It was found that Mako, a Python template library, was vulnerable to a denial of service attack via crafted regular expressions. For Debian 11 bullseye, this problem has been fixed in version . - ----------------------------------------------------------------------- Debian LTS Advisory DLA-4393-1
Mako could be made to denial of service if it received a specially crafted regular expression.. =========================================================================Ubuntu Security Notice USN-5625-2 November 15, 2022 mako vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.10 Summary: Mako could be made to denial of service if it received a specially crafted regular expression. Software Description: - mako: fast and lightweight templating for the Python platform Details: USN-5625-1 fixed a vulnerability in Mako. This update provides the corresponding updates for Ubuntu 22.10. Original advisory details: It was discovered that Mako incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.10: python3-mako 1.1.3+ds1-3ubuntu2.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5625-2 https://ubuntu.com/security/notices/USN-5625-1 CVE-2022-40023 Package Information: https://launchpad.net/ubuntu/+source/mako/1.1.3+ds1-3ubuntu2.1 . Mako might enable service interruptions through specially designed regex; ensure to update promptly to safeguard Ubuntu 22.10 thoroughly.. Denial Of Service, Ubuntu Security, Mako Templating. . Severity: Critical. LinuxSecurity.com Team
It was found that Mako, a Python template library, was vulnerable to a denial of service attack via crafted regular expressions. For Debian 10 buster, this problem has been fixed in version . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3116-1
Mako could be made to denial of service if it received a specially crafted regular expression.. =========================================================================Ubuntu Security Notice USN-5625-1 September 21, 2022 mako vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 ESM Summary: Mako could be made to denial of service if it received a specially crafted regular expression. Software Description: - mako: documentation for the Mako Python library Details: It was discovered that Mako incorrectly handled certain regular expressions. An attacker could possibly use this issue to cause a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: python3-mako 1.1.3+ds1-2ubuntu0.1 Ubuntu 20.04 LTS: python-mako 1.1.0+ds1-1ubuntu2.1 python3-mako 1.1.0+ds1-1ubuntu2.1 Ubuntu 18.04 LTS: python-mako 1.0.7+ds1-1ubuntu0.2 python3-mako 1.0.7+ds1-1ubuntu0.2 Ubuntu 16.04 ESM: python-mako 1.0.3+ds1-1ubuntu1+esm1 python3-mako 1.0.3+ds1-1ubuntu1+esm1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-5625-1 CVE-2022-40023 Package Information: https://launchpad.net/ubuntu/+source/mako/1.1.3+ds1-2ubuntu0.1 https://launchpad.net/ubuntu/+source/mako/1.1.0+ds1-1ubuntu2.1 https://launchpad.net/ubuntu/+source/mako/1.0.7+ds1-1ubuntu0.2 . Ubuntu Security Advisory USN-5625-1 highlights a severe vulnerability in mako that leads to potential denial of service. Ensure to apply the latest updates to mitigate risks.. Mako Denial Service, Ubuntu Security Notice, Mako Vulnerability, System Update. . Severity: Critical.LinuxSecurity.com Team
It was discovered that Mako incorrectly filtered single-quote characters when performing html filtering. An attacker could utilize this to perform cross-site scripting attacks.. ==========================================================Ubuntu Security Notice USN-996-1 September 29, 2010 mako vulnerability CVE-2010-2480 ========================================================== A security issue affects the following Ubuntu releases: Ubuntu 10.04 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 10.04 LTS: python-mako 0.2.5-2ubuntu1.3 In general, a standard system update will make all the necessary changes. Details follow: It was discovered that Mako incorrectly filtered single-quote characters when performing html filtering. An attacker could utilize this to perform cross-site scripting attacks. Updated packages for Ubuntu 10.04: Source archives: Size/MD5: 5622 9cc948447247736d5d37f2ada66f2e59 Size/MD5: 1452 fd281df3c78bc4ca4fb2f1a96a5cf9c9 Size/MD5: 228192 d8ca783630dc5e93970a2075532fa643 Architecture independent packages: Size/MD5: 100918 0df79d97dbd23990c0bb3dbd85e8c5f0 . ==========================================================Ubuntu Security Notice USN-996-1 September. incorrectly, filtered, single-quote, characters, performing, filter. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.