* bsc#1227690 Cross-References: * CVE-2024-38526 . # Security update for ghc-pandoc Announcement ID: SUSE-SU-2025:02037-1 Release Date: 2025-06-20T09:40:29Z Rating: important References: * bsc#1227690 Cross-References: * CVE-2024-38526 CVSS scores: * CVE-2024-38526 ( SUSE ): 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L Affected Products: * openSUSE Leap 15.5 * openSUSE Leap 15.6 * SUSE Linux Enterprise Desktop 15 SP6 * SUSE Linux Enterprise Desktop 15 SP7 * SUSE Linux Enterprise Real Time 15 SP6 * SUSE Linux Enterprise Real Time 15 SP7 * SUSE Linux Enterprise Server 15 SP6 * SUSE Linux Enterprise Server 15 SP7 * SUSE Linux Enterprise Server for SAP Applications 15 SP6 * SUSE Linux Enterprise Server for SAP Applications 15 SP7 * SUSE Package Hub 15 15-SP6 * SUSE Package Hub 15 15-SP7 An update that solves one vulnerability can now be installed. ## Description: This update for ghc-pandoc fixes the following issues: * CVE-2024-38526: Fixed Polyfill Supply Chain Attack (bsc#1227690). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2025-2037=1 * openSUSE Leap 15.6 zypper in -t patch openSUSE-SLE-15.6-2025-2037=1 * SUSE Package Hub 15 15-SP6 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2025-2037=1 * SUSE Package Hub 15 15-SP7 zypper in -t patch SUSE-SLE-Module-Packagehub-Subpackages-15-SP7-2025-2037=1 ## Package List: * openSUSE Leap 15.5 (aarch64 ppc64le s390x x86_64) * ghc-pandoc-3.1.11.1-150500.11.6.1 * ghc-pandoc-devel-3.1.11.1-150500.11.6.1 * openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64) * ghc-pandoc-3.1.11.1-150500.11.6.1 * ghc-pandoc-devel-3.1.11.1-150500.11.6.1 * SUSE Package Hub 15 15-SP6 (aarch64 ppc64le s390x x86_64) *ghc-pandoc-3.1.11.1-150500.11.6.1 * ghc-pandoc-devel-3.1.11.1-150500.11.6.1 * SUSE Package Hub 15 15-SP7 (aarch64 ppc64le s390x x86_64) * ghc-pandoc-3.1.11.1-150500.11.6.1 * ghc-pandoc-devel-3.1.11.1-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2024-38526.html * https://bugzilla.suse.com/show_bug.cgi?id=1227690 . A crucial security update for ghc-pandoc has been released to address vulnerabilities related to CVE-2024-38526, urging users to take immediate action. SUSE, ghc-pandoc, patch instructions, Polyfill Attack, CVE-2024-38526. . Severity: Important. LinuxSecurity.com Team
Update for security reasons. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2016-aa394a130e 2016-09-21 15:50:18.285897 -------------------------------------------------------------------------------- Name : nodejs-string-dot-prototype-dot-repeat Product : Fedora 23 Version : 0.2.0 Release : 2.fc23 URL : https://github.com/mathiasbynens/String.prototype.repeat Summary : A robust & optimized `String.prototype.repeat` polyfill Description : A robust & optimized `String.prototype.repeat` polyfill, based on the ECMAScript 6 specification. -------------------------------------------------------------------------------- Update Information: Update for security reasons -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update nodejs-string-dot-prototype-dot-repeat' at the command line. For more information, refer to "Managing Software with yum", available at . All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Get the latest Linux and open source security news straight to your inbox.