Stay Secure with the Latest Linux Advisories

security advisoryfedoracritical

Fedora 38: 2024-6ad6b9f417 Critical: Security Fixes for Hakyll

Security fix for CVE-2023-35936 and CVE-2023-38745 pandoc: backport fixes for CVE-2023-35936 and CVE-2023-38745 base64 now packaged in Fedora. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-6ad6b9f417 2024-03-31 01:53:51.907786 -------------------------------------------------------------------------------- Name : ghc-hakyll Product : Fedora 38 Version : 4.16.2.0 Release : 1.fc38 URL : https://hackage.haskell.org/package/hakyll Summary : A static website compiler library Description : Hakyll is a static website compiler library. It provides you with the tools to create a simple or advanced static website using a Haskell DSL and formats such as markdown or RST. You can find more information, including a tutorial, on the website: . -------------------------------------------------------------------------------- Update Information: Security fix for CVE-2023-35936 and CVE-2023-38745 pandoc: backport fixes for CVE-2023-35936 and CVE-2023-38745 base64 now packaged in Fedora -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 28 2023 Jens Petersen - 4.16.2.0-1 - https://hackage.haskell.org/package/hakyll-4.16.2.0/changelog * Sun Jul 23 2023 Jens Petersen - 4.16.0.0-1 - https://hackage.haskell.org/package/hakyll-4.16.0.0/changelog * Wed Jul 19 2023 Fedora Release Engineering - 4.15.1.1-5 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild -------------------------------------------------------------------------------- References: [ 1 ] Bug #2163472 - Review Request: ghc-base64 - A modern RFC 4648-compliant Base64 library https://bugzilla.redhat.com/show_bug.cgi?id=2163472 [ 2 ] Bug #2220873 - TRIAGE pandoc: TRIAGE_CVE-2023-35936 pandoc: allows attacker to create or overwrite arbitrary files on the system [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2220873 [ 3 ] Bug#2227034 - CVE-2023-38745 pandoc: allows attacker to create or overwrite arbitrary files on the system [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2227034 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-6ad6b9f417' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Crucial vulnerability patches for pandoc and base64 in Fedora released for ghc-hakyll users. Keep your systems secure!. ghc-hakyll, Fedora update, static website compiler, security fixes. . Severity: Critical. LinuxSecurity.com Team

Mar 31, 2024 •Critical Fedora