Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -4 articles for you...
89
security advisoryfedoraupdateFedora 44 Glow 2.1.2 Important CVE Fixes Advisory 2026-423a143483
Update to version 2.1.2. This also updates some of the vendored dependencies to fix CVEs, as well as building with the latest golang to fix even more CVEs.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-423a143483 2026-05-01 03:11:02.715744+00:00 -------------------------------------------------------------------------------- Name : glow Product : Fedora 44 Version : 2.1.2 Release : 1.fc44 URL : https://github.com/charmbracelet/glow Summary : Terminal based markdown reader Description : Glow is a terminal based markdown reader designed from the ground up to bring out the beauty\u2014and power\u2014of the CLI. Use it to discover markdown files, read documentation directly on the command line. Glow will find local markdown files in subdirectories or a local Git repository. -------------------------------------------------------------------------------- Update Information: Update to version 2.1.2. This also updates some of the vendored dependencies to fix CVEs, as well as building with the latest golang to fix even more CVEs. -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 22 2026 Carl George - 2.1.2-1 - Update to version 2.1.2 rhbz#2457076 - Update vendored goldmark to 1.7.17 to resolve CVE-2026-5160 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2457076 - glow-2.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2457076 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-423a143483' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used bythe Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fedora 44 glow update 2.1.2 fixing CVEs with latest dependencies. Ensure system security now!. Fedora glow update scan fix CVE. . Severity: Important. LinuxSecurity.com Team
May 01, 2026
•Important
Fedora
89
security advisoryfedoraupdateFedora 43 Glow 2.1.2 Release Updated on 2026-6d67b00ef1 CVE Patches
Update to version 2.1.2. This also updates some of the vendored dependencies to fix CVEs, as well as building with the latest golang to fix even more CVEs.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-6d67b00ef1 2026-05-01 03:01:50.286553+00:00 -------------------------------------------------------------------------------- Name : glow Product : Fedora 43 Version : 2.1.2 Release : 1.fc43 URL : https://github.com/charmbracelet/glow Summary : Terminal based markdown reader Description : Glow is a terminal based markdown reader designed from the ground up to bring out the beauty\u2014and power\u2014of the CLI. Use it to discover markdown files, read documentation directly on the command line. Glow will find local markdown files in subdirectories or a local Git repository. -------------------------------------------------------------------------------- Update Information: Update to version 2.1.2. This also updates some of the vendored dependencies to fix CVEs, as well as building with the latest golang to fix even more CVEs. -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 22 2026 Carl George - 2.1.2-1 - Update to version 2.1.2 rhbz#2457076 - Update vendored goldmark to 1.7.17 to resolve CVE-2026-5160 * Sun Mar 22 2026 Carl George - 2.1.1-10 - Adopt go-vendor-tools * Mon Feb 2 2026 Maxwell G - 2.1.1-9 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Fri Jan 16 2026 Fedora Release Engineering - 2.1.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Oct 10 2025 Alejandro Sez - 2.1.1-7 - rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2408174 - CVE-2025-58189 glow: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2408174 [ 2 ] Bug #2409644- CVE-2025-61723 glow: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2409644 [ 3 ] Bug #2410595 - CVE-2025-58185 glow: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2410595 [ 4 ] Bug #2411493 - CVE-2025-58188 glow: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-43] https://bugzilla.redhat.com/show_bug.cgi?id=2411493 [ 5 ] Bug #2457076 - glow-2.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2457076 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-6d67b00ef1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Fedora 43 glow 2.1.2 update addresses CVE issues and dependency upgrades for terminal-based markdown reading.. Fedora 43 glow, terminal markdown reader, CVE updates, Fedora security advisory. . Severity: Important. LinuxSecurity.com Team
May 01, 2026
•Important
Fedora
89
security advisoryfedoraupdateFedora 42 Glow 2.1.2 Update FEDORA-2026-9d0e7df23a CVE Fixes
Update to version 2.1.2. This also updates some of the vendored dependencies to fix CVEs, as well as building with the latest golang to fix even more CVEs.. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9d0e7df23a 2026-05-01 01:22:47.586705+00:00 -------------------------------------------------------------------------------- Name : glow Product : Fedora 42 Version : 2.1.2 Release : 1.fc42 URL : https://github.com/charmbracelet/glow Summary : Terminal based markdown reader Description : Glow is a terminal based markdown reader designed from the ground up to bring out the beauty\u2014and power\u2014of the CLI. Use it to discover markdown files, read documentation directly on the command line. Glow will find local markdown files in subdirectories or a local Git repository. -------------------------------------------------------------------------------- Update Information: Update to version 2.1.2. This also updates some of the vendored dependencies to fix CVEs, as well as building with the latest golang to fix even more CVEs. -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 22 2026 Carl George - 2.1.2-1 - Update to version 2.1.2 rhbz#2457076 - Update vendored goldmark to 1.7.17 to resolve CVE-2026-5160 * Sun Mar 22 2026 Carl George - 2.1.1-10 - Adopt go-vendor-tools * Mon Feb 2 2026 Maxwell G - 2.1.1-9 - Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26 * Fri Jan 16 2026 Fedora Release Engineering - 2.1.1-8 - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild * Fri Oct 10 2025 Alejandro Sez - 2.1.1-7 - rebuild * Fri Aug 15 2025 Maxwell G - 2.1.1-6 - Rebuild for golang-1.25.0 * Fri Aug 15 