UbuntuUpdates.org

Package "mako"

Name: mako

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • documentation for the Mako Python library
  • fast and lightweight templating for the Python 3 platform

Latest version: 1.1.3+ds1-2ubuntu0.1
Release: jammy (22.04)
Level: security
Repository: main

Links



Other versions of "mako" in Jammy

Repository Area Version
base main 1.1.3+ds1-2
updates main 1.1.3+ds1-2ubuntu0.1

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 1.1.3+ds1-2ubuntu0.1 2022-09-21 14:07:29 UTC

  mako (1.1.3+ds1-2ubuntu0.1) jammy-security; urgency=medium

  * SECURITY UPDATE: Regular Expression DoS
    - debian/patches/CVE-2022-40023.patch: fix tag regexp to match quoted groups correctly
      in mako/lexer.py.
    - CVE-2022-40023

 -- Leonidas Da Silva Barbosa <email address hidden> Mon, 19 Sep 2022 07:21:25 -0300

CVE-2022-40023 Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse. This also affects babelplugin



About   -   Send Feedback to @ubuntu_updates