Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
203
security advisorydenial of servicemoderate severityMageia 8 MGASA-2023-0181 Moderate: cmark Denial Of Service Threat
cmark incorrectly handled certain inputs. Fixes quadratic complexity in handle_close_bracket "![[]()" which may lead to a denial of service (CVE-2023-22486). Noting that this also fixes a quadratic parsing issue with repeated
May 21, 2023
Mageia
89
security advisoryfedoracriticalFedora 32 FEDORA-2020-1eaffe0013 Critical Gitit DoS Fix
Security fix for CVE-2020-5238 - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 - also update hakyll to 4.13.4.0 https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5-hc85. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-1eaffe0013 2020-10-06 15:02:13.246044 --------------------------------------------------------------------------------Name : gitit Product : Fedora 32 Version : 0.12.3.2 Release : 6.fc32 URL : https://hackage.haskell.org/package/gitit Summary : Wiki using happstack, git or darcs, and pandoc Description : Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line tools or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in (extended) markdown, reStructuredText, LaTeX, HTML, or literate Haskell, and exported in ten different formats, including LaTeX, ConTeXt, DocBook, RTF, OpenOffice ODT, and MediaWiki markup. Notable features include * plugins: dynamically loaded page transformations written in Haskell (see "Network.Gitit.Interface") * conversion of TeX math to MathML for display in web browsers * syntax highlighting of source code files and code snippets * Atom feeds (site-wide and per-page) * a library, "Network.Gitit", that makes it simple to include a gitit wiki in any happstack application You can see a running demo at . For usage information: 'gitit --help'. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2020-5238 - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 - also update hakyll to4.13.4.0 https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5-hc85 --------------------------------------------------------------------------------ChangeLog: * Mon Sep 21 2020 Jens Petersen - 0.12.3.2-6 - rebuild for cmark-gfm-0.2.2: fixes exponential parse (#1854329) --------------------------------------------------------------------------------References: [ 1 ] Bug #1854328 - CVE-2020-5238 cmark: Exponential time to parse certain inputs could lead to DoS. https://bugzilla.redhat.com/show_bug.cgi?id=1854328 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-1eaffe0013' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Oct 06, 2020
•Critical
Fedora
89
security advisoryfedoraupdateFedora 33: Advisory for Gitit Update on CVE-2020-5238 DoS Threat
Security fix for CVE-2020-5238 - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 - also update pandoc-citeproc to 0.17.0.1 https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5-hc85. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2020-c39d7a562c 2020-09-29 00:15:09.214565 --------------------------------------------------------------------------------Name : gitit Product : Fedora 33 Version : 0.13.0.0 Release : 4.fc33 URL : https://hackage.haskell.org/package/gitit Summary : Wiki using happstack, git or darcs, and pandoc Description : Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line tools or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in (extended) markdown, reStructuredText, LaTeX, HTML, or literate Haskell, and exported in ten different formats, including LaTeX, ConTeXt, DocBook, RTF, OpenOffice ODT, and MediaWiki markup. Notable features include * plugins: dynamically loaded page transformations written in Haskell (see "Network.Gitit.Interface") * conversion of TeX math to MathML for display in web browsers * syntax highlighting of source code files and code snippets * Atom feeds (site-wide and per-page) * a library, "Network.Gitit", that makes it simple to include a gitit wiki in any happstack application You can see a running demo at . For usage information: 'gitit --help'. --------------------------------------------------------------------------------Update Information: Security fix for CVE-2020-5238 - ghc-cmark-gfm updated to 0.2.2 which rebases the bundled cmark-gfm to 0.29.0.gfm.1 - also update pandoc-citeproc to0.17.0.1 https://github.com/github/cmark-gfm/security/advisories/GHSA-7gc6-9qr5-hc85 --------------------------------------------------------------------------------ChangeLog: * Sat Sep 19 2020 Jens Petersen - 0.13.0.0-4 - rebuild for pandoc: cmark-gfm-0.2.2 fixes exponential parse (#1854329) --------------------------------------------------------------------------------References: [ 1 ] Bug #1854328 - CVE-2020-5238 cmark: Exponential time to parse certain inputs could lead to DoS. https://bugzilla.redhat.com/show_bug.cgi?id=1854328 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2020-c39d7a562c' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Sep 28, 2020
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!