2025 Maxwell G - 2.1.1-5 - Revert "Rebuild for golang-1.25.0" * Fri Aug 15 2025 Maxwell G - 2.1.1-4 - Rebuild for golang-1.25.0 * Thu Jul 24 2025 Mikel Olasagasti Uranga - 2.1.1-3 - Set the correct goipath * Wed Jul 232025 Fedora Release Engineering - 2.1.1-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2375621 - glow: mapstructure May Leak Sensitive Information [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2375621 [ 2 ] Bug #2398694 - CVE-2025-47910 glow: CrossOriginProtection bypass in net/http [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2398694 [ 3 ] Bug #2399375 - CVE-2025-47906 glow: Unexpected paths returned from LookPath in os/exec [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399375 [ 4 ] Bug #2399713 - CVE-2025-11065 glow: Go-viper's mapstructure May Leak Sensitive Information in Logs in github.com/go-viper/mapstructure [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2399713 [ 5 ] Bug #2407898 - CVE-2025-58189 glow: go crypto/tls ALPN negotiation error contains attacker controlled information [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2407898 [ 6 ] Bug #2409367 - CVE-2025-61723 glow: Quadratic complexity when parsing some invalid inputs in encoding/pem [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2409367 [ 7 ] Bug #2410317 - CVE-2025-58185 glow: Parsing DER payload can cause memory exhaustion in encoding/asn1 [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2410317 [ 8 ] Bug #2411218 - CVE-2025-58188 glow: Panic when validating certificates with DSA public keys in crypto/x509 [fedora-42] https://bugzilla.redhat.com/show_bug.cgi?id=2411218 [ 9 ] Bug #2457076 - glow-2.1.2 is available https://bugzilla.redhat.com/show_bug.cgi?id=2457076 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9d0e7df23a' at the command line. For more information, refer to the dnf documentation availableat http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- . Glow for Fedora 42 updates to version 2.1.2, fixing CVEs and dependencies for improved terminal markdown reading.. Glow Markdown Reader Update, Fedora 42 Security Advisory, Golang CVE Fixes. . Severity: Informational. LinuxSecurity.com Team
May 01, 2026
•Informational
Fedora
89
security advisorymedium severitymarkdownFedora 38: FEDORA-2023-035d5910b9 Medium: rust-askama Security Updates
- Update comrak to version 0.18.0. - Disable the unused markdown support in askama and askama_shared crates, which depends on an ancient version of comrak. This update also includes fixes for two medium-severity security issues in comrak (CVE-2023-28631 and CVE-2023-28626).. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2023-035d5910b9 2023-04-29 02:52:14.059213 --------------------------------------------------------------------------------Name : rust-askama Product : Fedora 38 Version : 0.11.1 Release : 4.fc38 URL : Summary : Type-safe, compiled Jinja-like templates for Rust Description : Type-safe, compiled Jinja-like templates for Rust. --------------------------------------------------------------------------------Update Information: - Update comrak to version 0.18.0. - Disable the unused markdown support in askama and askama_shared crates, which depends on an ancient version of comrak. This update also includes fixes for two medium-severity security issues in comrak (CVE-2023-28631 and CVE-2023-28626). --------------------------------------------------------------------------------ChangeLog: * Thu Apr 20 2023 Fabio Valentini - 0.11.1-4 - Disable unused markdown support with outdated comrak dependency --------------------------------------------------------------------------------References: [ 1 ] Bug #2094154 - rust-comrak-0.18.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2094154 [ 2 ] Bug #2184923 - CVE-2023-28631 rust-comrak: attacker controlled data in AST nodes is not validated [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2184923 [ 3 ] Bug #2184926 - CVE-2023-28626 rust-comrak: quadratic runtime when parsing Markdown [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2184926 --------------------------------------------------------------------------------This update can be installed with the "dnf" updateprogram. Use su -c 'dnf upgrade --advisory FEDORA-2023-035d5910b9' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 29, 2023
•Medium
Fedora
89
security advisorydenial of servicefedoraFedora 35: 2021-2ea12ae478 Critical: python-markdown2 Denial of Service
#### python-markdown2 2.4.2 #### - [pull #408] Fix for fenced code blocks issue #396 - [pull #410] Be more strict on auto linking urls, RE DOS fix. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2021-2ea12ae478 2021-12-13 17:11:40.075460 --------------------------------------------------------------------------------Name : python-markdown2 Product : Fedora 35 Version : 2.4.2 Release : 1.fc35 URL : https://github.com/trentm/python-markdown2/ Summary : A fast and complete Python implementation of Markdown Description : Markdown is a text-to-HTML filter; it translates an easy-to-read / easy-to-write structured text format into HTML. Markdown's text format is most similar to that of plain text email, and supports features such as headers, emphasis, code blocks, blockquotes, and links. This is a fast and complete Python implementation of the Markdown spec. For information about markdown itself, see https://daringfireball.net/projects/markdown/ --------------------------------------------------------------------------------Update Information: #### python-markdown2 2.4.2 #### - [pull #408] Fix for fenced code blocks issue #396 - [pull #410] Be more strict on auto linking urls, RE DOS fix --------------------------------------------------------------------------------ChangeLog: * Sun Dec 5 2021 Thomas Moschny - 2.4.2-1 - Update to 2.4.2. --------------------------------------------------------------------------------References: [ 1 ] Bug #2028452 - python-markdown2: Regular expression denial of service in auto linking urls https://bugzilla.redhat.com/show_bug.cgi?id=2028452 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2021-2ea12ae478' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Dec 13, 2021
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!