766624 – <dev-python/markdown2-2.4.0: ReDoS vulnerabilities (?)

Bug 766624 - <dev-python/markdown2-2.4.0: ReDoS vulnerabilities (?)

Summary: <dev-python/markdown2-2.4.0: ReDoS vulnerabilities (?)

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal minor (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:	B3 [noglsa]
Keywords:

Depends on:
Blocks:

Reported:	2021-01-23 00:30 UTC by Michał Górny
Modified:	2021-01-24 22:03 UTC (History)
CC List:	1 user (show)

See Also:
Package list:	dev-python/markdown2-2.4.0
Runtime testing required:	---

Flags:	nattka: sanity-check+

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Michał Górny archtester

2021-01-23 00:30:17 UTC

From 2.4.0 changelog:

- [pull #387] Regex DoS fixes

Comment 1 Sam James archtester

2021-01-24 20:06:15 UTC

amd64 ppc sparc x86 (ALLARCHES) done

all arches done

Comment 2 John Helmert III archtester

2021-01-24 20:16:19 UTC

Please cleanup.

Comment 3 Larry the Git Cow gentoo-dev

2021-01-24 21:48:27 UTC

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=979e2097c894f86231f982e8bc4e4a83ef502cba

commit 979e2097c894f86231f982e8bc4e4a83ef502cba
Author:     Michał Górny <mgorny@gentoo.org>
AuthorDate: 2021-01-24 20:59:14 +0000
Commit:     Michał Górny <mgorny@gentoo.org>
CommitDate: 2021-01-24 21:48:23 +0000

    dev-python/markdown2: Remove old
    
    Bug: https://bugs.gentoo.org/766624
    Signed-off-by: Michał Górny <mgorny@gentoo.org>

 dev-python/markdown2/Manifest                |  1 -
 dev-python/markdown2/markdown2-2.3.10.ebuild | 30 ----------------------------
 2 files changed, 31 deletions(-)

Comment 4 John Helmert III archtester

2021-01-24 21:54:52 UTC

Thanks!

Comment 5 Sam James archtester

2021-01-24 22:03:47 UTC

GLSA vote: no!

Thanks!