FEDORA-2023-b37722768e

Details

Update comrak to version 0.18.0.
Disable the unused markdown support in askama and askama_shared crates, which depends on an ancient version of comrak.

This update also includes fixes for two medium-severity security issues in comrak (CVE-2023-28631 and CVE-2023-28626).

Affected Packages(42 packages)

comrak

Fedora 36

Fixed in:

0.18.0-1.fc36

comrak-debuginfo

Fedora 36

Fixed in:

0.18.0-1.fc36

rust-askama

Fedora 36

Fixed in:

0.11.1-4.fc36

rust-askama+config-devel

Fedora 36

Fixed in:

0.11.1-4.fc36

rust-askama+default-devel

Fedora 36

Fixed in:

0.11.1-4.fc36

rust-askama+humansize-devel

Fedora 36

Fixed in:

0.11.1-4.fc36

rust-askama+mime-devel

Fedora 36

Fixed in:

0.11.1-4.fc36

rust-askama+mime_guess-devel

Fedora 36

Fixed in:

0.11.1-4.fc36

rust-askama+num-traits-devel

Fedora 36

Fixed in:

0.11.1-4.fc36

rust-askama+serde-json-devel

Fedora 36

Fixed in:

0.11.1-4.fc36

References

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2094154

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2184923

REPORT

https://bugzilla.redhat.com/show_bug.cgi?id=2184926