Stay Secure with the Latest Linux Advisories

security advisoryFedoradependency management

Fedora 37: 2022-e4f5866111 Low: python-mistune08 Markdown Compatibility

- updates `mistune` to 2.0.4 - `m2r` updated to pin dependency to `mistune < 2` - new package: `python-mistune08` compatibility package, to be used by dependents that cannot use the new mistune (namely `nbconvert`) - new package: `python-sphinx-typlog-theme`, needed to build `mistune` 2.x documentation ---- Compatibility package for mistune 0.8, so we can update mistune to 2x without. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-e4f5866111 2022-11-10 22:04:44.630073 --------------------------------------------------------------------------------Name : python-mistune08 Product : Fedora 37 Version : 0.8.4 Release : 7.fc37 URL : https://github.com/lepture/mistune Summary : Markdown parser for Python Description : The fastest markdown parser in pure Python, inspired by marked. --------------------------------------------------------------------------------Update Information: - updates `mistune` to 2.0.4 - `m2r` updated to pin dependency to `mistune < 2` - new package: `python-mistune08` compatibility package, to be used by dependents that cannot use the new mistune (namely `nbconvert`) - new package: `python-sphinx-typlog-theme`, needed to build `mistune` 2.x documentation ----Compatibility package for mistune 0.8, so we can update mistune to 2x without breaking unported dependents like nbconvert --------------------------------------------------------------------------------ChangeLog: * Wed Oct 12 2022 Michel Alexandre Salim - 0.8.4-7 - Add `Obsoletes` to provide an upgrade path - Mark as deprecated() * Tue Oct 11 2022 Michel Alexandre Salim - 0.8.4-6 - New python-mistune08 compatibility package, forked off python-mistune * Fri Jul 22 2022 Fedora Release Engineering - 0.8.4-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild * Mon Jun 13 2022 Python Maint - 0.8.4-4 - Rebuilt for Python 3.11 * Fri Jan 21 2022 Fedora Release Engineering - 0.8.4-3 -Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild * Fri Jul 23 2021 Fedora Release Engineering - 0.8.4-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild * Fri Jul 9 2021 Tomas Hrnciar - 0.8.4-1 - Update to 0.8.4 * Fri Jun 4 2021 Python Maint - 0.8.3-16 - Rebuilt for Python 3.10 * Mon Feb 8 2021 Charalampos Stratakis - 0.8.3-15 - Run the tests with pytest instead of nose * Wed Jan 27 2021 Fedora Release Engineering - 0.8.3-14 - Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild --------------------------------------------------------------------------------References: [ 1 ] Bug #1782288 - python-mistune-2.0.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1782288 [ 2 ] Bug #2112232 - CVE-2022-34749 python-mistune: mistune: catastrophic backtracking [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2112232 [ 3 ] Bug #2133872 - Review Request: python-mistune08 - Markdown parser for Python https://bugzilla.redhat.com/show_bug.cgi?id=2133872 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-e4f5866111' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines ListArchives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Fedora 37 introduces an update that includes python-mistune08, boosting markdown parsing to ensure full compatibility with mistune 2.x and enhance overall processing.. Fedora Update, Python Parser, Dependency Management. . Severity: Low. LinuxSecurity.com Team

Nov 10, 2022 •Low Fedora