UbuntuUpdates.org

Package "mako"

Name: mako

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • fast and lightweight templating for the Python platform
  • documentation for the Mako Python library
  • fast and lightweight templating for the Python 3 platform

Latest version: 1.0.7+ds1-1ubuntu0.2
Release: bionic (18.04)
Level: security
Repository: main

Links



Other versions of "mako" in Bionic

Repository Area Version
base main 1.0.7+ds1-1
updates main 1.0.7+ds1-1ubuntu0.2

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.0.7+ds1-1ubuntu0.2 2022-09-21 14:07:21 UTC

  mako (1.0.7+ds1-1ubuntu0.2) bionic-security; urgency=medium

  * SECURITY UPDATE: Regular Expression DoS
    - debian/patches/CVE-2022-40023.patch: fix tag regexp to match quoted groups correctly
      in mako/lexer.py.
    - CVE-2022-40023

 -- Leonidas Da Silva Barbosa <email address hidden> Mon, 19 Sep 2022 08:04:38 -0300

CVE-2022-40023 Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin



About   -   Send Feedback to @ubuntu_updates