Alerts This Week
Warning Icon 1 815
Alerts This Week
Warning Icon 1 815

Fedora 42 Glow 2.1.2 Update FEDORA-2026-9d0e7df23a CVE Fixes

fedora
Calendar Grey May 1, 2026
Dist Fedora Esm H88
Glow for Fedora 42 updates to version 2.1.2, fixing CVEs and dependencies for improved terminal markdown reading.
Update to version 2.1.2

Summary

Glow is a terminal based markdown reader designed from the ground up to bring

out the beauty\u2014and power\u2014of the CLI. Use it to discover markdown files, read

documentation directly on the command line. Glow will find local markdown

files in subdirectories or a local Git repository.

Update Information:

Update to version 2.1.2. This also updates some of the vendored dependencies to fix CVEs, as well as building with the latest golang to fix even more CVEs.

Topics%20covered

Topics Covered

security advisory fedora update vulnerability golang markdown

Change Log

* Wed Apr 22 2026 Carl George - 2.1.2-1 - Update to version 2.1.2 rhbz#2457076 - Update vendored goldmark to 1.7.17 to resolve CVE-2026-5160 * Sun Mar 22 2026 Carl George - 2.1.1-10 - Adopt go-vendor-tools * Mon Feb 2 2026 Maxwell G - 2.1.1-9 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Fri Jan 16 2026 Fedora Release Engineering - 2.1.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Oct 10 2025 Alejandro Sez - 2.1.1-7 - rebuild * Fri Aug 15 2025 Maxwell G - 2.1.1-6 - Rebuild for golang-1.25.0 * Fri Aug 15 2025 Maxwell G - 2.1.1-5 - Revert "Rebuild for golang-1.25.0" * Fri Aug 15 2025 Maxwell G - 2.1.1-4 - Rebuild for golang-1.25.0 * Thu Jul 24 2025 Mikel Olasagasti Uranga - 2.1.1-3 - Set the correct goipath * Wed Jul 23 2025 Fedora Release Engineering - 2.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild

References


[ 1 ] Bug #2375621 - glow: mapstructure May Leak Sensitive Information [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2375621 [ 2 ] Bug #2398694 - CVE-2025-47910 glow: CrossOriginProtection bypass in net/http [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2398694 [ 3 ] Bug #2399375 - CVE-2025-47906 glow: Unexpected paths returned from LookPath in os/exec [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399375 [ 4 ] Bug #2399713 - CVE-2025-11065 glow: Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399713 [ 5 ] Bug #2407898 - CVE-2025-58189 glow: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2407898 [ 6 ] Bug #2409367 - CVE-2025-61723 glow: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedo...

Read the Full Advisory

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d0e7df23a' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
informational
Lowest
Low
Medium
High
Critical

Name: glow
Product: Fedora 42
Version: 2.1.2
Release: 1.fc42
URL: https://github.com/charmbracelet/glow
Summary: Terminal based markdown reader

Topics%20covered

Topics Covered

security advisory fedora update vulnerability golang markdown

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here