Stay Secure with the Latest Linux Advisories

security advisoryFedorapython-mistune

Fedora 37: 2022-e4f5866111 Moderate: Python-M2R Update Overview

- updates `mistune` to 2.0.4 - `m2r` updated to pin dependency to `mistune < 2` - new package: `python-mistune08` compatibility package, to be used by dependents that cannot use the new mistune (namely `nbconvert`) - new package: `python-sphinx-typlog-theme`, needed to build `mistune` 2.x documentation ---- Compatibility package for mistune 0.8, so we can update mistune to 2x without. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-e4f5866111 2022-11-10 22:04:44.630073 --------------------------------------------------------------------------------Name : python-m2r Product : Fedora 37 Version : 0.2.1 Release : 12.20190604git66f4a5a.fc37 URL : https://github.com/miyakogi/m2r Summary : Markdown to reStructuredText converter Description : %{desc} --------------------------------------------------------------------------------Update Information: - updates `mistune` to 2.0.4 - `m2r` updated to pin dependency to `mistune < 2` - new package: `python-mistune08` compatibility package, to be used by dependents that cannot use the new mistune (namely `nbconvert`) - new package: `python-sphinx-typlog-theme`, needed to build `mistune` 2.x documentation ----Compatibility package for mistune 0.8, so we can update mistune to 2x without breaking unported dependents like nbconvert --------------------------------------------------------------------------------ChangeLog: * Thu Oct 13 2022 Michel Alexandre Salim 0.2.1-12.20190604git66f4a5a - Lock mistune version (backporting PR #43) --------------------------------------------------------------------------------References: [ 1 ] Bug #1782288 - python-mistune-2.0.4 is available https://bugzilla.redhat.com/show_bug.cgi?id=1782288 [ 2 ] Bug #2112232 - CVE-2022-34749 python-mistune: mistune: catastrophic backtracking [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2112232 [ 3 ] Bug #2133872 - Review Request:python-mistune08 - Markdown parser for Python https://bugzilla.redhat.com/show_bug.cgi?id=2133872 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-e4f5866111' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . The recent update for Fedora's python-m2r brings significant enhancements and introduces new compatible versions for the documentation of mistune 2.x.. Python M2R Update,Fedora Software Update,Mistune Compatibility,Markdown Converter,Python Documentation. . Severity: Important. LinuxSecurity.com Team

Nov 10, 2022 •Important Fedora