Bug 827977

Summary:	<dev-python/markdown2-2.4.2: ReDoS on "auto linking urls"
Product:	Gentoo Security	Reporter:	Michał Górny <mgorny>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	IN_PROGRESS ---
Severity:	minor	CC:	python
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:	B3 [glsa?]
Package list:		Runtime testing required:	---
Bug Depends on:	828024
Bug Blocks:

Description Michał Górny archtester

2021-12-02 07:29:55 UTC

From Changelog:

+- [pull #410] Be more strict on auto linking urls, RE DOS fix

It's hard to find anything.  The PR is:

https://github.com/trentm/python-markdown2/pull/410

However, the issue referenced gives 404, so it's probably hidden somehow.  Not sure if it's really ReDOS or XSS.

Comment 1 John Helmert III archtester

2021-12-02 15:59:36 UTC

Thank you! Please stable when ready.

Comment 2 John Helmert III archtester

2021-12-02 22:13:49 UTC

Thank you!

Comment 3 Michał Górny archtester

2021-12-03 08:43:09 UTC

(cleanup done)