Summary: | <dev-python/mistune-0.8.3: Cross-site-scripting vulnerability (CVE-2017-16876) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Marius Brehler <marius.brehler+gentoo> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | trivial | CC: | python |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://snyk.io/vuln/SNYK-PYTHON-MISTUNE-40765 | ||
See Also: | https://bugs.gentoo.org/show_bug.cgi?id=635270 | ||
Whiteboard: | B4 [noglsa cve] | ||
Package list: | Runtime testing required: | --- |
Description
Marius Brehler
2017-11-30 15:54:03 UTC
@ Maintainer(s): Please bump to >=dev-python/mistune-0.8.1! The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0fe68a60852a6935b9d93bca2c5708409f963d3e commit 0fe68a60852a6935b9d93bca2c5708409f963d3e Author: Virgil Dupras <vdupras@gentoo.org> AuthorDate: 2018-09-19 15:24:32 +0000 Commit: Virgil Dupras <vdupras@gentoo.org> CommitDate: 2018-09-19 15:24:32 +0000 dev-python/mistune: vump to 0.8.3 Bug: https://bugs.gentoo.org/639298 Bug: https://bugs.gentoo.org/635270 Package-Manager: Portage-2.3.49, Repoman-2.3.10 dev-python/mistune/Manifest | 1 + dev-python/mistune/mistune-0.8.3.ebuild | 28 ++++++++++++++++++++++++++++ 2 files changed, 29 insertions(+) Marius: tests passed fine under all supported python implementations on my system. If you have a failure, could you please attach its log here? Otherwise, mistune 0.8.3 stabilization in progress in bug 635270. Stabilization and cleanup done. |