bugfixes

Summary

Glow is a terminal based markdown reader designed from the ground up to bring

out the beauty—and power—of the CLI. Use it to discover markdown files, read

documentation directly on the command line. Glow will find local markdown

files in subdirectories or a local Git repository.

Update Information:

Update to version 2.1.1 for various bugfixes. This also fixes CVE-2025-22872 in the bundled golang.org/x/net/html.

Topics%20covered

Topics Covered

security advisory fedora important input sanitization glow markdown reader

Change Log

* Wed Jun 18 2025 Carl George - 2.1.1-1 - Update to version 2.1.1 rhbz#2369460 * Fri Apr 18 2025 Carl George - 2.1.0-1 - Update to version 2.1.0 rhbz#2348672 * Thu Jan 16 2025 Fedora Release Engineering - 2.0.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild

References


[ 1 ] Bug #2360594 - CVE-2025-22872 glow: Incorrect Neutralization of Input During Web Page Generation in x/net in golang.org/x/net [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2360594 [ 2 ] Bug #2369460 - glow-2.1.1 is available https://bugzilla.redhat.com/show_bug.cgi?id=2369460

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-0f0b3d191c' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
important
Lowest
Low
Medium
High
Critical

Name: glow
Product: Fedora 41
Version: 2.1.1
Release: 1.fc41
URL: https://github.com/charmbracelet/glow
Summary: Terminal based markdown reader

Topics%20covered

Topics Covered

security advisory fedora important input sanitization glow markdown reader

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here