Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 556
Alerts This Week
Warning Icon 1 556

Ubuntu 22.10 USN-5625-2 Critical: Mako Denial Of Service

ubuntu
Calendar Grey November 15, 2022
Dist Ubuntu Esm H88
Mako might enable service interruptions through specially designed regex; ensure to update promptly to safeguard Ubuntu 22.10 thoroughly.
Mako could be made to denial of service if it received a specially crafted regular expression.

Summary

Mako could be made to denial of service if it received a

specially crafted regular expression.

Software Description:

- mako: fast and lightweight templating for the Python platform

Details:

USN-5625-1 fixed a vulnerability in Mako. This update provides the corresponding updates for

Ubuntu 22.10.

Original advisory details:

It was discovered that Mako incorrectly handled certain regular expressions.

An attacker could possibly use this issue to cause a denial of service.

Topics%20covered

Topics Covered

security advisory denial of service update instructions ubuntu mako

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.10:
  python3-mako                    1.1.3+ds1-3ubuntu2.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-5625-2

https://ubuntu.com/security/notices/USN-5625-1

CVE-2022-40023

Severity
critical
Lowest
Low
Medium
High
Critical

November 15, 2022

Topics%20covered

Topics Covered

security advisory denial of service update instructions ubuntu mako

Package Information

https://launchpad.net/ubuntu/+source/mako/1.1.3+ds1-3ubuntu2.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.