Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Fedora 42: workrave 2025-85867bd98f moderate: cross site scripting

fedora
Calendar Grey April 17, 2025
Scroller Fedora
Fedora 42 has released a vital update, bringing back the Workrave package and addressing significant security vulnerabilities with clear user instructions for updates.
Unretireing the package.

Summary

Workrave is a program that assists in the recovery and prevention of

Repetitive Strain Injury (RSI). The program frequently alerts you to

take micro-pauses, rest breaks and restricts you to your daily limit.

Update Information:

Unretireing the package.

Topics%20covered

Topics Covered

security advisory security issue Fedora cross site scripting software management program update

Change Log

* Tue Apr 8 2025 Łukasz Wojniłowicz - 1.11.0~rc.1-1 - Unretirement import (fedora#2351398).

References


[ 1 ] Bug #2322802 - GNOME applet incompatible with GNOME 47 https://bugzilla.redhat.com/show_bug.cgi?id=2322802 [ 2 ] Bug #2328917 - CVE-2023-2142 workrave: Nunjucks autoescape bypass leads to cross site scripting [fedora-41] https://bugzilla.redhat.com/show_bug.cgi?id=2328917 [ 3 ] Bug #2328918 - CVE-2023-2142 workrave: Nunjucks autoescape bypass leads to cross site scripting [fedora-40] https://bugzilla.redhat.com/show_bug.cgi?id=2328918 [ 4 ] Bug #2351398 - Review Request: workrave - Program that assists in the recovery and prevention of RSI https://bugzilla.redhat.com/show_bug.cgi?id=2351398 [ 5 ] Bug #2358210 - F42FailsToInstall: workrave https://bugzilla.redhat.com/show_bug.cgi?id=2358210

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-85867bd98f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: workrave
Product: Fedora 42
Version: 1.11.0~rc.1
Release: 1.fc42
URL: https://workrave.org/
Summary: Program that assists in the recovery and prevention of RSI

Topics%20covered

Topics Covered

security advisory security issue Fedora cross site scripting software management program update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.