Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2021:0429-1

Опубликовано: 16 мар. 2021
Источник: suse-cvrf

Описание

Security update for python-markdown2

This update for python-markdown2 fixes the following issues:

Update to 2.4.0 (boo#1181270):

  • [pull #377] Fixed bug breaking strings elements in metadata lists

  • [pull #380] When rendering fenced code blocks, also add the language-LANG class

  • [pull #387] Regex DoS fixes (CVE-2021-26813, boo#1183171)

  • Switch off failing tests (gh#trentm/python-markdown2#388), ignore failing test suite.

update to 2.3.9:

  • [pull #335] Added header support for wiki tables

  • [pull #336] Reset _toc when convert is run

  • [pull #353] XSS fix

  • [pull #350] XSS fix

  • Add patch to fix unsanitized input for cross-site scripting (boo#1171379)

Список пакетов

openSUSE Leap 15.2
python2-markdown2-2.4.0-lp152.2.3.1
python3-markdown2-2.4.0-lp152.2.3.1

Ссылки

Описание

markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time.

Затронутые продукты
openSUSE Leap 15.2:python2-markdown2-2.4.0-lp152.2.3.1
openSUSE Leap 15.2:python3-markdown2-2.4.0-lp152.2.3.1
Ссылки